Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/557b01e3-e91e-3788-b50f-a45035dbf24c.roa
File:                     557b01e3-e91e-3788-b50f-a45035dbf24c.roa (raw, json)
Hash identifier:          zVng3BU4fGLT9IkkHfAti1EpesoUCuHch5RJExVvCvM=
Subject key identifier:   2F:8C:D3:E2:AE:64:52:8C:1C:DF:7D:7C:6C:7D:2A:64:50:5A:86:BE
Certificate issuer:       /CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd
Certificate serial:       010D0C9F4328584B7C875A444194FC5940E6DA80
Authority key identifier: 53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/557b01e3-e91e-3788-b50f-a45035dbf24c.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     11821
IP address blocks:        148.59.150.0/24 maxlen: 24
                          158.51.184.0/22 maxlen: 22
                          205.201.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:5a:44:41:94:fc:59:40:e6:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=4d735290-1114-43b7-97a7-52be5f2940de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:62:06:b0:e5:c6:1d:fd:0a:70:bd:9d:0c:24:
                    eb:d5:3c:0b:a3:f1:dd:8f:fa:6e:ca:9d:3c:32:01:
                    00:e3:54:02:e3:25:68:46:19:0a:59:a8:d0:b0:9b:
                    5e:d8:3f:3d:c8:38:1c:dd:34:bd:1c:1f:93:ef:4d:
                    65:f5:64:36:1a:7a:62:44:97:6a:57:c7:1e:8f:9b:
                    7b:65:f7:d3:ad:59:56:13:bc:6f:de:84:1a:0b:fe:
                    00:95:3a:bb:17:44:42:c1:4b:ed:c1:52:34:0b:5a:
                    d1:78:39:06:8e:af:ee:4d:e2:f1:1c:61:e1:e1:7b:
                    41:c1:51:e1:ce:b2:76:a4:89:8a:a4:cc:58:a8:ec:
                    62:14:a2:d9:90:4d:0d:0c:69:c5:06:7a:ca:19:c0:
                    65:bf:b4:b9:16:e1:6c:2a:f3:13:03:ae:e8:42:4f:
                    83:d0:9b:f9:e3:93:90:e5:42:59:77:fb:4a:94:28:
                    00:8c:b8:19:95:3a:53:72:b8:8c:c5:86:b6:4c:6e:
                    99:ee:23:8e:e7:97:dc:e6:f0:f3:3a:57:03:85:fe:
                    13:6b:ec:e3:be:15:09:29:3c:62:d6:1e:43:8b:b2:
                    85:71:79:04:23:ed:ff:3c:1f:58:60:c3:30:60:45:
                    7f:eb:2d:9c:9c:20:50:8f:29:0b:d3:b1:3c:92:da:
                    6a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8C:D3:E2:AE:64:52:8C:1C:DF:7D:7C:6C:7D:2A:64:50:5A:86:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/557b01e3-e91e-3788-b50f-a45035dbf24c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.crl

            X509v3 Authority Key Identifier:
                keyid:53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.150.0/24
                  158.51.184.0/22
                  205.201.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:8f:62:f1:09:3d:17:30:cb:06:f5:9d:9d:c8:b1:61:13:45:
         1d:09:44:4f:10:27:34:7c:51:ea:c8:7d:9f:33:e1:e6:0a:a2:
         e0:bf:d8:e6:c4:56:0b:b5:07:ff:45:14:e6:7a:ab:9a:88:16:
         28:84:1e:a0:5f:9b:e5:00:8d:b1:ec:4c:93:94:db:03:a9:0d:
         cc:fe:86:8e:3b:b5:70:f2:84:b0:53:31:d7:9a:5a:71:0f:d1:
         22:cc:b9:d3:d8:25:55:34:8e:3e:8b:c6:68:21:41:0b:9c:9e:
         04:d3:e0:c6:bf:9d:2d:b4:b2:e4:4e:a0:27:c3:5e:a5:90:65:
         f8:a7:25:1c:a7:fe:58:4d:29:ca:21:17:37:37:11:fa:01:50:
         1a:c4:ff:ac:9f:d8:5f:73:18:de:22:46:be:9e:ce:ff:ec:3a:
         a1:38:22:94:88:13:d7:10:6c:a4:f1:71:12:ff:a5:cc:93:65:
         5b:0f:a9:f6:21:1f:7b:6c:9c:d9:3e:d8:06:9d:77:2a:3b:77:
         f9:76:b0:fb:b8:a9:af:d5:ca:46:3b:24:be:d8:12:75:51:01:
         1e:63:6e:73:6b:47:00:2b:a6:0a:87:1f:91:66:48:8a:da:d7:
         ac:a5:fa:e4:fc:f5:b9:c2:13:5b:9a:c5:a9:94:89:da:ea:f3:
         2d:05:e1:3f
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEt8h1pEQZT8WUDm2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmMwNTljNGUtOWNiOC00NWNlLWE3MWMtYzNhNGNmMzc5
ZWRkMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk
NGQ3MzUyOTAtMTExNC00M2I3LTk3YTctNTJiZTVmMjk0MGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2IGsOXGHf0KcL2dDCTr1TwLo/Hdj/puyp08
MgEA41QC4yVoRhkKWajQsJte2D89yDgc3TS9HB+T701l9WQ2GnpiRJdqV8cej5t7
ZffTrVlWE7xv3oQaC/4AlTq7F0RCwUvtwVI0C1rReDkGjq/uTeLxHGHh4XtBwVHh
zrJ2pImKpMxYqOxiFKLZkE0NDGnFBnrKGcBlv7S5FuFsKvMTA67oQk+D0Jv545OQ
5UJZd/tKlCgAjLgZlTpTcriMxYa2TG6Z7iOO55fc5vDzOlcDhf4Ta+zjvhUJKTxi
1h5Di7KFcXkEI+3/PB9YYMMwYEV/6y2cnCBQjykL07E8ktpq1QIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFC+M0+KuZFKMHN99fGx9KmRQWoa+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYzA1
OWM0ZS05Y2I4LTQ1Y2UtYTcxYy1jM2E0Y2YzNzllZGQvNTU3YjAxZTMtZTkxZS0z
Nzg4LWI1MGYtYTQ1MDM1ZGJmMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmMwNTljNGUtOWNiOC00NWNlLWE3
MWMtYzNhNGNmMzc5ZWRkLzJjMDU5YzRlLTljYjgtNDVjZS1hNzFjLWMzYTRjZjM3
OWVkZC5jcmwwHwYDVR0jBBgwFoAUU+z9lABv9PFrpVjIbhm02wYcX1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYzA1OWM0ZS05Y2I4LTQ1Y2UtYTcxYy1jM2E0
Y2YzNzllZGQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAlDuWAwQC
njO4AwQAzck2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBACSPYvEJPRcwywb1nZ3IsWETRR0JRE8QJzR8UerI
fZ8z4eYKouC/2ObEVgu1B/9FFOZ6q5qIFiiEHqBfm+UAjbHsTJOU2wOpDcz+ho47
tXDyhLBTMdeaWnEP0SLMudPYJVU0jj6LxmghQQucngTT4Ma/nS20suROoCfDXqWQ
ZfinJRyn/lhNKcohFzc3EfoBUBrE/6yf2F9zGN4iRr6ezv/sOqE4IpSIE9cQbKTx
cRL/pcyTZVsPqfYhH3tsnNk+2Aaddyo7d/l2sPu4qa/VykY7JL7YEnVRAR5jbnNr
RwArpgqHH5FmSIra16yl+uT89bnCE1uaxamUidrq8y0F4T8=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:14:36 2025 by rpki-client