Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/bf3ebb54-0633-3bb6-9e6c-6c7d2752b9d2.roa
File:                     bf3ebb54-0633-3bb6-9e6c-6c7d2752b9d2.roa (raw, json)
Hash identifier:          pEgscjFajsGUhH06L6wXjWuohYGm7bqMXDS6Rz+SIPE=
Subject key identifier:   3F:CD:71:8B:5C:9C:D6:CC:94:49:7F:37:90:D3:DD:97:08:96:F7:F8
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584B2331994B0458F7A0E244E6FC
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/bf3ebb54-0633-3bb6-9e6c-6c7d2752b9d2.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     6922
IP address blocks:        204.158.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:99:4b:04:58:f7:a0:e2:44:e6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=eb6c1d7c-1a03-460c-a084-dcad496b1f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dc:41:13:e0:08:d8:22:78:5f:c9:a3:d0:3d:
                    93:49:d2:85:1e:7d:bc:b9:5c:40:53:2a:1c:28:80:
                    96:31:53:d2:c4:f5:93:d0:37:53:35:23:95:a0:dc:
                    af:50:f6:a5:05:c1:c0:ea:c2:e8:03:7e:2a:ab:46:
                    5e:05:c1:13:4c:94:b8:58:11:cf:3c:e9:e3:d9:d7:
                    46:e1:d7:f8:45:18:e6:91:43:d0:18:53:ed:11:9e:
                    8c:99:85:de:a1:67:a3:59:ba:01:27:97:24:d5:7a:
                    86:71:3f:13:3e:87:1a:2e:76:ad:a6:6c:f5:c4:56:
                    0f:7a:80:2a:19:9f:9a:7d:37:94:f4:e7:1b:11:ae:
                    0d:df:69:1f:d1:37:75:d8:8c:99:9a:e4:bb:fd:73:
                    0c:58:55:d5:a6:ad:a2:b8:51:38:b2:b1:79:c0:dc:
                    a3:c7:42:33:ca:ca:3e:19:75:ee:9e:6d:78:17:fb:
                    94:be:dd:79:ff:3c:eb:1a:83:a3:4e:25:8f:37:df:
                    90:65:a4:93:f6:e0:29:02:f3:ef:bb:a8:b1:93:78:
                    d7:ca:27:e8:e8:da:5b:0f:5f:d1:7d:79:f0:51:68:
                    7e:57:9e:f8:57:24:bf:30:cc:5b:85:8b:28:fc:36:
                    cd:5a:d3:38:2c:76:0d:87:7f:16:24:fa:17:4e:77:
                    51:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CD:71:8B:5C:9C:D6:CC:94:49:7F:37:90:D3:DD:97:08:96:F7:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/bf3ebb54-0633-3bb6-9e6c-6c7d2752b9d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.158.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:4a:4e:d5:9b:43:43:8c:04:bb:12:55:98:60:e3:54:17:22:
         65:ad:61:a3:c3:c8:9e:24:0a:d8:5c:3a:55:c9:91:87:fd:31:
         32:1c:71:19:ba:35:ef:4b:be:4a:03:22:ab:c3:a6:a9:e6:ff:
         22:71:08:de:ed:f8:ce:27:8b:01:5d:07:e2:dd:58:56:b5:25:
         34:66:62:93:a1:12:97:1f:6a:a5:11:50:76:13:db:50:a0:f9:
         63:92:2e:1e:83:0c:dc:34:3b:6e:1c:f5:8e:d6:e3:07:74:d8:
         6c:e3:62:40:a1:4c:a2:9b:50:ae:08:db:0a:bb:77:38:f0:3b:
         1f:a6:5d:00:63:d9:1d:f6:66:1f:92:ec:a9:3e:b5:c2:c0:9d:
         22:cf:92:7f:3e:9c:74:ee:96:78:74:f6:d4:ff:da:f6:aa:77:
         47:ef:03:b1:12:fa:ca:4e:89:66:4f:9a:bc:4b:f0:db:b3:6a:
         7a:c0:b9:3e:c6:e6:af:15:08:4e:c6:4a:16:fa:69:1a:49:8b:
         09:44:2e:f4:6f:3d:5a:59:34:a0:b7:a4:83:48:b8:c9:80:8e:
         13:e9:2d:1c:6c:b4:08:1d:37:89:a2:67:55:2b:18:46:af:ed:
         61:69:b8:e0:94:7c:5e:db:dd:d3:8e:b6:9c:5c:30:c8:80:11:
         8e:23:20:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZlLBFj3oOJE5vwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5
MjIxMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk
ZWI2YzFkN2MtMWEwMy00NjBjLWEwODQtZGNhZDQ5NmIxZjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdxBE+AI2CJ4X8mj0D2TSdKFHn28uVxAUyoc
KICWMVPSxPWT0DdTNSOVoNyvUPalBcHA6sLoA34qq0ZeBcETTJS4WBHPPOnj2ddG
4df4RRjmkUPQGFPtEZ6MmYXeoWejWboBJ5ck1XqGcT8TPocaLnatpmz1xFYPeoAq
GZ+afTeU9OcbEa4N32kf0Td12IyZmuS7/XMMWFXVpq2iuFE4srF5wNyjx0Izyso+
GXXunm14F/uUvt15/zzrGoOjTiWPN9+QZaST9uApAvPvu6ixk3jXyifo6NpbD1/R
fXnwUWh+V574VyS/MMxbhYso/DbNWtM4LHYNh38WJPoXTndRhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/NcYtcnNbMlEl/N5DT3ZcIlvf4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx
YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvYmYzZWJiNTQtMDYzMy0z
YmI2LTllNmMtNmM3ZDI3NTJiOWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw
OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk
OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm
ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJ4eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdKTtWbQ0OMBLsSVZhg41QXImWtYaPDyJ4kCthcOlXJkYf9MTIccRm6
Ne9LvkoDIqvDpqnm/yJxCN7t+M4niwFdB+LdWFa1JTRmYpOhEpcfaqURUHYT21Cg
+WOSLh6DDNw0O24c9Y7W4wd02GzjYkChTKKbUK4I2wq7dzjwOx+mXQBj2R32Zh+S
7Kk+tcLAnSLPkn8+nHTulnh09tT/2vaqd0fvA7ES+spOiWZPmrxL8NuzanrAuT7G
5q8VCE7GShb6aRpJiwlELvRvPVpZNKC3pINIuMmAjhPpLRxstAgdN4miZ1UrGEav
7WFpuOCUfF7b3dOOtpxcMMiAEY4jICY=
-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:38 2025 by rpki-client