Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d4505b2e-0f81-353e-b59a-2e7b7b19c3f9.roa
File:                     d4505b2e-0f81-353e-b59a-2e7b7b19c3f9.roa (raw, json)
Hash identifier:          UaWipnsw2TjUKWyRVzBjSrH+MOt0zUSJPKUUVY8Camk=
Subject key identifier:   63:F1:AD:E5:BB:FC:55:12:F1:B1:BF:D5:DC:8D:65:D2:B9:30:68:39
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841201C0C4EC27AF1561D080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d4505b2e-0f81-353e-b59a-2e7b7b19c3f9.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.243.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:01:c0:c4:ec:27:af:15:61:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=94e18f4d-182e-498b-ab8b-1664662c76d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f7:c0:56:26:ba:b8:ed:4d:90:d5:f3:33:ed:
                    6c:4a:e8:36:4b:ba:4f:b6:6f:de:25:9f:7d:78:d9:
                    5f:c2:40:86:db:31:cc:d2:d7:1a:32:d0:39:7a:bb:
                    50:f6:69:2e:52:c1:24:9b:e2:48:11:a9:cd:ef:b2:
                    e8:63:b5:8d:81:ba:c6:eb:e9:ea:6e:38:a0:18:bd:
                    eb:63:90:06:11:46:26:a9:26:f3:d0:8a:78:32:af:
                    9c:b3:c7:bc:a3:7e:ce:1d:f0:35:c5:4c:55:74:84:
                    74:42:70:01:f9:08:9d:d1:83:5c:64:17:ed:4a:d3:
                    78:d6:02:66:38:d8:40:78:ce:25:2f:7b:31:cc:fe:
                    7c:5c:7c:ea:a4:30:ba:d4:d8:05:89:8a:77:b4:25:
                    cc:f8:c0:4a:50:a7:c4:8b:1b:11:fc:18:f3:cf:17:
                    fd:83:35:90:3a:7d:30:dc:91:fb:d1:09:62:03:11:
                    0e:4d:30:fa:2f:75:51:df:95:21:09:50:9e:50:88:
                    11:af:e5:f1:0c:52:a0:6b:20:ea:8d:7b:7e:71:55:
                    23:8c:13:9c:29:64:09:83:bf:cd:eb:59:b8:9f:e1:
                    73:bb:fd:14:8e:bc:45:2d:fc:9e:d2:ad:f2:91:77:
                    50:4c:a7:b3:7a:75:cc:ec:e3:39:a5:6c:72:6c:a8:
                    34:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F1:AD:E5:BB:FC:55:12:F1:B1:BF:D5:DC:8D:65:D2:B9:30:68:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d4505b2e-0f81-353e-b59a-2e7b7b19c3f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d7:f5:dc:9d:54:c4:fb:cf:34:6c:6f:35:c1:9c:55:87:84:
         24:49:1d:19:00:90:aa:2d:26:0e:ce:50:b7:a0:dc:32:4a:55:
         62:f7:83:4f:d8:69:e3:b5:d7:9b:fd:0a:c6:83:29:27:90:f1:
         5f:42:1a:e9:7f:13:10:61:93:d9:90:2c:1a:18:35:06:66:33:
         90:3b:2c:e7:64:f2:c5:13:2b:da:e6:2d:78:76:e0:65:c7:79:
         21:39:a0:a2:4a:46:4e:ba:78:cf:24:94:ad:52:27:55:99:fc:
         a7:46:b1:51:6a:4b:2d:e2:60:06:14:ba:6f:af:9d:3a:cf:01:
         1b:ee:e4:6e:b5:cf:fa:c1:b5:86:12:ed:68:17:00:cf:52:d7:
         16:4d:60:dd:68:25:b7:ca:83:fb:1a:f6:c7:8c:9c:04:5a:6d:
         b6:ca:d8:1f:56:df:86:2b:5d:c7:12:cd:f4:d8:6b:7a:51:7c:
         b9:87:1f:68:ee:76:b9:f9:0c:90:7e:4d:20:21:5b:00:ab:db:
         d4:3e:af:e1:91:dc:0c:2b:83:64:65:32:c6:bf:6d:6f:66:c9:
         7e:b1:87:d6:fd:41:d6:31:55:4c:da:4e:38:65:40:4e:59:b4:
         84:2c:0d:71:ba:96:13:bd:03:18:97:df:61:26:76:61:c8:92:
         ac:e9:69:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgHAxOwnrxVh0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
OTRlMThmNGQtMTgyZS00OThiLWFiOGItMTY2NDY2MmM3NmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApffAVia6uO1NkNXzM+1sSug2S7pPtm/eJZ99
eNlfwkCG2zHM0tcaMtA5ertQ9mkuUsEkm+JIEanN77LoY7WNgbrG6+nqbjigGL3r
Y5AGEUYmqSbz0Ip4Mq+cs8e8o37OHfA1xUxVdIR0QnAB+Qid0YNcZBftStN41gJm
ONhAeM4lL3sxzP58XHzqpDC61NgFiYp3tCXM+MBKUKfEixsR/Bjzzxf9gzWQOn0w
3JH70QliAxEOTTD6L3VR35UhCVCeUIgRr+XxDFKgayDqjXt+cVUjjBOcKWQJg7/N
61m4n+Fzu/0UjrxFLfye0q3ykXdQTKezenXM7OM5pWxybKg03QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGPxreW7/FUS8bG/1dyNZdK5MGg5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDQ1MDViMmUtMGY4MS0z
NTNlLWI1OWEtMmU3YjdiMTljM2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGTX9dydVMT7zzRsbzXBnFWHhCRJHRkAkKotJg7OULeg3DJKVWL3g0/Y
aeO115v9CsaDKSeQ8V9CGul/ExBhk9mQLBoYNQZmM5A7LOdk8sUTK9rmLXh24GXH
eSE5oKJKRk66eM8klK1SJ1WZ/KdGsVFqSy3iYAYUum+vnTrPARvu5G61z/rBtYYS
7WgXAM9S1xZNYN1oJbfKg/sa9seMnARabbbK2B9W34YrXccSzfTYa3pRfLmHH2ju
drn5DJB+TSAhWwCr29Q+r+GR3Awrg2RlMsa/bW9myX6xh9b9QdYxVUzaTjhlQE5Z
tIQsDXG6lhO9AxiX32EmdmHIkqzpaUo=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:01:53 2025 by rpki-client