Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d698476a-1616-3b2e-8993-db3da3051df8.roa
File:                     d698476a-1616-3b2e-8993-db3da3051df8.roa (raw, json)
Hash identifier:          +mGSs3tR5f+MWglU9nhehLGwKKINq2cupRIfn87GGB4=
Subject key identifier:   5C:21:6B:D1:A0:92:55:0E:86:B1:C4:48:14:D7:6C:80:6C:48:D6:49
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584B1806C6BEA23E321D619D3600
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d698476a-1616-3b2e-8993-db3da3051df8.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     174
IP address blocks:        207.204.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:c6:be:a2:3e:32:1d:61:9d:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=bb4931b4-72d1-4bc8-b0f1-9fc476f7ac1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1f:0e:3c:e5:42:ae:f9:44:04:16:42:50:d1:
                    d2:72:6e:6e:e1:7a:b2:37:98:e4:f3:ea:a3:c3:c1:
                    52:c8:27:fa:28:ca:63:6e:06:28:23:18:72:35:73:
                    73:54:68:b6:13:99:2a:d6:3f:8b:2b:37:ab:cd:ba:
                    1a:1c:81:12:69:0c:48:05:2e:12:75:8e:f4:da:1d:
                    75:4b:fe:67:52:1b:9a:9e:f2:44:c6:85:f4:c4:94:
                    a2:e9:98:9b:c0:d0:ad:d4:8c:8a:17:91:e5:f7:71:
                    b5:7d:cc:bb:5c:c8:72:2e:39:56:4b:af:d2:ec:b0:
                    ae:ab:8f:a9:c3:f1:47:0d:65:52:d8:b1:37:ca:6f:
                    07:ff:a2:d5:1b:cc:6e:80:3c:2f:d3:d2:3d:dd:c5:
                    33:69:d1:48:47:fe:f2:7b:a8:7f:46:36:3f:b5:15:
                    6c:a2:f5:84:0f:d7:ab:47:44:83:d1:bf:ef:c9:d3:
                    aa:19:30:0e:4f:d5:d9:63:5e:3f:6e:e2:cb:ad:6d:
                    cc:de:61:25:9c:2d:d7:74:c1:bc:da:49:50:f6:20:
                    8b:5c:69:64:c8:8d:35:a6:cc:64:49:d8:1a:37:f9:
                    fd:07:af:0b:67:97:c3:2c:97:e4:95:ff:ad:10:9d:
                    95:d0:ca:31:6b:d1:dc:be:31:2c:07:75:ac:73:a7:
                    26:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:21:6B:D1:A0:92:55:0E:86:B1:C4:48:14:D7:6C:80:6C:48:D6:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d698476a-1616-3b2e-8993-db3da3051df8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.204.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:53:4d:03:7a:9b:92:47:92:c0:b9:95:da:7b:da:f0:40:c7:
         82:29:d9:9f:bc:0d:c2:61:76:b2:fa:f1:67:47:1f:bc:3e:a2:
         76:6b:50:63:15:45:4d:a0:f1:aa:cc:75:04:4e:6c:be:2e:2d:
         a4:c7:0a:08:b8:c2:a5:88:c2:64:f9:cb:23:e3:34:71:df:63:
         3a:2c:e4:0a:a8:4d:b3:8e:5f:da:5d:92:54:41:90:aa:01:18:
         61:97:0b:5d:09:9b:b9:d0:98:4e:1c:ba:8c:0e:92:3f:bf:29:
         fb:84:b8:49:43:c6:11:9b:d2:22:12:be:f6:59:26:d8:df:a2:
         69:65:07:d8:b1:02:2d:1a:99:fe:60:cf:d5:2e:21:10:99:94:
         6e:28:6b:b4:a8:50:96:29:2f:c8:dc:af:fb:c4:69:a2:98:04:
         7a:ee:48:87:d5:9f:b7:7b:71:ed:7c:8b:a6:5e:9a:e7:45:fc:
         9b:f2:7b:b4:76:e8:bb:da:92:d4:49:73:7f:b2:11:11:ef:e8:
         ca:74:77:94:c7:51:82:c3:98:c0:f8:cf:1b:45:3d:4c:df:72:
         f7:eb:a8:4e:16:98:02:19:8f:0a:8c:00:93:e3:a4:18:3d:97:
         8c:44:0c:4e:4c:34:81:35:a2:78:59:c8:30:8a:cf:8f:d4:c6:
         39:d6:18:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsa+oj4yHWGdNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
YmI0OTMxYjQtNzJkMS00YmM4LWIwZjEtOWZjNDc2ZjdhYzFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR8OPOVCrvlEBBZCUNHScm5u4XqyN5jk8+qj
w8FSyCf6KMpjbgYoIxhyNXNzVGi2E5kq1j+LKzerzboaHIESaQxIBS4SdY702h11
S/5nUhuanvJExoX0xJSi6ZibwNCt1IyKF5Hl93G1fcy7XMhyLjlWS6/S7LCuq4+p
w/FHDWVS2LE3ym8H/6LVG8xugDwv09I93cUzadFIR/7ye6h/RjY/tRVsovWED9er
R0SD0b/vydOqGTAOT9XZY14/buLLrW3M3mElnC3XdMG82klQ9iCLXGlkyI01psxk
SdgaN/n9B68LZ5fDLJfklf+tEJ2V0Moxa9HcvjEsB3Wsc6cmTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFwha9GgklUOhrHESBTXbIBsSNZJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDY5ODQ3NmEtMTYxNi0z
YjJlLTg5OTMtZGIzZGEzMDUxZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8zlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhTTQN6m5JHksC5ldp72vBAx4Ip2Z+8DcJhdrL68WdHH7w+onZrUGMV
RU2g8arMdQRObL4uLaTHCgi4wqWIwmT5yyPjNHHfYzos5AqoTbOOX9pdklRBkKoB
GGGXC10Jm7nQmE4cuowOkj+/KfuEuElDxhGb0iISvvZZJtjfomllB9ixAi0amf5g
z9UuIRCZlG4oa7SoUJYpL8jcr/vEaaKYBHruSIfVn7d7ce18i6ZemudF/Jvye7R2
6LvaktRJc3+yERHv6Mp0d5THUYLDmMD4zxtFPUzfcvfrqE4WmAIZjwqMAJPjpBg9
l4xEDE5MNIE1onhZyDCKz4/UxjnWGIU=
-----END CERTIFICATE-----
Generated at Mon Oct 13 22:16:04 2025 by rpki-client