Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57/cb8ffa43-91e5-3e4d-af22-802b23ccfd27.roa
File:                     cb8ffa43-91e5-3e4d-af22-802b23ccfd27.roa (raw, json)
Hash identifier:          ztukCXAC6HSleUd6SDIXdArEhM7KSTz/cLB4Fj7Ngok=
Subject key identifier:   69:F1:BA:E6:CE:D6:FA:B5:3B:48:DF:F3:C8:E2:A8:75:A5:5B:38:4C
Certificate issuer:       /CN=2425e15e-d5ff-402a-863b-92cb41a87c57
Certificate serial:       010D0C9F4328584B28C6E13E35BF0B70442A2000
Authority key identifier: 53:BB:18:27:B1:0F:0D:C8:CD:7C:0C:BB:0A:F2:A0:21:9C:93:C1:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57/cb8ffa43-91e5-3e4d-af22-802b23ccfd27.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     396343
IP address blocks:        64.30.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57/2425e15e-d5ff-402a-863b-92cb41a87c57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57/2425e15e-d5ff-402a-863b-92cb41a87c57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:e1:3e:35:bf:0b:70:44:2a:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2425e15e-d5ff-402a-863b-92cb41a87c57
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=6549b387-ad1e-4660-be4b-1299014379ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:48:8e:5f:2b:23:53:75:d9:a0:e4:65:3b:83:
                    a6:0d:a2:18:01:79:d5:d0:48:da:84:c8:95:5a:79:
                    ec:7f:a9:03:33:9c:37:71:59:d5:18:d1:ba:68:3f:
                    8a:14:b5:c0:3a:6d:c4:f2:22:ef:76:40:c6:01:a6:
                    fa:a9:94:0f:a2:24:c2:e6:25:a8:15:49:8a:dc:45:
                    9e:24:14:40:82:77:ab:7a:ca:6f:87:c5:0c:f1:c5:
                    8c:be:8f:86:47:e2:5f:78:33:58:ec:16:96:5a:50:
                    6a:12:5f:43:85:f8:b3:1e:ea:1f:76:c9:b3:d5:d5:
                    d9:1e:9d:c7:38:45:32:0d:ce:ab:be:68:65:33:1b:
                    dc:36:35:0b:27:87:c8:c3:72:10:29:d1:8d:08:a5:
                    06:72:55:d1:c6:72:de:c0:06:3a:86:e1:63:3a:f2:
                    c5:84:5b:24:1d:f8:0c:2c:46:45:b7:61:88:ce:d8:
                    ae:25:16:54:2f:d1:5a:53:1b:eb:9f:da:33:0f:38:
                    8b:a2:78:a6:33:a0:2d:9b:d2:9a:64:8c:f9:4d:61:
                    07:4b:c9:bb:c2:a7:45:2e:be:3e:a1:d9:d3:e1:f5:
                    48:7a:4a:2f:cc:38:86:48:c3:fc:53:99:7c:f6:50:
                    f5:a2:1c:46:e8:6c:61:96:11:00:aa:a2:04:53:d3:
                    03:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F1:BA:E6:CE:D6:FA:B5:3B:48:DF:F3:C8:E2:A8:75:A5:5B:38:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57/cb8ffa43-91e5-3e4d-af22-802b23ccfd27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57/2425e15e-d5ff-402a-863b-92cb41a87c57.crl

            X509v3 Authority Key Identifier:
