Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/5da6571c-8d1d-38ad-aa8a-3330e67f4cfd.roa
File:                     5da6571c-8d1d-38ad-aa8a-3330e67f4cfd.roa (raw, json)
Hash identifier:          EVlp0LPGlOYh0ZgtKS8j/pi7r34QcxAMozCqjAFr8Qk=
Subject key identifier:   BB:51:27:95:1A:D4:96:78:76:DA:1A:C8:44:7A:66:E5:79:D1:07:E6
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F4328584B13D6C47F59D68C4D1EAF38A0
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/5da6571c-8d1d-38ad-aa8a-3330e67f4cfd.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     48254
IP address blocks:        206.130.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c4:7f:59:d6:8c:4d:1e:af:38:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=45912529-59db-4a15-b09d-b25487edd648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:59:a2:44:34:36:3e:bc:cf:97:12:7d:34:cf:
                    a6:42:4c:03:2b:e1:60:5e:fc:e8:f3:2a:4a:5f:c6:
                    6c:a2:46:75:b8:1c:3b:a4:96:b6:4a:75:c0:4d:d9:
                    ea:19:70:27:7e:12:ce:c7:40:65:77:73:f9:b3:a3:
                    3d:98:4a:70:1c:9f:6e:a7:04:a2:67:ab:e6:f0:f9:
                    3e:1b:f8:fe:8d:0c:72:56:85:5a:da:de:32:96:32:
                    9f:2a:ba:00:18:d6:f8:f4:74:b2:38:3b:d7:f0:fb:
                    12:f2:55:46:d7:4b:e6:09:a8:34:a8:5b:70:d8:48:
                    88:40:bf:15:05:0a:f9:ed:72:5a:ff:37:27:63:ee:
                    e4:37:cc:1a:ff:aa:4c:96:44:c6:13:ab:10:25:6b:
                    e8:e1:8f:cd:41:2b:5d:ef:4b:b3:f4:8c:e9:7b:c2:
                    eb:44:ff:3d:e1:c1:5e:73:58:e9:ac:16:4e:b8:4a:
                    7d:9b:9e:90:67:f0:cc:6c:76:97:a3:63:62:6f:d9:
                    2e:f7:ee:71:59:e7:f9:a6:14:cd:bb:f6:a3:c3:29:
                    55:ab:b8:c9:c8:52:05:d0:7e:16:83:bf:81:eb:1a:
                    d1:29:de:1b:2e:ae:48:fb:05:50:8f:02:01:a2:de:
                    09:14:b0:45:df:03:33:4e:d9:92:cb:74:50:d0:67:
                    0f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:51:27:95:1A:D4:96:78:76:DA:1A:C8:44:7A:66:E5:79:D1:07:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/5da6571c-8d1d-38ad-aa8a-3330e67f4cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f4:75:6e:11:dc:d2:3b:29:2d:fa:97:f1:f3:65:d3:07:3e:
         42:59:97:86:28:fc:54:e1:e9:9c:ab:6a:17:57:8c:5a:aa:82:
         64:54:e9:9c:a2:61:fa:9b:b0:74:22:12:59:b7:56:78:f5:62:
         c6:b2:dd:64:7c:8b:b1:e8:3f:7c:0d:69:38:5f:a1:7c:b2:fe:
         79:5e:32:bb:b0:9c:9a:ca:a8:c4:e2:ad:a0:c1:fc:be:e2:f2:
         06:fc:bf:2c:ff:0d:31:98:32:04:c8:99:74:e2:6c:d4:8a:ca:
         7d:c1:90:44:f1:3e:ae:f8:27:33:9a:8a:f8:06:de:59:51:ad:
         e6:9e:72:8c:e9:58:03:ed:05:7d:ed:0d:e2:35:b4:84:d9:0f:
         0b:da:c4:00:53:cf:e5:05:98:9b:3e:22:e8:9d:b8:93:a5:b7:
         f8:1e:c8:35:84:7b:80:76:50:c1:d5:e0:bc:8a:21:36:f4:be:
         ac:c7:9c:7b:d1:c2:87:03:2c:39:81:81:c2:16:cf:ee:48:28:
         b9:d0:db:c4:df:50:67:4f:8e:87:5a:87:be:df:92:4c:b2:6e:
         5d:75:cc:03:27:3a:8d:98:8f:29:51:62:86:c4:bf:f5:fb:11:
         e1:a7:f8:97:9f:60:d5:bd:89:31:c2:e5:ea:91:c2:55:80:bb:
         76:4b:22:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sR/WdaMTR6vOKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5
YWFlMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
NDU5MTI1MjktNTlkYi00YTE1LWIwOWQtYjI1NDg3ZWRkNjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lmiRDQ2PrzPlxJ9NM+mQkwDK+FgXvzo8ypK
X8ZsokZ1uBw7pJa2SnXATdnqGXAnfhLOx0Bld3P5s6M9mEpwHJ9upwSiZ6vm8Pk+
G/j+jQxyVoVa2t4yljKfKroAGNb49HSyODvX8PsS8lVG10vmCag0qFtw2EiIQL8V
BQr57XJa/zcnY+7kN8wa/6pMlkTGE6sQJWvo4Y/NQStd70uz9Izpe8LrRP894cFe
c1jprBZOuEp9m56QZ/DMbHaXo2Nib9ku9+5xWef5phTNu/ajwylVq7jJyFIF0H4W
g7+B6xrRKd4bLq5I+wVQjwIBot4JFLBF3wMzTtmSy3RQ0GcPiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLtRJ5Ua1JZ4dtoayER6ZuV50QfmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh
OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvNWRhNjU3MWMtOGQxZC0z
OGFkLWFhOGEtMzMzMGU2N2Y0Y2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh
OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl
OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh
ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzoJzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHL0dW4R3NI7KS36l/HzZdMHPkJZl4Yo/FTh6ZyrahdXjFqqgmRU6Zyi
YfqbsHQiElm3Vnj1Ysay3WR8i7HoP3wNaThfoXyy/nleMruwnJrKqMTiraDB/L7i
8gb8vyz/DTGYMgTImXTibNSKyn3BkETxPq74JzOaivgG3llRreaecozpWAPtBX3t
DeI1tITZDwvaxABTz+UFmJs+IuiduJOlt/geyDWEe4B2UMHV4LyKITb0vqzHnHvR
wocDLDmBgcIWz+5IKLnQ28TfUGdPjodah77fkkyybl11zAMnOo2YjylRYobEv/X7
EeGn+JefYNW9iTHC5eqRwlWAu3ZLIkI=
-----END CERTIFICATE-----
Generated at Wed Sep 10 12:52:29 2025 by rpki-client