Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e1fc77f-639e-3273-a5fa-899d78297142.roa
File:                     7e1fc77f-639e-3273-a5fa-899d78297142.roa (raw, json)
Hash identifier:          gSaTN69TUgTqWa+oLx6CDgCvdbTpJaFx4wsRUXNlaTs=
Subject key identifier:   F8:D2:A7:28:5B:28:2C:17:B9:35:60:E8:75:77:A7:D6:67:5C:B5:E4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841202FA204E586AB2454D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e1fc77f-639e-3273-a5fa-899d78297142.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.243.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:02:fa:20:4e:58:6a:b2:45:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=8d60b31e-8391-461f-b8ce-0466f7aae826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a2:81:45:c3:7d:db:3d:82:e7:47:4c:8f:47:
                    ac:d0:a2:56:fe:a4:49:de:ff:34:2a:01:6d:fe:34:
                    1b:04:5d:9b:3c:73:73:d5:5d:cd:91:50:46:58:01:
                    08:16:28:ad:79:36:d7:bc:30:87:d1:3a:61:40:bf:
                    b3:4d:d5:21:04:1a:9d:56:84:1c:dd:75:ce:b4:c4:
                    54:a4:7d:78:73:86:6b:68:48:2f:97:42:c6:c8:a6:
                    09:09:45:cf:6b:b9:62:0a:5d:53:b1:72:e4:8f:5c:
                    63:87:d7:11:cb:47:5f:3b:02:9b:7c:69:d8:bc:b2:
                    fa:90:dd:6f:20:7f:3a:76:83:22:89:cd:a0:0e:1a:
                    94:70:d3:88:90:95:4b:49:b2:e7:14:6c:92:5d:fb:
                    44:ae:39:40:20:58:11:47:3c:04:21:b3:95:e1:3d:
                    e0:10:70:45:72:83:59:dc:45:68:fd:39:3b:b0:a8:
                    c4:7d:8a:54:c7:bd:71:0f:99:48:a7:37:1e:6a:12:
                    1d:9c:0a:2d:2d:6d:b5:24:a0:6e:32:15:26:63:77:
                    12:0b:d4:b1:0d:2a:2f:79:c6:d2:b9:3c:9f:37:ba:
                    1d:d6:d3:8f:0b:05:55:73:eb:a6:f3:82:df:d6:5a:
                    fe:5c:f1:eb:f6:a3:45:8f:0e:d2:ae:ba:73:c0:4a:
                    82:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D2:A7:28:5B:28:2C:17:B9:35:60:E8:75:77:A7:D6:67:5C:B5:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e1fc77f-639e-3273-a5fa-899d78297142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:3a:17:5a:e6:41:d7:51:05:f8:60:94:9c:19:28:14:3d:21:
         f8:34:e5:d8:ba:a3:64:63:03:29:f9:e9:72:f2:29:91:df:37:
         d8:5f:25:ec:e8:4f:f1:6f:81:07:c4:47:5f:e3:cb:06:cb:8c:
         03:5e:30:7e:6e:d7:3c:be:b7:98:2b:04:a9:d6:be:bc:6c:9d:
         4d:49:d7:e8:f8:21:39:81:10:0d:0a:f4:58:16:af:e4:8c:ce:
         1e:e8:5f:20:95:dc:0f:5b:36:63:bf:4a:4b:da:f3:f4:f3:51:
         f6:d7:01:ec:6f:a0:9f:ff:57:bc:b4:eb:ad:99:f5:a9:6e:4c:
         6c:d0:9b:39:68:9b:8c:f6:2e:67:48:2d:e2:be:12:e2:e8:c0:
         c8:ad:79:a8:c6:db:73:c4:51:53:aa:96:72:c4:14:25:c8:46:
         73:ca:b4:2f:b8:9f:4a:8d:ff:17:2c:15:55:4d:7d:a8:ba:40:
         19:38:ea:e5:f8:0e:7f:86:dd:dc:70:19:1e:bf:5f:08:60:f8:
         8a:cf:5a:67:5e:fd:53:e3:0a:9f:c4:d5:fb:de:56:d5:16:6f:
         a0:9a:1f:0b:74:73:e4:93:19:bc:da:dc:54:c4:ea:b1:03:ed:
         58:e9:39:f0:f9:6b:64:5d:85:39:56:2a:3e:53:d2:2e:a0:cd:
         77:5c:62:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgL6IE5YarJFTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
OGQ2MGIzMWUtODM5MS00NjFmLWI4Y2UtMDQ2NmY3YWFlODI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaKBRcN92z2C50dMj0es0KJW/qRJ3v80KgFt
/jQbBF2bPHNz1V3NkVBGWAEIFiiteTbXvDCH0TphQL+zTdUhBBqdVoQc3XXOtMRU
pH14c4ZraEgvl0LGyKYJCUXPa7liCl1TsXLkj1xjh9cRy0dfOwKbfGnYvLL6kN1v
IH86doMiic2gDhqUcNOIkJVLSbLnFGySXftErjlAIFgRRzwEIbOV4T3gEHBFcoNZ
3EVo/Tk7sKjEfYpUx71xD5lIpzceahIdnAotLW21JKBuMhUmY3cSC9SxDSovecbS
uTyfN7od1tOPCwVVc+um84Lf1lr+XPHr9qNFjw7SrrpzwEqCSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPjSpyhbKCwXuTVg6HV3p9ZnXLXkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2UxZmM3N2YtNjM5ZS0z
MjczLWE1ZmEtODk5ZDc4Mjk3MTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALM6F1rmQddRBfhglJwZKBQ9Ifg05di6o2RjAyn56XLyKZHfN9hfJezo
T/FvgQfER1/jywbLjANeMH5u1zy+t5grBKnWvrxsnU1J1+j4ITmBEA0K9FgWr+SM
zh7oXyCV3A9bNmO/Skva8/TzUfbXAexvoJ//V7y0662Z9aluTGzQmzlom4z2LmdI
LeK+EuLowMiteajG23PEUVOqlnLEFCXIRnPKtC+4n0qN/xcsFVVNfai6QBk46uX4
Dn+G3dxwGR6/Xwhg+IrPWmde/VPjCp/E1fveVtUWb6CaHwt0c+STGbza3FTE6rED
7VjpOfD5a2RdhTlWKj5T0i6gzXdcYqc=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:13:24 2025 by rpki-client