Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/79d04c2e-e692-3e1a-bd27-4b3e903424cf.roa
File:                     79d04c2e-e692-3e1a-bd27-4b3e903424cf.roa (raw, json)
Hash identifier:          4g9S4nfHz2VSrd4WEo0EYAakwseHtYsqDqbDtlIhJoQ=
Subject key identifier:   5B:1F:06:35:9A:E3:C1:B8:9C:E1:66:26:ED:1A:6D:47:F3:5B:CA:0A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCC5FE3AB8CD0A3BC72A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/79d04c2e-e692-3e1a-bd27-4b3e903424cf.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     40311
IP address blocks:        198.45.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:c5:fe:3a:b8:cd:0a:3b:c7:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=8c891c09-a927-43da-824f-f5bb1f45a07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8d:85:a1:53:47:da:82:a7:ed:3c:7e:78:f0:
                    9a:39:8a:42:eb:c1:85:67:3c:5f:63:83:fc:ed:5b:
                    37:b2:54:9b:15:96:f0:00:ea:a2:c5:cd:64:36:b8:
                    0c:2b:6d:72:dc:e9:38:39:f7:f1:08:58:85:27:f0:
                    63:a5:e6:9e:6b:bc:8d:2e:7b:05:1a:1a:05:95:6c:
                    a1:f6:3d:4b:59:9c:ad:d0:80:f1:ab:8a:15:68:db:
                    3f:62:a0:12:7a:37:92:c6:de:8b:d6:e5:87:09:33:
                    08:4d:9e:ec:8a:d9:00:10:8f:80:d2:23:e1:e9:67:
                    6f:b6:fc:fa:20:d7:6c:e0:8d:17:c2:1c:3a:39:64:
                    ac:74:18:39:91:85:f8:06:f5:91:07:ab:41:1e:ff:
                    d5:62:40:63:5f:04:9a:f7:2a:1a:bd:df:0f:f5:bc:
                    dc:19:10:3b:2c:6a:60:3f:8f:ff:c3:aa:b9:91:3c:
                    4c:e6:bc:ff:65:b2:79:eb:56:3c:82:dc:0d:47:e1:
                    f8:c6:97:05:1a:f4:1b:4f:c0:04:f0:4a:ce:0d:4e:
                    dd:9e:7e:13:10:90:ab:ee:ec:09:cf:11:f9:52:1e:
                    71:0d:75:c7:bf:74:46:45:46:fb:b9:0f:3d:00:d8:
                    84:e8:8b:06:bc:33:ea:cf:10:c8:93:44:b4:ad:42:
                    7a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1F:06:35:9A:E3:C1:B8:9C:E1:66:26:ED:1A:6D:47:F3:5B:CA:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/79d04c2e-e692-3e1a-bd27-4b3e903424cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:52:c8:0d:d8:e3:31:9f:f0:bb:e8:88:8d:b7:0b:e6:a0:bc:
         cb:34:64:a5:05:12:3c:7a:1e:69:0e:38:8d:26:c8:75:a2:43:
         4d:3f:78:f0:c6:91:07:e1:b6:52:3c:87:54:be:4c:53:05:33:
         26:14:4f:b5:88:92:22:a3:eb:e3:cc:14:ae:e7:24:64:2b:28:
         05:fe:44:9b:7b:5f:05:e4:02:ba:3b:a1:6b:4c:68:97:a1:e7:
         f6:88:40:90:c0:94:81:b8:78:d1:30:67:34:82:f9:e6:ac:7f:
         46:d6:2f:6d:fb:7a:90:6a:f1:91:1a:e9:d3:ca:4a:d8:ea:1d:
         23:a2:9a:58:d9:d2:df:23:96:12:9f:9f:99:30:f5:12:64:d3:
         c7:28:9a:d1:ed:f2:a0:8f:99:a0:17:0a:b7:96:7f:8f:27:a3:
         c8:50:31:b2:a7:45:53:2a:e5:30:e8:90:8c:a2:1e:a4:35:15:
         74:17:63:69:5a:be:f7:86:e0:b6:ca:82:88:88:ad:22:e7:1b:
         29:d4:9d:f4:81:6a:41:47:aa:8a:ca:e6:23:a7:78:b9:b3:5d:
         a6:f3:34:7d:41:fb:af:42:e4:f0:ff:40:0b:d1:81:22:9d:e0:
         4d:2f:0f:68:30:ff:66:c6:93:98:c8:7b:48:d1:37:f7:5c:49:
         9d:41:e8:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzMX+OrjNCjvHKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
OGM4OTFjMDktYTkyNy00M2RhLTgyNGYtZjViYjFmNDVhMDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk42FoVNH2oKn7Tx+ePCaOYpC68GFZzxfY4P8
7Vs3slSbFZbwAOqixc1kNrgMK21y3Ok4OffxCFiFJ/Bjpeaea7yNLnsFGhoFlWyh
9j1LWZyt0IDxq4oVaNs/YqASejeSxt6L1uWHCTMITZ7sitkAEI+A0iPh6Wdvtvz6
INds4I0Xwhw6OWSsdBg5kYX4BvWRB6tBHv/VYkBjXwSa9yoavd8P9bzcGRA7LGpg
P4//w6q5kTxM5rz/ZbJ561Y8gtwNR+H4xpcFGvQbT8AE8ErODU7dnn4TEJCr7uwJ
zxH5Uh5xDXXHv3RGRUb7uQ89ANiE6IsGvDPqzxDIk0S0rUJ6NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFsfBjWa48G4nOFmJu0abUfzW8oKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzlkMDRjMmUtZTY5Mi0z
ZTFhLWJkMjctNGIzZTkwMzQyNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi34MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHtSyA3Y4zGf8LvoiI23C+agvMs0ZKUFEjx6HmkOOI0myHWiQ00/ePDG
kQfhtlI8h1S+TFMFMyYUT7WIkiKj6+PMFK7nJGQrKAX+RJt7XwXkAro7oWtMaJeh
5/aIQJDAlIG4eNEwZzSC+easf0bWL237epBq8ZEa6dPKStjqHSOimljZ0t8jlhKf
n5kw9RJk08comtHt8qCPmaAXCreWf48no8hQMbKnRVMq5TDokIyiHqQ1FXQXY2la
vveG4LbKgoiIrSLnGynUnfSBakFHqorK5iOneLmzXabzNH1B+69C5PD/QAvRgSKd
4E0vD2gw/2bGk5jIe0jRN/dcSZ1B6DE=
-----END CERTIFICATE-----
Generated at Sat Oct 18 21:08:27 2025 by rpki-client