                keyid:53:BB:18:27:B1:0F:0D:C8:CD:7C:0C:BB:0A:F2:A0:21:9C:93:C1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.30.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5b:a7:f9:36:3b:ea:5b:d0:34:5a:6d:94:e1:a5:a6:bf:5f:
         bb:2c:a2:77:83:6b:85:54:44:d2:1c:38:00:29:50:0b:63:1e:
         1a:ad:69:e1:c6:83:a0:d3:2a:74:8c:77:b4:6b:70:8a:03:0d:
         fa:22:1c:a6:a0:ab:44:67:7e:3a:65:9b:c2:b3:ce:97:22:e9:
         66:87:59:17:fb:64:5c:01:92:40:7a:df:3a:6a:67:0b:ce:73:
         fc:e2:7c:72:9c:52:93:80:3d:47:b3:45:24:75:dd:fd:63:36:
         a5:07:de:37:43:2e:0d:9c:72:bd:99:d5:ae:46:26:e5:02:1d:
         a0:0c:2b:e8:a1:63:10:ce:eb:f5:a8:fa:20:38:43:ec:40:90:
         13:6a:4c:46:58:4a:73:8b:3d:2a:ac:69:ad:d1:55:3d:83:19:
         34:3b:bf:58:e4:5f:24:a0:b0:4c:dd:1f:ee:0f:90:c0:bc:17:
         d5:af:4c:ba:54:dc:ca:dd:ad:1f:62:26:cb:ab:e9:57:dc:c1:
         bf:a9:df:e6:6d:e4:16:04:26:ba:16:df:60:37:cd:26:32:56:
         6d:47:c4:0a:f0:51:dd:eb:46:e2:53:9c:b2:ee:ff:7e:24:0d:
         52:a1:3f:ba:d4:16:18:d5:d8:c6:83:80:cd:8f:6f:03:b2:0d:
         e3:00:3b:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxuE+Nb8LcEQqIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQyNWUxNWUtZDVmZi00MDJhLTg2M2ItOTJjYjQxYTg3
YzU3MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk
NjU0OWIzODctYWQxZS00NjYwLWJlNGItMTI5OTAxNDM3OWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kiOXysjU3XZoORlO4OmDaIYAXnV0EjahMiV
Wnnsf6kDM5w3cVnVGNG6aD+KFLXAOm3E8iLvdkDGAab6qZQPoiTC5iWoFUmK3EWe
JBRAgnerespvh8UM8cWMvo+GR+JfeDNY7BaWWlBqEl9DhfizHuofdsmz1dXZHp3H
OEUyDc6rvmhlMxvcNjULJ4fIw3IQKdGNCKUGclXRxnLewAY6huFjOvLFhFskHfgM
LEZFt2GIztiuJRZUL9FaUxvrn9ozDziLonimM6Atm9KaZIz5TWEHS8m7wqdFLr4+
odnT4fVIekovzDiGSMP8U5l89lD1ohxG6GxhlhEAqqIEU9MDqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGnxuubO1vq1O0jf88jiqHWlWzhMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNDI1
ZTE1ZS1kNWZmLTQwMmEtODYzYi05MmNiNDFhODdjNTcvY2I4ZmZhNDMtOTFlNS0z
ZTRkLWFmMjItODAyYjIzY2NmZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjQyNWUxNWUtZDVmZi00MDJhLTg2
M2ItOTJjYjQxYTg3YzU3LzI0MjVlMTVlLWQ1ZmYtNDAyYS04NjNiLTkyY2I0MWE4
N2M1Ny5jcmwwHwYDVR0jBBgwFoAUU7sYJ7EPDcjNfAy7CvKgIZyTwUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yNDI1ZTE1ZS1kNWZmLTQwMmEtODYzYi05MmNi
NDFhODdjNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQB6bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1bp/k2O+pb0DRabZThpaa/X7ssoneDa4VURNIcOAApUAtjHhqtaeHG
g6DTKnSMd7RrcIoDDfoiHKagq0Rnfjplm8Kzzpci6WaHWRf7ZFwBkkB63zpqZwvO
c/zifHKcUpOAPUezRSR13f1jNqUH3jdDLg2ccr2Z1a5GJuUCHaAMK+ihYxDO6/Wo
+iA4Q+xAkBNqTEZYSnOLPSqsaa3RVT2DGTQ7v1jkXySgsEzdH+4PkMC8F9WvTLpU
3MrdrR9iJsur6Vfcwb+p3+Zt5BYEJroW32A3zSYyVm1HxArwUd3rRuJTnLLu/34k
DVKhP7rUFhjV2MaDgM2PbwOyDeMAO/8=
-----END CERTIFICATE-----
Generated at Wed Sep 17 20:32:43 2025 by rpki-client