Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/2f1823ea-88a6-3688-8d20-3d497228f9cc.roa
File:                     2f1823ea-88a6-3688-8d20-3d497228f9cc.roa (raw, json)
Hash identifier:          1KGMpDJyic1RlQTCaq/pXl1SRQgj+hSctKg9pT0PmJI=
Subject key identifier:   DD:D1:3B:26:8A:5D:86:57:CA:10:EE:B4:CB:E6:99:18:29:EF:77:CD
Certificate issuer:       /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial:       010D0C9F4328584B33F1A3B3C56DA11257B41A00
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/2f1823ea-88a6-3688-8d20-3d497228f9cc.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     40342
IP address blocks:        199.47.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:a3:b3:c5:6d:a1:12:57:b4:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=84e04408-4f5f-4e4d-aa60-f5879aa29f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e7:68:4b:17:42:7b:e1:49:e8:a6:c8:62:3a:
                    86:06:67:b7:42:35:42:f2:47:9b:f0:49:dc:e3:13:
                    18:de:e8:b9:90:0b:ed:46:ef:5a:7f:22:15:60:80:
                    ac:4f:94:f9:aa:f7:4b:99:ef:66:a7:0b:19:09:c3:
                    cd:d9:62:80:e4:2f:0b:5b:e2:ca:9d:63:47:18:db:
                    e9:bf:5d:21:35:61:e9:34:c0:a7:f3:7a:60:b8:0b:
                    8f:cb:ee:a7:85:30:60:dd:87:20:43:ab:9a:81:2a:
                    f5:1d:ff:64:1f:ba:95:45:e4:27:21:1b:96:25:41:
                    70:05:bb:e7:5d:42:b6:76:4d:e4:42:23:30:99:d5:
                    26:30:68:b4:2a:76:90:3e:b8:f0:74:3f:b7:08:5e:
                    52:3b:c1:ca:1c:b5:d5:39:a0:81:a4:c7:e2:d7:16:
                    c4:0a:d2:15:76:04:f7:63:4e:44:b6:d0:3d:04:b5:
                    4e:46:db:d6:82:87:ab:10:80:42:ea:af:34:80:eb:
                    37:c6:23:e1:ad:63:5f:ad:6f:c2:45:18:59:9f:af:
                    5f:89:93:1d:d8:6f:05:a4:3a:70:37:73:50:d1:2a:
                    c4:d6:d7:cf:e8:90:64:c0:90:d1:84:d3:77:43:f6:
                    10:18:f2:d3:cd:ba:d5:d3:c2:d6:96:39:39:24:9c:
                    a7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D1:3B:26:8A:5D:86:57:CA:10:EE:B4:CB:E6:99:18:29:EF:77:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/2f1823ea-88a6-3688-8d20-3d497228f9cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:94:ad:b1:14:b0:55:bf:fb:b6:f8:fd:42:ba:d4:f2:37:f1:
         0b:c0:74:e1:7e:ee:b3:0e:a0:9a:02:96:75:af:a3:9c:36:f1:
         fa:90:7d:a5:48:d2:93:29:23:4b:62:c7:66:c7:e5:d2:10:f1:
         f8:38:d4:36:f5:02:23:43:21:04:4c:06:fa:c1:fc:18:b4:1d:
         90:a7:38:bc:ca:5b:ab:ec:f2:22:70:33:94:94:97:1c:46:37:
         fe:0b:af:6f:81:65:d4:c9:7f:88:bf:63:9d:da:34:dd:a2:8d:
         fc:f6:a9:75:03:8c:03:70:37:ce:ea:84:0f:e9:8d:54:a4:4c:
         64:67:73:1b:fd:a5:91:aa:f8:1d:66:50:f9:3c:dc:4c:f4:5a:
         74:3f:69:04:65:ba:6d:fd:a9:bf:7c:10:0e:90:df:13:83:1d:
         57:b3:32:b2:b7:a0:b6:38:64:9f:28:e5:13:17:8a:4a:72:1e:
         1d:3b:3b:36:af:67:1e:0c:9a:e7:30:70:7f:be:c9:6f:60:d3:
         40:f5:d5:22:cf:8a:7a:cb:cc:19:cb:92:a5:7b:00:30:86:f5:
         2a:c6:97:17:66:40:7b:4b:e9:98:bc:86:43:dc:17:0d:bc:24:
         29:04:52:65:36:01:67:fe:72:61:76:2a:af:7e:da:ed:31:fc:
         80:0b:6e:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8aOzxW2hEle0GgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1
ODJhMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk
ODRlMDQ0MDgtNGY1Zi00ZTRkLWFhNjAtZjU4NzlhYTI5ZjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+doSxdCe+FJ6KbIYjqGBme3QjVC8keb8Enc
4xMY3ui5kAvtRu9afyIVYICsT5T5qvdLme9mpwsZCcPN2WKA5C8LW+LKnWNHGNvp
v10hNWHpNMCn83pguAuPy+6nhTBg3YcgQ6uagSr1Hf9kH7qVReQnIRuWJUFwBbvn
XUK2dk3kQiMwmdUmMGi0KnaQPrjwdD+3CF5SO8HKHLXVOaCBpMfi1xbECtIVdgT3
Y05EttA9BLVORtvWgoerEIBC6q80gOs3xiPhrWNfrW/CRRhZn69fiZMd2G8FpDpw
N3NQ0SrE1tfP6JBkwJDRhNN3Q/YQGPLTzbrV08LWljk5JJynNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3ROyaKXYZXyhDutMvmmRgp73fNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi
ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvMmYxODIzZWEtODhhNi0z
Njg4LThkMjAtM2Q0OTcyMjhmOWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm
NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh
NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx
ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKKUrbEUsFW/+7b4/UK61PI38QvAdOF+7rMOoJoClnWvo5w28fqQfaVI
0pMpI0tix2bH5dIQ8fg41Db1AiNDIQRMBvrB/Bi0HZCnOLzKW6vs8iJwM5SUlxxG
N/4Lr2+BZdTJf4i/Y53aNN2ijfz2qXUDjANwN87qhA/pjVSkTGRncxv9pZGq+B1m
UPk83Ez0WnQ/aQRlum39qb98EA6Q3xODHVezMrK3oLY4ZJ8o5RMXikpyHh07Ozav
Zx4MmucwcH++yW9g00D11SLPinrLzBnLkqV7ADCG9SrGlxdmQHtL6Zi8hkPcFw28
JCkEUmU2AWf+cmF2Kq9+2u0x/IALbmM=
-----END CERTIFICATE-----
Generated at Tue Oct 21 06:33:18 2025 by rpki-client