Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61b9d2b1-e209-31a0-a825-d4a80020e005.roa
File:                     61b9d2b1-e209-31a0-a825-d4a80020e005.roa (raw, json)
Hash identifier:          TgSRnQLj1EeFi64L7gaDURSbWGjy/j6hXjHJ/Sz3qcA=
Subject key identifier:   70:3F:41:B4:47:54:F8:05:2F:B4:3D:C3:E4:1C:45:4A:BC:9B:EE:35
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84121FC96751617A8889BB80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61b9d2b1-e209-31a0-a825-d4a80020e005.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        198.45.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:1f:c9:67:51:61:7a:88:89:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b7e82f2e-aa10-4165-9faa-09a26e003314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:10:37:ed:d0:f3:1a:82:fb:d9:c9:c3:34:d1:
                    2b:ef:fb:b1:9c:a7:f2:9d:03:c4:35:7c:4e:8f:dd:
                    e9:71:01:b5:0e:30:23:7a:90:c3:0f:64:14:f6:97:
                    ba:47:84:1f:b4:0e:f5:07:fe:fe:f3:21:e2:d5:82:
                    54:2e:03:73:53:5d:4f:46:a6:ad:19:9c:8f:2d:cd:
                    8e:f8:70:1a:be:c6:7b:af:0a:3b:52:cb:93:fd:98:
                    c8:57:4d:a0:6c:76:b0:f4:e9:c1:74:45:81:71:6e:
                    eb:78:b6:2a:24:23:f2:2e:62:8d:10:d7:8e:74:fd:
                    f3:8f:ce:75:20:0f:9b:df:2b:31:49:0d:de:16:58:
                    28:f1:85:ca:6f:ca:9a:58:fa:7b:65:16:b3:17:4f:
                    5a:a7:24:d7:f9:9b:60:f4:d4:ed:16:a7:69:53:cd:
                    de:a6:e2:a5:28:63:42:be:5b:d5:bd:6b:6b:69:a9:
                    1c:19:22:a6:7f:d0:61:4d:2b:53:77:78:17:4d:84:
                    53:b7:b9:28:41:4b:5c:c3:da:ff:a8:56:b7:88:fb:
                    3f:81:3a:9a:a8:26:aa:64:7b:ee:50:2c:9b:0c:77:
                    e2:58:00:ef:af:3f:35:78:43:39:f1:4c:77:74:bc:
                    5e:33:76:7a:b4:a9:92:1b:40:0f:4b:3e:30:10:df:
                    1b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3F:41:B4:47:54:F8:05:2F:B4:3D:C3:E4:1C:45:4A:BC:9B:EE:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61b9d2b1-e209-31a0-a825-d4a80020e005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:3e:ca:45:5e:f0:6a:6c:4e:7b:c9:65:8a:92:f8:6a:5c:
         bc:f8:6f:5e:ff:05:e6:d4:f5:63:89:cb:25:d8:cc:05:d1:80:
         a3:af:ec:c2:a7:a5:72:99:c3:b4:1e:21:5c:82:a3:88:94:6e:
         e8:aa:5c:7e:bc:fb:cc:11:43:a5:47:f7:47:71:d7:f1:4b:83:
         e9:6c:5b:a4:9a:0c:1a:c3:f6:44:0e:6b:a1:46:94:ed:c0:5a:
         78:94:57:bf:68:34:bc:7e:a9:3b:39:7a:3c:6f:5b:d8:6e:ba:
         a4:65:31:ed:93:d9:af:58:dc:f2:ad:82:cd:4e:1a:ea:8e:9f:
         c7:79:e2:7b:75:c8:e4:50:cc:e3:5f:1a:d4:fc:f0:82:4e:c0:
         9c:ca:69:e4:84:8a:a4:60:a2:e0:78:b5:76:01:b5:c7:d0:7d:
         bc:33:e2:6b:09:6d:06:cb:ef:9f:d2:f2:33:d7:8f:22:f8:c8:
         cf:8c:dd:f6:d6:4d:f2:05:51:c9:0f:81:13:23:e4:3f:bd:f1:
         42:14:56:b3:91:42:b3:fa:a6:9c:2b:ea:18:ca:65:41:e8:06:
         fa:25:c5:a8:bd:d7:59:ec:9c:06:07:b1:e0:80:e8:f9:88:8d:
         c0:d0:21:7f:6d:d8:00:35:ca:06:c3:42:67:19:70:24:b5:5e:
         90:41:4e:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEh/JZ1FheoiJu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YjdlODJmMmUtYWExMC00MTY1LTlmYWEtMDlhMjZlMDAzMzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRA37dDzGoL72cnDNNEr7/uxnKfynQPENXxO
j93pcQG1DjAjepDDD2QU9pe6R4QftA71B/7+8yHi1YJULgNzU11PRqatGZyPLc2O
+HAavsZ7rwo7UsuT/ZjIV02gbHaw9OnBdEWBcW7reLYqJCPyLmKNENeOdP3zj851
IA+b3ysxSQ3eFlgo8YXKb8qaWPp7ZRazF09apyTX+Ztg9NTtFqdpU83epuKlKGNC
vlvVvWtraakcGSKmf9BhTStTd3gXTYRTt7koQUtcw9r/qFa3iPs/gTqaqCaqZHvu
UCybDHfiWADvrz81eEM58Ux3dLxeM3Z6tKmSG0APSz4wEN8bKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHA/QbRHVPgFL7Q9w+QcRUq8m+41MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjFiOWQyYjEtZTIwOS0z
MWEwLWE4MjUtZDRhODAwMjBlMDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADt6PspFXvBqbE57yWWKkvhqXLz4b17/BebU9WOJyyXYzAXRgKOv7MKn
pXKZw7QeIVyCo4iUbuiqXH68+8wRQ6VH90dx1/FLg+lsW6SaDBrD9kQOa6FGlO3A
WniUV79oNLx+qTs5ejxvW9huuqRlMe2T2a9Y3PKtgs1OGuqOn8d54nt1yORQzONf
GtT88IJOwJzKaeSEiqRgouB4tXYBtcfQfbwz4msJbQbL75/S8jPXjyL4yM+M3fbW
TfIFUckPgRMj5D+98UIUVrORQrP6ppwr6hjKZUHoBvolxai911nsnAYHseCA6PmI
jcDQIX9t2AA1ygbDQmcZcCS1XpBBTmE=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:10:50 2025 by rpki-client