Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b4f5ac7f-8d57-39c9-b06e-edd04077010b.roa
File:                     b4f5ac7f-8d57-39c9-b06e-edd04077010b.roa (raw, json)
Hash identifier:          Vw9cJNpMOlC9DDY1Lg15wBVDwhr5jCfPQXs+ecomYS0=
Subject key identifier:   16:1A:81:13:0F:62:09:90:86:21:CA:3E:EC:0D:3F:73:14:DE:68:BF
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584B8EACE6263ABE730A3AA45E00
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b4f5ac7f-8d57-39c9-b06e-edd04077010b.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     2734
IP address blocks:        67.212.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:e6:26:3a:be:73:0a:3a:a4:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=19fd5022-4693-499d-8675-5e3b59f322cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:15:d3:ba:87:eb:8d:13:8f:a4:1d:a2:fe:34:
                    82:7a:0e:fb:41:00:b0:7e:c2:99:ac:81:96:8e:50:
                    80:87:4c:8b:03:fd:80:97:d9:a4:f5:ed:45:3d:c2:
                    ba:6c:56:79:f6:81:2b:85:c4:65:7b:d4:2f:14:fe:
                    ee:4a:66:0b:87:53:45:9f:d7:ed:9f:c4:d3:bd:67:
                    e6:01:b6:9b:db:3b:b0:4e:03:da:79:6a:ab:d8:71:
                    06:a8:e7:87:22:c0:71:45:e1:11:e7:2d:b7:1a:a3:
                    e4:ac:c2:64:6f:bb:ef:93:77:d3:8b:de:4a:9b:08:
                    f7:93:42:80:6c:66:74:8d:07:e0:90:6e:6b:5e:9e:
                    0e:32:70:58:1c:7e:df:d4:5c:38:c0:24:8d:ee:a7:
                    39:44:de:0e:f0:24:4a:8a:5e:d1:b7:cb:89:35:5c:
                    5a:8e:c4:8a:fe:d6:da:94:51:db:43:4b:96:8f:86:
                    5b:d4:19:8a:d5:a2:89:f3:53:25:8f:cf:18:1b:b8:
                    e7:7b:d4:9f:76:84:df:95:68:17:e7:37:3c:dd:c4:
                    21:f2:03:3b:50:69:81:48:cb:cb:54:ab:b1:23:d6:
                    59:37:cd:f3:ac:fc:27:f6:62:77:b6:14:76:d6:aa:
                    eb:a6:47:86:1a:1a:40:0e:2c:30:65:cd:cc:c3:7d:
                    df:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1A:81:13:0F:62:09:90:86:21:CA:3E:EC:0D:3F:73:14:DE:68:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b4f5ac7f-8d57-39c9-b06e-edd04077010b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ba:6b:98:8c:cb:be:28:d5:c5:60:f2:a7:83:61:c2:14:5d:
         68:ae:37:f1:0f:fd:50:8d:38:6c:ac:db:37:23:e0:13:3a:e6:
         23:f0:31:81:56:dd:4f:07:02:2d:3d:ec:36:c6:6a:87:6c:fc:
         65:38:37:62:26:3d:35:d4:9a:aa:4c:4f:66:d2:41:30:34:f1:
         83:32:5a:53:ed:3c:d0:fe:e4:56:13:a0:e7:c9:10:32:2f:44:
         7b:7d:43:f1:36:37:42:2b:aa:25:9f:79:fe:63:9d:43:46:0f:
         76:29:74:b2:ea:c4:3e:fe:55:16:4b:3f:79:e2:72:a7:ab:ba:
         f0:5d:5a:6a:cf:b1:6e:a1:cb:3a:07:cf:e6:1f:46:f0:a0:fb:
         8f:bb:fb:8f:70:8e:e9:82:f9:7a:88:20:ee:cb:b1:ad:54:96:
         7b:df:d3:c3:28:50:2c:bf:7c:23:ec:5b:94:e0:95:52:3f:73:
         a7:8b:29:99:ba:c0:e7:5d:b2:b9:d0:94:0e:05:33:5e:f5:a2:
         17:38:09:c3:c7:7b:e7:a9:d0:8f:80:78:23:32:43:01:81:6f:
         83:bc:e5:fd:01:ff:d4:2d:2f:ff:f8:8d:ac:75:0c:a9:2c:ee:
         a4:75:25:14:e5:d2:71:6e:f8:15:6a:01:27:9d:67:5d:e3:6b:
         c7:e3:a2:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOYmOr5zCjqkXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
MTlmZDUwMjItNDY5My00OTlkLTg2NzUtNWUzYjU5ZjMyMmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBXTuofrjROPpB2i/jSCeg77QQCwfsKZrIGW
jlCAh0yLA/2Al9mk9e1FPcK6bFZ59oErhcRle9QvFP7uSmYLh1NFn9ftn8TTvWfm
Abab2zuwTgPaeWqr2HEGqOeHIsBxReER5y23GqPkrMJkb7vvk3fTi95Kmwj3k0KA
bGZ0jQfgkG5rXp4OMnBYHH7f1Fw4wCSN7qc5RN4O8CRKil7Rt8uJNVxajsSK/tba
lFHbQ0uWj4Zb1BmK1aKJ81Mlj88YG7jne9SfdoTflWgX5zc83cQh8gM7UGmBSMvL
VKuxI9ZZN83zrPwn9mJ3thR21qrrpkeGGhpADiwwZc3Mw33frQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBYagRMPYgmQhiHKPuwNP3MU3mi/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvYjRmNWFjN2YtOGQ1Ny0z
OWM5LWIwNmUtZWRkMDQwNzcwMTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9SZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADi6a5iMy74o1cVg8qeDYcIUXWiuN/EP/VCNOGys2zcj4BM65iPwMYFW
3U8HAi097DbGaods/GU4N2ImPTXUmqpMT2bSQTA08YMyWlPtPND+5FYToOfJEDIv
RHt9Q/E2N0IrqiWfef5jnUNGD3YpdLLqxD7+VRZLP3nicqeruvBdWmrPsW6hyzoH
z+YfRvCg+4+7+49wjumC+XqIIO7Lsa1Ulnvf08MoUCy/fCPsW5TglVI/c6eLKZm6
wOddsrnQlA4FM171ohc4CcPHe+ep0I+AeCMyQwGBb4O85f0B/9QtL//4jax1DKks
7qR1JRTl0nFu+BVqASedZ13ja8fjovw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:00:55 2025 by rpki-client