Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/2d232c06-adff-33dc-a513-f88329eccb2e.roa
File:                     2d232c06-adff-33dc-a513-f88329eccb2e.roa (raw, json)
Hash identifier:          ZEdZY/+NhSg8sGhYBa3QES9ScDn2a6LzJPeqskPQPAU=
Subject key identifier:   5D:6B:1F:A3:2E:26:10:C0:A4:FD:D0:BE:DB:A8:02:DB:25:47:48:F4
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584B8672FA48E28D95FE44902B00
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/2d232c06-adff-33dc-a513-f88329eccb2e.roa
Signing time:             Wed 15 Oct 2025 02:17:41 +0000
ROA not before:           Wed 15 Oct 2025 02:17:41 +0000
ROA not after:            Tue 13 Jan 2026 03:17:41 +0000
asID:                     63023
IP address blocks:        216.106.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:72:fa:48:e2:8d:95:fe:44:90:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Oct 15 02:17:41 2025 GMT
            Not After : Jan 13 03:17:41 2026 GMT
        Subject: CN=4145126f-9ec9-466d-af12-f4e429d80ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b4:94:c1:88:74:68:44:ea:98:c8:91:e5:9a:
                    89:00:be:09:86:32:dd:75:11:80:ba:cb:5f:bf:c6:
                    35:39:1d:94:37:7d:3a:44:3c:55:ea:f0:ba:10:dd:
                    3d:25:c3:e5:e9:71:e4:3f:e9:5a:c5:3e:e2:1e:d1:
                    85:78:dd:96:84:cf:19:45:9d:4b:1e:7d:a0:33:99:
                    f7:d7:29:38:d2:44:f4:00:c6:31:c9:08:8c:69:5f:
                    2b:b7:45:d6:5b:cc:b8:26:9b:2a:81:21:a6:89:e0:
                    59:46:2c:88:97:c2:43:9f:2a:bf:c1:81:5f:7e:f4:
                    b1:aa:f3:ac:ed:1e:72:6f:62:1f:9d:bf:8c:e4:04:
                    77:c0:f4:a1:3e:84:48:e0:1b:de:61:fa:0b:ed:04:
                    ce:d5:c4:47:42:a4:8a:2f:a8:8b:f4:73:24:8b:fe:
                    0a:f5:f7:e6:cc:0d:47:40:be:f3:15:4c:d2:07:b1:
                    52:37:64:42:b7:6d:32:94:99:83:b2:79:2f:bb:b6:
                    89:ec:a8:a2:7b:35:b3:42:4a:6e:47:6b:b3:86:c9:
                    d1:e4:2d:46:59:7c:53:56:ee:29:c9:c2:12:a4:ec:
                    61:c8:77:7a:8f:b9:bc:69:ed:e2:cd:04:f9:23:3d:
                    fd:1b:85:e2:b8:8d:5e:99:1a:55:19:b1:28:b0:bd:
                    0d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6B:1F:A3:2E:26:10:C0:A4:FD:D0:BE:DB:A8:02:DB:25:47:48:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/2d232c06-adff-33dc-a513-f88329eccb2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ba:26:ca:15:a0:30:cc:ad:3d:c1:59:03:4a:09:1c:c4:78:
         6c:de:5b:60:a2:42:3a:9d:21:8e:fe:9a:2c:1e:73:27:36:2e:
         b1:08:65:4c:a5:7f:cb:5e:b4:5c:9d:e5:28:dd:39:11:75:3e:
         a5:f3:8a:c3:a8:45:15:64:08:81:61:6f:98:80:4b:dd:48:13:
         51:58:a8:68:45:28:67:98:49:93:0f:5b:c1:d9:8c:f1:f2:2a:
         07:b2:6b:e1:2f:ea:b0:4d:a8:82:0d:9b:56:89:e9:31:2f:8d:
         c9:5f:5b:20:0b:5d:2d:2f:0f:d3:d3:38:b7:05:1c:0a:70:b0:
         25:68:9f:7f:fe:09:b0:43:97:f6:8a:14:7d:e6:59:a6:3e:06:
         1d:a6:90:ec:9d:27:08:23:7f:9e:b9:f1:b7:30:44:01:57:39:
         cb:91:81:94:38:bf:f9:88:2f:a4:28:da:3c:a5:42:9d:03:87:
         8f:b0:0d:0b:67:fe:fc:87:f0:c4:3f:58:86:ec:45:48:49:ab:
         8f:a0:0b:ab:0d:0b:24:d2:e1:a2:86:6b:4b:37:2c:ac:72:b0:
         25:17:df:b1:dd:4a:92:86:03:5e:1e:3b:19:3c:57:1a:4e:e4:
         99:86:4a:c9:0b:90:d5:c2:20:f0:1f:c3:db:be:07:c1:9d:2c:
         d1:b3:a8:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGcvpI4o2V/kSQKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz
OWUwMB4XDTI1MTAxNTAyMTc0MVoXDTI2MDExMzAzMTc0MVowLzEtMCsGA1UEAxMk
NDE0NTEyNmYtOWVjOS00NjZkLWFmMTItZjRlNDI5ZDgwZWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrSUwYh0aETqmMiR5ZqJAL4JhjLddRGAustf
v8Y1OR2UN306RDxV6vC6EN09JcPl6XHkP+laxT7iHtGFeN2WhM8ZRZ1LHn2gM5n3
1yk40kT0AMYxyQiMaV8rt0XWW8y4JpsqgSGmieBZRiyIl8JDnyq/wYFffvSxqvOs
7R5yb2Ifnb+M5AR3wPShPoRI4BveYfoL7QTO1cRHQqSKL6iL9HMki/4K9ffmzA1H
QL7zFUzSB7FSN2RCt20ylJmDsnkvu7aJ7KiiezWzQkpuR2uzhsnR5C1GWXxTVu4p
ycISpOxhyHd6j7m8ae3izQT5Iz39G4XiuI1emRpVGbEosL0NCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF1rH6MuJhDApP3QvtuoAtslR0j0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk
ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMmQyMzJjMDYtYWRmZi0z
M2RjLWE1MTMtZjg4MzI5ZWNjYjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk
ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh
MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5
NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Gq7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+6JsoVoDDMrT3BWQNKCRzEeGzeW2CiQjqdIY7+miwecyc2LrEIZUyl
f8tetFyd5SjdORF1PqXzisOoRRVkCIFhb5iAS91IE1FYqGhFKGeYSZMPW8HZjPHy
Kgeya+Ev6rBNqIINm1aJ6TEvjclfWyALXS0vD9PTOLcFHApwsCVon3/+CbBDl/aK
FH3mWaY+Bh2mkOydJwgjf5658bcwRAFXOcuRgZQ4v/mIL6Qo2jylQp0Dh4+wDQtn
/vyH8MQ/WIbsRUhJq4+gC6sNCyTS4aKGa0s3LKxysCUX37HdSpKGA14eOxk8VxpO
5JmGSskLkNXCIPAfw9u+B8GdLNGzqIg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:48 2025 by rpki-client