Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c84a76a3-703e-3f29-96f5-d3c10efaedcc.roa
File:                     c84a76a3-703e-3f29-96f5-d3c10efaedcc.roa (raw, json)
Hash identifier:          vO93b1eGNf3R54aP23fzIPwvolV+Br4F3WUyhnTRzYQ=
Subject key identifier:   AD:74:23:7A:9F:2C:9A:30:69:C4:B7:32:E7:E0:1A:3B:3E:11:AB:13
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411FE7772BBF23AD1F79900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c84a76a3-703e-3f29-96f5-d3c10efaedcc.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.242.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:fe:77:72:bb:f2:3a:d1:f7:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=abe3b3ec-952c-4fd8-ac55-4caab50afff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:18:40:de:71:1a:69:0f:84:e3:fd:1e:4a:17:
                    54:eb:2e:5e:ec:db:b5:d2:8a:a9:9a:58:04:5f:16:
                    3f:15:6e:6d:10:81:7a:87:f6:5e:c2:58:95:75:a4:
                    5b:1b:0a:e0:1f:38:88:5b:37:ab:bd:84:7f:6e:34:
                    83:59:46:94:6b:db:bb:57:f3:9d:47:02:0f:0f:d1:
                    79:75:ce:47:8a:47:e0:20:84:36:0d:9c:cb:b8:6c:
                    36:21:68:be:58:b2:b7:83:92:0d:37:0b:9d:f5:2f:
                    8b:29:de:69:db:4f:4a:bd:cd:50:26:4e:9b:b1:02:
                    8c:c2:20:3a:e3:ec:94:4d:3e:33:05:ac:42:4a:ab:
                    27:37:46:09:be:4a:0e:82:a9:b1:53:48:4f:40:1c:
                    c8:17:53:d5:c2:b4:85:1e:8b:2c:76:5d:a2:92:f3:
                    c7:f7:a7:85:ff:f3:7c:59:40:3f:ee:f6:ca:43:81:
                    0a:5f:a1:40:b7:87:e5:65:65:0d:d3:d1:ba:af:a4:
                    11:0c:9d:00:4a:c5:d6:61:47:44:f9:6c:36:be:41:
                    2b:d6:0a:55:ad:c7:b3:7d:23:d3:96:ec:18:ca:75:
                    87:fc:b4:61:8a:7e:55:11:5b:0a:b5:e6:15:19:a0:
                    1a:fd:2c:46:19:56:bd:82:f2:c3:17:27:6f:88:bc:
                    ab:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:74:23:7A:9F:2C:9A:30:69:C4:B7:32:E7:E0:1A:3B:3E:11:AB:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c84a76a3-703e-3f29-96f5-d3c10efaedcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ee:af:2a:3c:e3:5f:f5:ae:f1:cf:5c:9e:99:7a:c6:0d:57:
         eb:0b:56:0e:c3:cb:ad:3a:d6:f1:7c:a1:cc:ff:c7:38:42:f1:
         2a:3d:88:11:7b:b8:cb:38:34:50:bd:c3:f8:54:7c:98:69:be:
         26:81:03:39:ea:5f:e6:81:38:c2:3e:1d:90:35:fa:bf:00:41:
         76:aa:98:9e:31:e8:cb:8a:10:23:bc:08:da:32:7c:31:b0:2b:
         f9:c1:bf:d7:49:8e:c9:09:26:90:b8:28:b7:9f:29:c9:3b:11:
         04:de:47:1a:72:57:5c:2d:e8:30:93:87:18:90:fa:06:a7:41:
         32:a3:4d:1c:f8:95:7d:1f:21:4e:f9:c2:3e:2b:48:38:07:81:
         8f:d0:19:00:e1:4f:c4:e6:99:23:47:21:2b:05:d6:d2:2e:7d:
         0e:d9:26:9e:ef:44:cd:1b:d6:06:a3:7d:d1:24:ed:76:ec:d0:
         e4:ab:9b:45:d6:e6:ce:b2:c7:2f:07:94:eb:b8:7a:26:3c:3a:
         41:58:86:d8:6c:08:2f:94:4c:02:38:ff:1e:61:7d:57:c6:f1:
         c9:b4:6b:bf:d0:8b:a8:74:7c:7e:e6:0f:c0:ce:39:fa:6d:7c:
         c9:b1:29:ab:9f:4d:2d:28:de:e9:aa:74:06:6d:44:61:73:61:
         f8:a3:b6:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf53crvyOtH3mQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YWJlM2IzZWMtOTUyYy00ZmQ4LWFjNTUtNGNhYWI1MGFmZmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxhA3nEaaQ+E4/0eShdU6y5e7Nu10oqpmlgE
XxY/FW5tEIF6h/ZewliVdaRbGwrgHziIWzervYR/bjSDWUaUa9u7V/OdRwIPD9F5
dc5HikfgIIQ2DZzLuGw2IWi+WLK3g5INNwud9S+LKd5p209Kvc1QJk6bsQKMwiA6
4+yUTT4zBaxCSqsnN0YJvkoOgqmxU0hPQBzIF1PVwrSFHossdl2ikvPH96eF//N8
WUA/7vbKQ4EKX6FAt4flZWUN09G6r6QRDJ0ASsXWYUdE+Ww2vkEr1gpVrcezfSPT
luwYynWH/LRhin5VEVsKteYVGaAa/SxGGVa9gvLDFydviLyrmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK10I3qfLJowacS3MufgGjs+EasTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzg0YTc2YTMtNzAzZS0z
ZjI5LTk2ZjUtZDNjMTBlZmFlZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPK1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEburyo841/1rvHPXJ6ZesYNV+sLVg7Dy6061vF8ocz/xzhC8So9iBF7
uMs4NFC9w/hUfJhpviaBAznqX+aBOMI+HZA1+r8AQXaqmJ4x6MuKECO8CNoyfDGw
K/nBv9dJjskJJpC4KLefKck7EQTeRxpyV1wt6DCThxiQ+ganQTKjTRz4lX0fIU75
wj4rSDgHgY/QGQDhT8TmmSNHISsF1tIufQ7ZJp7vRM0b1gajfdEk7Xbs0OSrm0XW
5s6yxy8HlOu4eiY8OkFYhthsCC+UTAI4/x5hfVfG8cm0a7/Qi6h0fH7mD8DOOfpt
fMmxKaufTS0o3umqdAZtRGFzYfijtkA=
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:10:12 2025 by rpki-client