Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/2a3e600a-538a-31d1-bf46-d544767ed9c9.roa
File:                     2a3e600a-538a-31d1-bf46-d544767ed9c9.roa (raw, json)
Hash identifier:          lI4AnrxMzY0toVdmFKznnIsotYIkXOVE5MM8eXlLKUI=
Subject key identifier:   3C:9F:68:E4:C2:C3:EC:FC:B3:66:C7:3A:7F:E9:34:B7:52:7A:89:A4
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F4328584B13D6C425EB1F596877414D00
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/2a3e600a-538a-31d1-bf46-d544767ed9c9.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     48254
IP address blocks:        67.213.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c4:25:eb:1f:59:68:77:41:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=73e9dc28-0731-4eff-a878-770b6026f5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:83:64:97:43:86:2b:43:67:3c:f0:6c:fe:
                    3f:e6:15:13:19:99:c2:f0:4a:b5:b6:6a:d6:3d:30:
                    7f:cc:66:65:21:38:43:82:64:1d:8f:89:4f:7e:10:
                    80:dc:6e:ca:82:c3:ad:53:1c:96:db:bd:93:f0:f6:
                    71:7f:e3:7e:b9:a2:02:9d:ed:17:97:25:8d:a6:93:
                    f9:bf:ef:6f:dd:e8:f8:eb:56:bc:e7:35:fa:0f:d3:
                    7b:46:12:48:b6:c8:46:4e:d8:12:45:35:08:4c:c9:
                    9e:e9:e9:02:5b:1e:b7:a6:0c:75:46:0d:96:5d:2c:
                    fa:68:94:16:79:59:58:00:77:a9:cc:da:a9:ae:03:
                    56:94:e1:c7:3e:14:19:ac:b7:91:60:a7:a3:8e:53:
                    4f:5b:ed:79:e8:c5:99:b1:50:f8:e4:86:e1:01:a3:
                    00:ae:0d:ed:1c:b8:69:f0:e6:7f:2c:40:64:7c:ad:
                    c0:37:bd:7b:c4:48:54:a0:c2:5a:d5:61:72:57:08:
                    53:85:dd:3f:61:06:6a:c6:94:d8:78:b5:36:8c:c6:
                    78:8d:a8:fc:e4:0c:f0:e2:1c:aa:ab:65:7f:1d:41:
                    f6:05:de:29:ef:ac:fa:38:a6:9f:e8:62:53:76:a0:
                    a6:9a:46:15:e3:7f:a9:d4:a5:00:64:f8:58:77:a6:
                    ef:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9F:68:E4:C2:C3:EC:FC:B3:66:C7:3A:7F:E9:34:B7:52:7A:89:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/2a3e600a-538a-31d1-bf46-d544767ed9c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f2:7e:27:2a:02:d2:44:6a:31:7e:a8:0a:18:72:38:b2:1b:
         a4:55:06:58:45:94:74:d7:b6:8b:e6:3e:bc:d8:83:bb:a1:ea:
         83:39:10:98:c5:2f:32:3c:b3:65:ca:ed:b7:78:fe:f2:fb:64:
         ac:56:3d:82:36:94:32:57:e7:5a:b0:4c:27:71:79:4a:50:b5:
         07:a2:54:9e:cd:3e:76:64:ee:17:5d:bf:88:84:00:c9:41:69:
         1f:ab:c2:32:c0:a4:f6:c5:9a:18:b5:c6:43:3d:7b:ca:67:6e:
         ad:06:5d:69:49:a8:3b:ef:4c:f0:17:23:85:9e:eb:27:28:f8:
         1c:79:ff:9c:44:0b:8a:e1:6e:cf:27:fc:39:c4:7b:fe:9b:29:
         da:07:3b:7d:55:a3:ac:ba:1e:50:58:ca:7e:b2:20:a1:06:5d:
         5b:d3:13:c3:46:d0:54:80:f8:bb:17:06:2c:21:ae:0b:eb:54:
         8d:92:2f:79:a7:76:e0:92:50:0d:b6:9a:63:a0:93:2a:b5:37:
         c0:f8:a8:df:c7:6d:d5:d6:ef:22:d8:9a:32:a1:57:42:05:51:
         f9:0c:38:5d:73:25:7b:45:d2:f3:77:65:96:0d:74:eb:c2:a3:
         42:e8:63:09:fd:fa:bd:0d:04:a7:22:ee:70:b4:be:31:06:c0:
         c2:8b:a4:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sQl6x9ZaHdBTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi
MDNmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
NzNlOWRjMjgtMDczMS00ZWZmLWE4NzgtNzcwYjYwMjZmNWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiCDZJdDhitDZzzwbP4/5hUTGZnC8Eq1tmrW
PTB/zGZlIThDgmQdj4lPfhCA3G7KgsOtUxyW272T8PZxf+N+uaICne0XlyWNppP5
v+9v3ej461a85zX6D9N7RhJItshGTtgSRTUITMme6ekCWx63pgx1Rg2WXSz6aJQW
eVlYAHepzNqprgNWlOHHPhQZrLeRYKejjlNPW+156MWZsVD45IbhAaMArg3tHLhp
8OZ/LEBkfK3AN717xEhUoMJa1WFyVwhThd0/YQZqxpTYeLU2jMZ4jaj85Azw4hyq
q2V/HUH2Bd4p76z6OKaf6GJTdqCmmkYV43+p1KUAZPhYd6bvqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDyfaOTCw+z8s2bHOn/pNLdSeomkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw
N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvMmEzZTYwMGEtNTM4YS0z
MWQxLWJmNDYtZDU0NDc2N2VkOWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk
YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl
YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh
Yzc1ZWIwM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9XaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnyficqAtJEajF+qAoYcjiyG6RVBlhFlHTXtovmPrzYg7uh6oM5EJjF
LzI8s2XK7bd4/vL7ZKxWPYI2lDJX51qwTCdxeUpQtQeiVJ7NPnZk7hddv4iEAMlB
aR+rwjLApPbFmhi1xkM9e8pnbq0GXWlJqDvvTPAXI4We6yco+Bx5/5xEC4rhbs8n
/DnEe/6bKdoHO31Vo6y6HlBYyn6yIKEGXVvTE8NG0FSA+LsXBiwhrgvrVI2SL3mn
duCSUA22mmOgkyq1N8D4qN/HbdXW7yLYmjKhV0IFUfkMOF1zJXtF0vN3ZZYNdOvC
o0LoYwn9+r0NBKci7nC0vjEGwMKLpEA=
-----END CERTIFICATE-----
Generated at Wed Sep 10 05:23:42 2025 by rpki-client