Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1590f32-a39a-331e-88e9-b1ae0894683b.roa
File:                     f1590f32-a39a-331e-88e9-b1ae0894683b.roa (raw, json)
Hash identifier:          ++bxD9GAIXe96X/PMvGCHHD3+abJHpkvtXhKztZCzso=
Subject key identifier:   72:F4:9C:6E:5F:B3:B7:12:9A:A1:A7:6D:58:32:E2:FD:E8:F1:C1:C0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84116F0126EC0536F367E0E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1590f32-a39a-331e-88e9-b1ae0894683b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        198.45.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:6f:01:26:ec:05:36:f3:67:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=51ffae5e-9dcf-4569-9978-5cdc275abab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1e:8c:2c:5d:49:e3:2c:b0:c7:12:dc:e7:3f:
                    a9:5b:0d:f2:a6:55:2b:a6:1c:cf:78:2f:c2:4a:a9:
                    ad:e8:02:1c:f2:5d:f2:9d:33:72:83:a6:51:69:ab:
                    85:d8:66:48:90:8b:80:ac:3f:2c:17:24:23:92:eb:
                    25:85:92:b4:55:72:d5:1b:2c:97:fe:2b:09:51:4c:
                    c0:91:50:91:63:c4:e7:17:6b:c0:68:8d:10:2e:42:
                    95:d7:67:61:dd:66:bc:86:6b:75:30:b6:08:d4:0c:
                    66:6e:ab:46:e0:84:ec:6a:8e:84:29:83:d9:6a:45:
                    ec:27:4b:db:ab:60:b5:11:bd:96:ff:3d:6b:20:d3:
                    7f:fc:d1:29:2f:6d:10:5b:5f:ee:27:4f:54:8f:50:
                    e9:49:3b:63:9a:bf:db:69:a7:36:88:2f:62:ae:06:
                    82:05:7a:0e:49:3d:0a:fd:03:3a:cd:f5:4e:ad:90:
                    e1:12:90:dc:70:a8:1e:e1:8c:fc:47:f5:01:8c:95:
                    79:cc:00:97:ca:d8:a3:e8:c7:2d:41:a8:46:62:ad:
                    7f:66:6c:2d:f4:90:be:d2:0a:09:b5:4d:c9:c7:c6:
                    39:7a:08:eb:f4:44:d3:3f:a8:1b:59:79:6a:7c:9b:
                    79:bd:c5:00:d2:cc:22:41:e5:39:e8:ad:6b:df:db:
                    2a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F4:9C:6E:5F:B3:B7:12:9A:A1:A7:6D:58:32:E2:FD:E8:F1:C1:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1590f32-a39a-331e-88e9-b1ae0894683b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:51:57:3c:21:87:15:96:0d:38:69:bc:1d:b9:4b:7e:43:47:
         6f:4a:67:0b:48:4d:ca:b7:6a:1c:76:c6:f7:8b:fe:72:ab:50:
         9b:38:27:4a:82:d0:61:9d:a2:53:3d:43:fb:cb:15:4d:2f:2e:
         d2:5f:47:99:46:e5:9e:cf:89:5c:e6:15:92:57:b9:b2:a8:06:
         5c:15:61:db:8a:a5:2e:9f:23:fb:e4:06:0e:98:fe:f5:3f:3d:
         f8:a8:a4:5d:6e:e5:95:de:b1:59:bb:e6:44:53:74:d6:b1:03:
         25:cb:da:f7:20:1c:73:9c:d6:d9:2f:b8:c4:df:d4:08:ec:16:
         9f:40:21:80:1b:a8:86:04:82:58:c9:7b:a0:69:92:b7:d2:79:
         44:09:ec:51:14:86:d8:2d:12:05:5e:c7:0b:1f:9c:ab:a5:83:
         22:d5:9a:e0:1c:02:4b:1f:a6:1e:e3:29:07:27:eb:0b:1b:87:
         fb:49:90:bf:eb:a4:d5:7b:9f:6c:0a:d1:f1:62:a7:cd:34:23:
         51:a7:66:18:a9:ec:17:42:e2:13:46:42:b5:ef:e9:66:3f:54:
         d5:47:73:b0:ba:be:5f:51:31:4d:7f:61:73:6c:8f:34:82:0f:
         c9:bf:82:6e:6b:ad:0c:ad:fd:b2:d5:3e:fa:32:9e:97:7b:b2:
         89:47:92:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEW8BJuwFNvNn4OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
NTFmZmFlNWUtOWRjZi00NTY5LTk5NzgtNWNkYzI3NWFiYWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR6MLF1J4yywxxLc5z+pWw3yplUrphzPeC/C
Sqmt6AIc8l3ynTNyg6ZRaauF2GZIkIuArD8sFyQjkuslhZK0VXLVGyyX/isJUUzA
kVCRY8TnF2vAaI0QLkKV12dh3Wa8hmt1MLYI1AxmbqtG4ITsao6EKYPZakXsJ0vb
q2C1Eb2W/z1rINN//NEpL20QW1/uJ09Uj1DpSTtjmr/baac2iC9irgaCBXoOST0K
/QM6zfVOrZDhEpDccKge4Yz8R/UBjJV5zACXytij6MctQahGYq1/Zmwt9JC+0goJ
tU3Jx8Y5egjr9ETTP6gbWXlqfJt5vcUA0swiQeU56K1r39sqyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHL0nG5fs7cSmqGnbVgy4v3o8cHAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjE1OTBmMzItYTM5YS0z
MzFlLTg4ZTktYjFhZTA4OTQ2ODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNRVzwhhxWWDThpvB25S35DR29KZwtITcq3ahx2xveL/nKrUJs4J0qC
0GGdolM9Q/vLFU0vLtJfR5lG5Z7PiVzmFZJXubKoBlwVYduKpS6fI/vkBg6Y/vU/
PfiopF1u5ZXesVm75kRTdNaxAyXL2vcgHHOc1tkvuMTf1AjsFp9AIYAbqIYEgljJ
e6BpkrfSeUQJ7FEUhtgtEgVexwsfnKulgyLVmuAcAksfph7jKQcn6wsbh/tJkL/r
pNV7n2wK0fFip800I1GnZhip7BdC4hNGQrXv6WY/VNVHc7C6vl9RMU1/YXNsjzSC
D8m/gm5rrQyt/bLVPvoynpd7solHkkM=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:37 2025 by rpki-client