Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a1fcc97-b8aa-350e-9b4d-31463e52a52f.roa
File:                     2a1fcc97-b8aa-350e-9b4d-31463e52a52f.roa (raw, json)
Hash identifier:          bhu5om9+bZPV9KH1wK2efrRVx7Q4Jgdx3BAV1umwFEY=
Subject key identifier:   C7:69:32:76:F6:0F:8E:11:62:AC:C7:C7:E5:19:1E:E8:3F:8C:62:7A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7B8EF67CEAD708C486780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a1fcc97-b8aa-350e-9b4d-31463e52a52f.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     18865
IP address blocks:        65.19.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:b8:ef:67:ce:ad:70:8c:48:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=5e233acd-4b39-4e82-83d4-e4daf1b01956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9e:73:31:90:c0:5f:17:4e:72:9e:35:82:09:
                    14:ad:59:e2:34:d4:95:88:c0:a9:98:06:38:6f:72:
                    dc:4b:65:16:0f:0a:3b:d1:df:31:d6:bb:67:8c:c2:
                    80:47:59:ca:2b:4b:97:cf:f8:79:36:84:00:0b:b7:
                    26:1b:b5:41:2f:41:00:6a:3c:95:80:c3:d4:11:11:
                    2f:53:a3:70:b2:14:75:6d:58:85:ac:62:ec:8e:d9:
                    69:d3:78:18:a1:d4:a4:5e:1b:9f:af:54:84:55:e1:
                    b0:da:6b:e6:0e:ca:05:fe:65:a0:b4:57:bf:91:53:
                    46:fe:72:59:07:2c:6d:8c:d4:39:61:a0:23:d6:9a:
                    87:e3:3a:08:0b:73:7a:94:9b:1a:f8:36:fa:12:e9:
                    48:59:59:31:d4:6f:df:15:76:ca:84:b8:60:97:ee:
                    05:69:d2:6c:f9:b2:e8:dd:7f:33:70:9d:31:8b:97:
                    2b:96:3a:72:8c:8a:77:f4:b0:b3:bb:80:7f:55:97:
                    39:a7:ec:49:ba:a3:8f:09:68:96:c1:88:81:1a:9c:
                    32:fb:8c:cf:fa:1b:63:43:e1:ec:88:0d:e8:66:a3:
                    2e:4f:11:82:c1:01:5a:79:13:db:01:78:75:04:18:
                    bb:a5:bc:0f:34:a7:f5:10:96:59:86:92:07:7c:98:
                    e5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:69:32:76:F6:0F:8E:11:62:AC:C7:C7:E5:19:1E:E8:3F:8C:62:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a1fcc97-b8aa-350e-9b4d-31463e52a52f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.19.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d0:e5:58:6d:fa:a1:73:9a:a2:19:f3:a4:1e:e2:41:68:62:
         6e:c2:f6:48:09:ed:c7:fb:81:17:54:ee:34:cd:71:b1:22:d6:
         ea:b7:90:90:5d:17:a7:7a:c7:79:38:02:33:93:8a:f9:5c:20:
         5c:e6:6d:10:83:74:0b:9d:28:32:b4:2c:52:10:4b:5f:4a:5c:
         cd:5c:e2:8e:d3:35:10:09:64:d7:6c:68:c8:95:33:40:54:f9:
         9b:89:28:78:5e:7e:6a:fd:00:b5:f0:6a:f5:c7:bf:87:96:31:
         2c:57:aa:f1:2a:f3:15:b9:d6:60:80:9f:13:7f:67:cc:0d:eb:
         ce:35:a2:64:59:41:e7:69:41:8f:8f:df:92:67:d6:fc:1d:02:
         9d:75:d6:72:5d:f5:17:b1:40:b6:a4:0b:09:4c:66:bb:d7:b9:
         4d:8f:c8:21:29:ba:4a:a2:e6:27:9d:bd:58:04:95:83:78:8d:
         e5:25:b6:ba:60:7d:b2:c3:39:1a:e7:4c:4f:4e:b0:07:1c:7f:
         97:56:d7:e4:22:d3:f3:95:2e:dc:f9:04:c7:e1:50:df:0b:db:
         cb:70:45:71:40:de:e8:72:db:cc:78:5f:b1:9b:70:0c:d7:1d:
         f3:ce:c5:3c:ea:4f:29:5f:15:b2:19:86:b0:88:b6:dc:83:4a:
         23:eb:bf:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ17jvZ86tcIxIZ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
NWUyMzNhY2QtNGIzOS00ZTgyLTgzZDQtZTRkYWYxYjAxOTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ5zMZDAXxdOcp41ggkUrVniNNSViMCpmAY4
b3LcS2UWDwo70d8x1rtnjMKAR1nKK0uXz/h5NoQAC7cmG7VBL0EAajyVgMPUEREv
U6NwshR1bViFrGLsjtlp03gYodSkXhufr1SEVeGw2mvmDsoF/mWgtFe/kVNG/nJZ
ByxtjNQ5YaAj1pqH4zoIC3N6lJsa+Db6EulIWVkx1G/fFXbKhLhgl+4FadJs+bLo
3X8zcJ0xi5crljpyjIp39LCzu4B/VZc5p+xJuqOPCWiWwYiBGpwy+4zP+htjQ+Hs
iA3oZqMuTxGCwQFaeRPbAXh1BBi7pbwPNKf1EJZZhpIHfJjlHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMdpMnb2D44RYqzHx+UZHug/jGJ6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmExZmNjOTctYjhhYS0z
NTBlLTliNGQtMzE0NjNlNTJhNTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQROTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELQ5Vht+qFzmqIZ86Qe4kFoYm7C9kgJ7cf7gRdU7jTNcbEi1uq3kJBd
F6d6x3k4AjOTivlcIFzmbRCDdAudKDK0LFIQS19KXM1c4o7TNRAJZNdsaMiVM0BU
+ZuJKHhefmr9ALXwavXHv4eWMSxXqvEq8xW51mCAnxN/Z8wN6841omRZQedpQY+P
35Jn1vwdAp111nJd9RexQLakCwlMZrvXuU2PyCEpukqi5iedvVgElYN4jeUltrpg
fbLDORrnTE9OsAccf5dW1+Qi0/OVLtz5BMfhUN8L28twRXFA3uhy28x4X7GbcAzX
HfPOxTzqTylfFbIZhrCIttyDSiPrv1o=
-----END CERTIFICATE-----
Generated at Fri Oct 31 01:38:00 2025 by rpki-client