Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a04b5f9-fbb5-3276-8bf7-1e7b221e2e9b.roa
File:                     1a04b5f9-fbb5-3276-8bf7-1e7b221e2e9b.roa (raw, json)
Hash identifier:          sfbe7NXmNbZXmRlizoWvIUUhYzySj3eMqEyaz7PdDcU=
Subject key identifier:   DF:08:44:19:1B:04:ED:C1:D9:DC:F8:72:C5:3A:12:15:C6:DB:E3:C2
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584B25FC302950306641FA00DF80
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a04b5f9-fbb5-3276-8bf7-1e7b221e2e9b.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     262287
IP address blocks:        198.145.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:30:29:50:30:66:41:fa:00:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=f98ed077-31d2-4e8e-8f0b-87d954652113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:36:b6:c0:56:96:b4:ca:3f:31:12:a4:45:27:
                    87:52:e6:ca:d4:96:7c:16:b7:f3:02:aa:ca:80:c1:
                    9a:c7:70:97:5e:f8:e9:d1:90:59:26:c7:d0:e6:38:
                    78:8d:cf:c6:aa:c4:72:04:ff:a3:06:79:43:1d:09:
                    ac:bb:d6:8b:3f:04:e0:61:48:0b:1d:35:34:f1:33:
                    f5:85:f2:25:de:17:89:50:09:0d:8d:25:62:a0:1f:
                    43:f6:fc:b6:66:87:c8:96:1a:09:a2:47:fa:0e:cb:
                    8c:3e:f3:5c:b0:88:f9:32:39:28:0e:86:98:65:fd:
                    d8:84:25:49:a1:4d:e6:f6:3c:77:c9:c4:37:69:0d:
                    c0:a6:ed:b5:3c:51:ec:de:02:53:bf:bd:79:be:a0:
                    3c:40:1e:82:78:5d:ad:a3:4f:92:fe:62:4d:2f:ce:
                    d7:98:a2:fa:0a:09:1b:80:e2:86:23:26:d1:cd:90:
                    42:be:9b:bf:36:50:17:7e:b4:b8:60:8a:c7:87:a3:
                    ee:bc:9e:21:1c:67:89:d5:ec:4c:74:4a:72:8d:0e:
                    10:2b:4b:25:29:5b:a7:e9:6f:1d:10:ad:f3:33:65:
                    67:2b:a9:55:70:ac:f3:6c:fb:9d:b5:30:2a:48:c8:
                    c3:8c:de:b3:18:81:c5:46:cc:4c:6d:75:6a:10:62:
                    c1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:08:44:19:1B:04:ED:C1:D9:DC:F8:72:C5:3A:12:15:C6:DB:E3:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a04b5f9-fbb5-3276-8bf7-1e7b221e2e9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:43:55:3e:d8:91:48:8e:3c:0e:4c:6e:a4:a4:b6:8d:cd:d9:
         c7:37:2f:11:5b:b1:f9:1b:fc:b9:06:8f:f0:10:48:8d:9e:da:
         b2:96:fd:40:8a:7a:ea:ce:07:1d:fc:81:02:4b:c1:5d:d4:55:
         bc:c7:9e:fe:1f:78:92:4c:c4:ee:6b:5a:0c:13:24:7d:d8:15:
         75:e8:de:3d:be:e1:9f:79:e2:c8:66:87:3b:02:b1:ce:88:50:
         d5:af:3a:53:35:e1:e8:a0:1c:38:e5:2f:38:09:a3:25:73:7d:
         3d:23:f9:19:91:6a:2e:a6:44:6a:8a:ac:74:28:be:8a:0e:74:
         84:f7:f8:2b:47:f8:28:5c:a1:fd:92:9b:1b:1b:e5:1b:d1:71:
         01:45:46:52:ba:b4:e3:66:eb:bc:7f:a7:9d:01:18:04:17:f8:
         2b:fe:6f:07:bc:53:2f:48:79:97:59:ae:fc:a7:e9:97:8b:9b:
         8c:d0:66:ab:0c:aa:45:b6:7e:ab:1b:5d:56:7d:1b:2a:89:bc:
         55:95:b3:e3:c5:d3:bf:6d:3e:18:af:05:bf:f3:2b:c2:a2:63:
         d5:b8:70:bc:ad:27:9b:42:2d:6a:f9:e2:ce:2f:b1:b6:26:9a:
         be:e4:87:04:3f:dd:cb:89:0c:4f:dd:5f:48:9f:6b:ce:21:d8:
         8c:05:ba:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/DApUDBmQfoA34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk
Zjk4ZWQwNzctMzFkMi00ZThlLThmMGItODdkOTU0NjUyMTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0za2wFaWtMo/MRKkRSeHUubK1JZ8FrfzAqrK
gMGax3CXXvjp0ZBZJsfQ5jh4jc/GqsRyBP+jBnlDHQmsu9aLPwTgYUgLHTU08TP1
hfIl3heJUAkNjSVioB9D9vy2ZofIlhoJokf6DsuMPvNcsIj5MjkoDoaYZf3YhCVJ
oU3m9jx3ycQ3aQ3Apu21PFHs3gJTv715vqA8QB6CeF2to0+S/mJNL87XmKL6Cgkb
gOKGIybRzZBCvpu/NlAXfrS4YIrHh6PuvJ4hHGeJ1exMdEpyjQ4QK0slKVun6W8d
EK3zM2VnK6lVcKzzbPudtTAqSMjDjN6zGIHFRsxMbXVqEGLB/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN8IRBkbBO3B2dz4csU6EhXG2+PCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMWEwNGI1ZjktZmJiNS0z
Mjc2LThiZjctMWU3YjIyMWUyZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMFDVT7YkUiOPA5MbqSkto3N2cc3LxFbsfkb/LkGj/AQSI2e2rKW/UCK
eurOBx38gQJLwV3UVbzHnv4feJJMxO5rWgwTJH3YFXXo3j2+4Z954shmhzsCsc6I
UNWvOlM14eigHDjlLzgJoyVzfT0j+RmRai6mRGqKrHQovooOdIT3+CtH+Chcof2S
mxsb5RvRcQFFRlK6tONm67x/p50BGAQX+Cv+bwe8Uy9IeZdZrvyn6ZeLm4zQZqsM
qkW2fqsbXVZ9GyqJvFWVs+PF079tPhivBb/zK8KiY9W4cLytJ5tCLWr54s4vsbYm
mr7khwQ/3cuJDE/dX0ifa84h2IwFuoI=
-----END CERTIFICATE-----
Generated at Thu Sep 18 10:56:25 2025 by rpki-client