Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48814ae4-6f1e-38ef-886c-c325b8f17548.roa
File:                     48814ae4-6f1e-38ef-886c-c325b8f17548.roa (raw, json)
Hash identifier:          gfJAORvoMtgECLwweP2ZX5QnPuYwJPlTnoJUmKgjd5Q=
Subject key identifier:   09:F5:72:2B:F2:DE:15:50:BA:3C:F8:6D:A0:E7:3C:C0:FB:ED:2B:CC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5571D419016ED810A7B29F00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48814ae4-6f1e-38ef-886c-c325b8f17548.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        207.34.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:d4:19:01:6e:d8:10:a7:b2:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=2b30462c-6c2e-48c3-b5ab-e65ea3968538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2c:29:c5:27:92:fb:fd:ea:89:eb:c9:55:c2:
                    53:54:1b:e1:91:af:e0:97:be:f6:22:8f:ee:93:b3:
                    e9:ec:cf:32:42:ad:05:7b:8c:d2:88:1b:36:32:40:
                    0a:9d:73:ef:77:3e:35:f0:7c:f2:0c:36:73:f4:3a:
                    d0:7d:71:88:96:ce:eb:72:73:d1:7b:4a:11:51:f7:
                    5a:25:e4:91:34:b5:43:f2:2c:d0:7a:d8:8a:7c:57:
                    51:03:c1:7d:f9:eb:8f:c9:f0:ee:82:33:61:a5:83:
                    77:f5:0c:8c:30:6b:e4:1d:cd:09:a2:55:c8:38:12:
                    92:4b:97:0d:48:5a:13:2a:0e:20:2a:19:df:13:3c:
                    61:e0:41:97:c6:3f:c9:a7:54:bd:fe:fc:4b:8d:0e:
                    6d:9d:ec:33:38:9f:03:60:dd:79:12:1f:2e:b2:b1:
                    7a:f6:0a:b7:61:0c:27:23:01:43:64:fe:2b:ba:38:
                    f2:e4:03:9b:f2:aa:b5:91:b6:57:b7:25:cb:9e:a6:
                    54:9e:6a:55:65:af:a9:51:d1:df:9d:ab:15:a8:41:
                    cf:f9:d5:3a:ad:ec:1b:1d:35:89:88:71:e6:37:cd:
                    fe:ba:96:e7:e8:12:7a:05:3d:b4:f6:dc:90:56:b2:
                    af:cf:09:61:97:73:aa:fd:6a:07:ac:c0:d6:c1:71:
                    a5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F5:72:2B:F2:DE:15:50:BA:3C:F8:6D:A0:E7:3C:C0:FB:ED:2B:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48814ae4-6f1e-38ef-886c-c325b8f17548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:9b:55:2e:42:ce:46:58:23:96:b2:f4:27:36:3a:0d:b1:ff:
         04:8f:08:4c:68:74:45:c3:ea:53:5d:f7:fa:6b:eb:32:f0:45:
         8d:d1:c9:4e:23:25:90:76:55:38:30:48:38:2b:d7:29:10:3c:
         e7:58:2f:0b:5c:10:6b:6a:43:40:91:2d:b8:fe:45:36:68:cd:
         01:ed:8c:02:a1:f6:45:15:87:ad:d2:c0:a5:32:ec:ee:66:79:
         6f:0d:48:52:05:03:5c:26:15:20:05:fc:94:f3:d3:63:04:10:
         29:1b:43:19:61:ff:d1:96:8a:d8:e6:1a:7c:a4:15:ae:32:d6:
         e5:4e:58:5c:44:0e:db:e5:4e:61:70:22:a3:3e:8b:69:45:09:
         7d:66:fe:9a:4a:f7:c0:9c:57:6a:93:80:4b:e6:a5:00:41:28:
         9b:05:f1:85:d6:05:06:7c:be:0a:c4:e1:66:f8:1b:73:dd:cf:
         5c:ed:e5:75:b8:46:ed:60:0a:ea:bc:02:e8:5a:1c:09:1f:c9:
         c6:49:24:1d:96:9b:41:2b:3b:fd:fe:32:ee:80:69:47:27:3c:
         40:a7:b8:3a:39:7e:1b:b5:dc:32:b0:ea:fb:c7:ec:f7:19:cd:
         b8:f4:f5:18:fd:da:1c:74:cb:e3:45:d8:a0:70:15:71:cd:bb:
         35:b3:ee:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdQZAW7YEKeynwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk
MmIzMDQ2MmMtNmMyZS00OGMzLWI1YWItZTY1ZWEzOTY4NTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSwpxSeS+/3qievJVcJTVBvhka/gl772Io/u
k7Pp7M8yQq0Fe4zSiBs2MkAKnXPvdz418HzyDDZz9DrQfXGIls7rcnPRe0oRUfda
JeSRNLVD8izQetiKfFdRA8F9+euPyfDugjNhpYN39QyMMGvkHc0JolXIOBKSS5cN
SFoTKg4gKhnfEzxh4EGXxj/Jp1S9/vxLjQ5tnewzOJ8DYN15Eh8usrF69gq3YQwn
IwFDZP4rujjy5AOb8qq1kbZXtyXLnqZUnmpVZa+pUdHfnasVqEHP+dU6rewbHTWJ
iHHmN83+upbn6BJ6BT209tyQVrKvzwlhl3Oq/WoHrMDWwXGlyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAn1civy3hVQujz4baDnPMD77SvMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDg4MTRhZTQtNmYxZS0z
OGVmLTg4NmMtYzMyNWI4ZjE3NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyLdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqbVS5CzkZYI5ay9Cc2Og2x/wSPCExodEXD6lNd9/pr6zLwRY3RyU4j
JZB2VTgwSDgr1ykQPOdYLwtcEGtqQ0CRLbj+RTZozQHtjAKh9kUVh63SwKUy7O5m
eW8NSFIFA1wmFSAF/JTz02MEECkbQxlh/9GWitjmGnykFa4y1uVOWFxEDtvlTmFw
IqM+i2lFCX1m/ppK98CcV2qTgEvmpQBBKJsF8YXWBQZ8vgrE4Wb4G3Pdz1zt5XW4
Ru1gCuq8AuhaHAkfycZJJB2Wm0ErO/3+Mu6AaUcnPECnuDo5fhu13DKw6vvH7PcZ
zbj09Rj92hx0y+NF2KBwFXHNuzWz7ts=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:35:04 2025 by rpki-client