Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe1920aa-c874-33e9-b5e1-43d1843e27eb.roa
File:                     fe1920aa-c874-33e9-b5e1-43d1843e27eb.roa (raw, json)
Hash identifier:          eGnAgLHF0RbOiJ3mGfVIraP9tewk7npDx/hvhOy9jIk=
Subject key identifier:   C1:11:07:12:F9:5E:95:10:04:CB:34:8B:25:5D:A0:0D:A5:E2:CB:B1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411668352207B2E9C6A6940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe1920aa-c874-33e9-b5e1-43d1843e27eb.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.63.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:66:83:52:20:7b:2e:9c:6a:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c1d2addd-9b83-496c-a0e2-b376a8626ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:46:dc:76:0e:da:b0:ca:76:01:af:bf:b3:3c:
                    c8:e3:a3:2b:5a:71:d6:8f:25:29:36:fc:33:f3:89:
                    12:44:0e:00:cc:30:b5:cc:7f:b7:d1:10:10:79:d3:
                    c9:51:7f:89:70:ff:17:50:d4:2e:79:35:2a:ad:23:
                    f5:b0:8d:e6:15:1d:0b:f1:bd:f4:c2:52:94:48:e2:
                    f3:e8:64:84:96:af:df:38:24:5d:d9:24:43:99:e4:
                    11:5b:43:1d:4c:4f:8c:9b:db:a8:57:bc:74:6d:23:
                    d2:f3:d6:bc:9a:89:60:08:f9:2d:cf:30:6e:e9:19:
                    c2:9e:c8:7d:67:0c:b3:fe:a3:24:44:58:33:5a:f0:
                    f6:dc:43:ae:b7:85:be:44:ac:db:c1:97:16:a6:7f:
                    60:2b:69:55:71:d3:82:af:42:c4:f2:f0:2d:8d:e1:
                    c4:35:ea:43:26:6f:53:03:6a:e1:c7:87:c3:01:36:
                    d9:4a:4a:db:d8:eb:00:24:01:87:ff:0e:43:4d:80:
                    18:27:63:fd:25:08:77:5e:5c:bd:70:7e:de:84:44:
                    94:9f:27:86:aa:1b:ea:c0:87:cb:53:4d:51:1d:9d:
                    eb:44:c7:d7:be:a9:3d:3b:7d:8a:45:c4:3d:f2:63:
                    e2:3f:dd:39:a6:73:27:ea:3b:80:3d:bc:45:6e:24:
                    ce:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:11:07:12:F9:5E:95:10:04:CB:34:8B:25:5D:A0:0D:A5:E2:CB:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe1920aa-c874-33e9-b5e1-43d1843e27eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:8c:92:07:92:37:70:c3:60:49:64:eb:39:09:6c:ca:8d:67:
         f3:90:b2:39:9d:af:4d:1a:66:91:64:c2:b4:66:48:53:7e:98:
         d6:77:f3:e6:63:f8:3e:41:2c:fb:a2:c5:01:eb:df:81:04:0d:
         a9:fd:41:4b:a5:b3:f9:ce:28:76:0f:e9:53:09:b1:cd:d0:f4:
         30:f4:c4:7e:ad:d8:79:6f:f3:08:dc:a7:47:6c:c4:2a:72:70:
         cc:b4:c8:c3:71:66:b2:a3:b4:fe:97:6a:0f:a1:4f:a3:56:50:
         89:cf:87:5a:d9:10:b3:17:e1:db:9f:3d:cf:32:f2:be:4e:ce:
         0a:ce:71:6e:65:46:28:78:41:02:3d:f8:d9:c8:ce:39:90:e9:
         2b:36:54:db:ed:f1:1e:f7:36:cd:64:2d:ad:28:d9:53:9e:98:
         46:c6:2b:78:4b:39:a3:6f:3e:7a:38:54:14:ac:0c:4c:d7:b0:
         e2:f9:7b:27:84:23:b0:b3:b5:74:56:4c:cf:6f:f5:0d:2a:81:
         f5:4f:7c:57:bb:cd:a4:1a:dc:65:38:64:79:1f:db:04:9b:80:
         3f:1b:bb:fa:f1:c4:b2:a5:10:00:b1:64:d9:ea:a8:82:1f:dd:
         b8:77:72:88:46:3e:ca:ad:5d:e2:7c:65:5d:97:f9:00:da:69:
         c6:a8:9c:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEWaDUiB7LpxqaUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YzFkMmFkZGQtOWI4My00OTZjLWEwZTItYjM3NmE4NjI2ZmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUbcdg7asMp2Aa+/szzI46MrWnHWjyUpNvwz
84kSRA4AzDC1zH+30RAQedPJUX+JcP8XUNQueTUqrSP1sI3mFR0L8b30wlKUSOLz
6GSElq/fOCRd2SRDmeQRW0MdTE+Mm9uoV7x0bSPS89a8molgCPktzzBu6RnCnsh9
Zwyz/qMkRFgzWvD23EOut4W+RKzbwZcWpn9gK2lVcdOCr0LE8vAtjeHENepDJm9T
A2rhx4fDATbZSkrb2OsAJAGH/w5DTYAYJ2P9JQh3Xly9cH7ehESUnyeGqhvqwIfL
U01RHZ3rRMfXvqk9O32KRcQ98mPiP905pnMn6juAPbxFbiTOHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMERBxL5XpUQBMs0iyVdoA2l4suxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmUxOTIwYWEtYzg3NC0z
M2U5LWI1ZTEtNDNkMTg0M2UyN2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD8ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKSMkgeSN3DDYElk6zkJbMqNZ/OQsjmdr00aZpFkwrRmSFN+mNZ38+Zj
+D5BLPuixQHr34EEDan9QUuls/nOKHYP6VMJsc3Q9DD0xH6t2Hlv8wjcp0dsxCpy
cMy0yMNxZrKjtP6Xag+hT6NWUInPh1rZELMX4dufPc8y8r5OzgrOcW5lRih4QQI9
+NnIzjmQ6Ss2VNvt8R73Ns1kLa0o2VOemEbGK3hLOaNvPno4VBSsDEzXsOL5eyeE
I7CztXRWTM9v9Q0qgfVPfFe7zaQa3GU4ZHkf2wSbgD8bu/rxxLKlEACxZNnqqIIf
3bh3cohGPsqtXeJ8ZV2X+QDaacaonFw=
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:34:16 2025 by rpki-client