Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/679482f3-81c1-31cd-a4db-6bedbb6072a4.roa
File:                     679482f3-81c1-31cd-a4db-6bedbb6072a4.roa (raw, json)
Hash identifier:          l/06iLLS1Myv/0wAKuQmX9BgdqI9vleoXObmrAWMNXE=
Subject key identifier:   15:E5:FD:96:A2:03:C3:F0:52:F0:DB:59:06:84:58:DB:20:C6:47:ED
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584B8EACEC997C60FA90A923CD00
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/679482f3-81c1-31cd-a4db-6bedbb6072a4.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     10317
IP address blocks:        204.155.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:ec:99:7c:60:fa:90:a9:23:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=8fa4fa41-25cc-4f19-a16b-b86d7c86614f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:87:35:be:80:73:b3:73:3c:6d:82:55:fe:
                    ad:cf:39:1b:7b:3e:53:56:17:31:63:d5:ef:e7:55:
                    ce:7e:3d:dd:5a:cb:94:35:b2:06:29:c9:78:e3:84:
                    75:d2:1c:02:ab:6e:86:02:75:2f:7b:73:fd:20:e4:
                    be:9a:d7:84:8e:c7:d0:aa:21:82:7a:79:46:e6:9e:
                    22:a2:16:2a:78:d7:3f:3b:74:f0:06:7f:29:b8:ed:
                    b0:72:67:eb:37:20:94:99:86:19:9b:5b:f3:dd:3f:
                    c5:ec:a5:10:3e:f7:d7:39:9f:3a:b1:6f:78:8b:bd:
                    96:c2:0b:5f:e6:83:e1:a3:be:50:33:b6:fd:75:19:
                    44:4f:fb:1c:63:b7:2b:56:aa:d0:0e:bf:b3:3c:4a:
                    64:75:d7:d0:c2:5e:ff:d3:ff:88:d6:ad:94:47:17:
                    54:99:55:da:76:13:7a:61:60:b2:d8:fe:3f:7f:83:
                    c7:8f:e7:89:0d:ec:09:46:96:ac:a8:fb:18:53:74:
                    de:09:36:b1:77:5b:7d:1f:a7:96:99:df:48:a6:8f:
                    0c:3c:0a:92:74:e9:5d:e0:7f:1e:25:d0:1c:7f:af:
                    6f:54:85:53:8c:ea:22:7f:ac:98:f7:ea:aa:4e:94:
                    5c:f6:4f:86:7a:a8:53:9d:5b:86:48:fb:8b:22:36:
                    e9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E5:FD:96:A2:03:C3:F0:52:F0:DB:59:06:84:58:DB:20:C6:47:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/679482f3-81c1-31cd-a4db-6bedbb6072a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:ca:e3:e6:05:41:43:f5:4d:ce:4b:69:51:d2:f2:77:97:53:
         c7:83:c9:48:8e:ba:be:4e:0c:30:a2:0e:7b:5a:2c:04:a1:1b:
         f0:74:05:3b:6d:93:6b:4f:8e:7d:ce:a4:ee:58:2e:7c:66:89:
         d4:2b:f5:44:4a:1d:37:6b:37:b4:a4:70:3f:aa:8a:0c:ab:92:
         98:7f:d6:37:c5:c9:5c:5a:83:d2:b3:5e:66:7f:35:43:7a:8f:
         a5:d9:9c:1b:d6:f2:d6:cd:58:62:d8:f8:1c:a5:57:35:fc:c3:
         f1:29:d1:18:ff:1a:1a:cf:d0:4e:ee:c1:d0:4d:73:4d:3b:20:
         f1:ff:a2:c7:ff:74:cf:d4:a8:35:5e:f8:c4:0b:5d:1d:51:b6:
         f9:ea:50:2e:0d:dd:20:b3:24:83:a6:ea:c8:f3:5f:ee:10:d6:
         dc:8c:d2:d2:48:91:07:80:88:9b:5f:48:e6:ec:0a:3e:45:ed:
         b4:86:55:b7:80:9d:97:d4:88:1c:8a:6f:87:d0:de:00:bd:8f:
         44:5b:42:61:9d:b0:13:d2:03:8a:69:81:ad:0d:76:0d:21:0e:
         42:46:0c:2e:44:c0:57:e3:bb:69:14:a7:3b:76:6d:e3:3a:49:
         8a:a0:eb:3f:72:06:2a:bc:1c:cd:d5:c7:03:44:62:b8:92:30:
         77:6c:39:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOyZfGD6kKkjzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3
NWFiMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
OGZhNGZhNDEtMjVjYy00ZjE5LWExNmItYjg2ZDdjODY2MTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArymHNb6Ac7NzPG2CVf6tzzkbez5TVhcxY9Xv
51XOfj3dWsuUNbIGKcl444R10hwCq26GAnUve3P9IOS+mteEjsfQqiGCenlG5p4i
ohYqeNc/O3TwBn8puO2wcmfrNyCUmYYZm1vz3T/F7KUQPvfXOZ86sW94i72Wwgtf
5oPho75QM7b9dRlET/scY7crVqrQDr+zPEpkddfQwl7/0/+I1q2URxdUmVXadhN6
YWCy2P4/f4PHj+eJDewJRpasqPsYU3TeCTaxd1t9H6eWmd9Ipo8MPAqSdOld4H8e
JdAcf69vVIVTjOoif6yY9+qqTpRc9k+GeqhTnVuGSPuLIjbptQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBXl/ZaiA8PwUvDbWQaEWNsgxkftMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3
MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvNjc5NDgyZjMtODFjMS0z
MWNkLWE0ZGItNmJlZGJiNjA3MmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj
ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3
NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz
NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJt+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALHK4+YFQUP1Tc5LaVHS8neXU8eDyUiOur5ODDCiDntaLAShG/B0BTtt
k2tPjn3OpO5YLnxmidQr9URKHTdrN7SkcD+qigyrkph/1jfFyVxag9KzXmZ/NUN6
j6XZnBvW8tbNWGLY+BylVzX8w/Ep0Rj/GhrP0E7uwdBNc007IPH/osf/dM/UqDVe
+MQLXR1RtvnqUC4N3SCzJIOm6sjzX+4Q1tyM0tJIkQeAiJtfSObsCj5F7bSGVbeA
nZfUiByKb4fQ3gC9j0RbQmGdsBPSA4ppga0Ndg0hDkJGDC5EwFfju2kUpzt2beM6
SYqg6z9yBiq8HM3VxwNEYriSMHdsOew=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:32 2025 by rpki-client