Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c05743f-18f5-3347-bd3a-9eb569f03ff2.roa
File:                     2c05743f-18f5-3347-bd3a-9eb569f03ff2.roa (raw, json)
Hash identifier:          C/CXN2FJazAMxI8gOGzSPc+DS3rvn+HBz0ZIzI7hzF8=
Subject key identifier:   7D:D2:6B:CE:FE:24:07:A3:D4:2B:D0:87:61:37:83:58:DA:33:BB:65
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5B07306422A4CC7D90907D00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c05743f-18f5-3347-bd3a-9eb569f03ff2.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        64.180.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:30:64:22:a4:cc:7d:90:90:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=7fbb6c10-0dca-4496-80b0-2c29c9a0bf73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:cf:28:c6:de:2b:d7:4d:97:f1:40:9e:f8:
                    94:15:ee:11:2b:df:ac:71:cb:d8:6e:96:42:3d:2a:
                    dd:76:83:7b:9d:0f:f7:f0:c6:64:ca:c2:42:b1:23:
                    bd:40:63:58:40:4e:a5:18:af:15:58:d3:7e:43:20:
                    e8:8a:c4:8d:c3:6b:89:15:de:9d:a6:88:67:5d:66:
                    f9:3e:a2:f6:62:96:b7:56:54:e1:e2:d1:32:79:a5:
                    04:5c:0b:db:2f:53:be:7c:f7:8a:7f:ab:a2:fa:ea:
                    8d:78:8e:18:27:c0:f9:e1:35:4c:10:ef:9b:60:b1:
                    3e:21:df:9f:8d:9b:62:10:5d:bd:9b:c0:f7:91:6e:
                    7f:ba:08:df:3e:05:0e:2d:03:49:19:c6:92:6b:e2:
                    29:fb:4f:fe:37:19:b2:f2:4d:2f:6a:ad:4a:0c:df:
                    a9:3b:98:af:e1:c0:95:d0:2f:31:27:9f:9e:64:6b:
                    30:ef:14:57:fd:19:cd:ec:6f:9e:5b:a8:45:97:6e:
                    3a:56:50:d9:2f:d6:db:6e:d5:00:02:45:08:85:3c:
                    87:08:7f:e0:a3:6c:f7:ee:be:64:f8:8d:23:1a:36:
                    4c:d5:e6:90:89:21:11:98:07:c8:38:10:7c:9e:cf:
                    9d:50:4d:57:62:45:ec:00:2d:36:13:88:06:ba:be:
                    35:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D2:6B:CE:FE:24:07:A3:D4:2B:D0:87:61:37:83:58:DA:33:BB:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c05743f-18f5-3347-bd3a-9eb569f03ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:79:01:1e:bc:ce:fa:3e:e7:ea:c4:b4:96:5a:ec:d6:dd:f6:
         ad:2c:46:77:8a:55:1a:48:f7:0e:73:d7:c4:ff:10:87:2d:61:
         40:6b:5f:d2:c1:54:40:a2:18:7e:17:55:51:ed:90:af:0a:82:
         8e:b6:a2:e4:eb:4b:b2:53:d2:70:05:80:4c:fc:f9:ba:1c:63:
         12:b2:86:d1:ef:a3:44:5e:fc:e9:6c:f2:8b:16:8a:3a:d5:10:
         4f:0d:cc:2d:8b:17:ed:04:3b:9c:f6:b0:ab:67:56:fc:bd:b8:
         4c:f4:d0:07:fa:3c:50:97:a7:1e:b1:c6:5b:da:7a:b8:b5:2e:
         69:c8:0e:14:ef:3f:b6:da:9c:64:c4:73:6d:73:33:3d:a7:37:
         13:d8:55:71:c3:35:cc:d2:72:80:ff:0a:ae:2e:47:97:5b:b1:
         72:03:5e:c6:7f:c5:d1:48:80:42:da:3a:00:e4:1e:9f:8b:1e:
         4a:c3:a4:55:05:d0:c2:4c:ab:2e:c8:b4:d8:d1:a2:72:88:b1:
         44:ab:a3:44:dd:16:1c:84:2e:e4:43:a7:b4:93:03:0d:1c:bf:
         a0:e7:ac:86:60:e2:b6:17:ef:af:39:49:32:6e:ee:29:7c:a8:
         83:18:dd:34:06:9b:19:fe:77:59:34:6e:da:c8:97:c3:56:96:
         db:c3:85:ae
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtbBzBkIqTMfZCQfQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
N2ZiYjZjMTAtMGRjYS00NDk2LTgwYjAtMmMyOWM5YTBiZjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO/PKMbeK9dNl/FAnviUFe4RK9+sccvYbpZC
PSrddoN7nQ/38MZkysJCsSO9QGNYQE6lGK8VWNN+QyDoisSNw2uJFd6dpohnXWb5
PqL2Ypa3VlTh4tEyeaUEXAvbL1O+fPeKf6ui+uqNeI4YJ8D54TVMEO+bYLE+Id+f
jZtiEF29m8D3kW5/ugjfPgUOLQNJGcaSa+Ip+0/+Nxmy8k0vaq1KDN+pO5iv4cCV
0C8xJ5+eZGsw7xRX/RnN7G+eW6hFl246VlDZL9bbbtUAAkUIhTyHCH/go2z37r5k
+I0jGjZM1eaQiSERmAfIOBB8ns+dUE1XYkXsAC02E4gGur41BwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFH3Sa87+JAej1CvQh2E3g1jaM7tlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmMwNTc0M2YtMThmNS0z
MzQ3LWJkM2EtOWViNTY5ZjAzZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQLQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASnkBHrzO+j7n6sS0llrs1t32rSxGd4pVGkj3DnPXxP8Qhy1hQGtf0sFU
QKIYfhdVUe2QrwqCjrai5OtLslPScAWATPz5uhxjErKG0e+jRF786WzyixaKOtUQ
Tw3MLYsX7QQ7nPawq2dW/L24TPTQB/o8UJenHrHGW9p6uLUuacgOFO8/ttqcZMRz
bXMzPac3E9hVccM1zNJygP8Kri5Hl1uxcgNexn/F0UiAQto6AOQen4seSsOkVQXQ
wkyrLsi02NGicoixRKujRN0WHIQu5EOntJMDDRy/oOeshmDithfvrzlJMm7uKXyo
gxjdNAabGf53WTRu2siXw1aW28OFrg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:13:19 2025 by rpki-client