Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/576c51c5-7a9a-36a6-b186-08fc03051651.roa
File:                     576c51c5-7a9a-36a6-b186-08fc03051651.roa (raw, json)
Hash identifier:          l4pjQQweyGus+sZ6Wx2oGPtIzoJ5Q5pIDD8vy1R6ouY=
Subject key identifier:   BD:56:32:FE:C3:5C:BC:DF:C6:04:DF:92:46:5F:99:C0:DA:6E:BE:B2
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584B233B9CB3E7000BFCF9CA02B0
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/576c51c5-7a9a-36a6-b186-08fc03051651.roa
Signing time:             Tue 09 Sep 2025 13:21:06 +0000
ROA not before:           Tue 09 Sep 2025 13:21:06 +0000
ROA not after:            Mon 08 Dec 2025 14:21:06 +0000
asID:                     9009
IP address blocks:        207.180.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:3b:9c:b3:e7:00:0b:fc:f9:ca:02:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Sep  9 13:21:06 2025 GMT
            Not After : Dec  8 14:21:06 2025 GMT
        Subject: CN=614dba00-f728-4f1c-873f-780545a77963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:13:68:59:03:3b:23:0d:fe:32:f3:c6:51:41:
                    e1:4e:25:ed:ee:da:ce:56:46:aa:2a:40:8d:73:ed:
                    70:ae:fd:80:9f:79:34:89:92:a9:d4:3d:43:53:a1:
                    d4:3f:48:5a:e7:f6:53:b3:c8:14:c9:f1:a5:8e:cb:
                    6d:16:1f:3f:86:8c:51:ba:57:56:1b:53:e3:a8:74:
                    70:e0:8d:83:49:0d:03:ae:6a:d3:96:93:78:38:ea:
                    4d:ee:82:2b:67:3d:4f:d4:c0:98:84:5b:b5:03:ce:
                    ae:82:99:bd:51:2b:b9:52:a9:fc:f8:1c:b4:6c:cc:
                    b2:4b:62:3c:ad:bf:c3:2d:0b:d9:b7:b9:dd:d8:f6:
                    07:6a:f2:8c:db:bb:8b:89:01:42:74:06:55:31:db:
                    58:4f:47:af:37:7e:0d:d7:27:47:5b:c7:15:08:5f:
                    84:bc:a0:51:6e:0c:e6:a3:fe:a3:95:d8:32:c8:f6:
                    43:1d:a4:91:95:14:80:12:7c:b1:ae:76:96:a2:65:
                    31:03:e2:d0:e4:67:f8:ae:4f:86:7a:51:79:59:1a:
                    46:85:82:fb:f3:49:f5:d1:21:91:66:60:1c:04:c8:
                    8f:a3:a9:86:f8:99:9e:f2:61:03:36:f3:fa:19:cd:
                    ae:e1:18:05:f2:8e:28:8f:4a:a0:07:3d:d0:f9:c0:
                    7e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:56:32:FE:C3:5C:BC:DF:C6:04:DF:92:46:5F:99:C0:DA:6E:BE:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/576c51c5-7a9a-36a6-b186-08fc03051651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:80:b2:e7:e0:e3:70:30:6d:61:e1:91:54:3f:e9:7a:00:53:
         ee:66:da:fb:ac:bd:5e:f6:4f:2a:e9:33:43:e4:29:2c:bf:f6:
         96:39:b0:4d:df:da:67:cd:a5:98:e4:e4:a1:d8:e6:51:4b:60:
         f2:b1:47:7f:a5:8a:5d:c3:12:71:59:9d:ef:ad:01:0d:60:8d:
         27:a9:e0:d8:61:77:45:f4:aa:5c:bd:29:d0:fa:7a:81:ae:aa:
         6a:1e:38:d6:2d:30:de:38:79:d2:58:9d:55:0f:cf:64:e6:50:
         90:0e:39:9f:c2:bb:79:96:16:4c:1c:59:36:2d:b0:48:4d:28:
         9b:c2:a3:59:0c:f3:ae:18:6a:7d:5d:aa:16:eb:b5:5c:fc:4a:
         2a:a4:4f:5f:6d:89:ed:d4:9c:99:e7:69:af:9d:f9:ac:76:74:
         4f:4c:f2:e2:45:d4:91:5b:00:5b:0e:1e:b3:6e:02:6b:39:7b:
         c1:6e:23:5b:5f:0d:5d:96:85:cc:20:90:f4:6b:97:62:74:8d:
         bc:6e:e6:71:04:a1:8a:54:fa:d7:bb:b1:86:9b:3e:b9:5f:c2:
         b3:cf:06:02:84:2c:81:90:95:f0:17:bc:95:56:5f:46:ab:db:
         f0:51:ab:9e:e7:2d:78:a1:fa:af:fa:c8:98:75:66:25:72:63:
         b9:22:0d:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjO5yz5wAL/PnKArAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl
YTA4MB4XDTI1MDkwOTEzMjEwNloXDTI1MTIwODE0MjEwNlowLzEtMCsGA1UEAxMk
NjE0ZGJhMDAtZjcyOC00ZjFjLTg3M2YtNzgwNTQ1YTc3OTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhNoWQM7Iw3+MvPGUUHhTiXt7trOVkaqKkCN
c+1wrv2An3k0iZKp1D1DU6HUP0ha5/ZTs8gUyfGljsttFh8/hoxRuldWG1PjqHRw
4I2DSQ0DrmrTlpN4OOpN7oIrZz1P1MCYhFu1A86ugpm9USu5Uqn8+By0bMyyS2I8
rb/DLQvZt7nd2PYHavKM27uLiQFCdAZVMdtYT0evN34N1ydHW8cVCF+EvKBRbgzm
o/6jldgyyPZDHaSRlRSAEnyxrnaWomUxA+LQ5Gf4rk+GelF5WRpGhYL780n10SGR
ZmAcBMiPo6mG+Jme8mEDNvP6Gc2u4RgF8o4oj0qgBz3Q+cB+SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL1WMv7DXLzfxgTfkkZfmcDabr6yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy
MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvNTc2YzUxYzUtN2E5YS0z
NmE2LWIxODYtMDhmYzAzMDUxNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4
MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1
ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk
MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7QeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOAsufg43AwbWHhkVQ/6XoAU+5m2vusvV72TyrpM0PkKSy/9pY5sE3f
2mfNpZjk5KHY5lFLYPKxR3+lil3DEnFZne+tAQ1gjSep4Nhhd0X0qly9KdD6eoGu
qmoeONYtMN44edJYnVUPz2TmUJAOOZ/Cu3mWFkwcWTYtsEhNKJvCo1kM864Yan1d
qhbrtVz8SiqkT19tie3UnJnnaa+d+ax2dE9M8uJF1JFbAFsOHrNuAms5e8FuI1tf
DV2WhcwgkPRrl2J0jbxu5nEEoYpU+te7sYabPrlfwrPPBgKELIGQlfAXvJVWX0ar
2/BRq57nLXih+q/6yJh1ZiVyY7kiDUw=
-----END CERTIFICATE-----
Generated at Sun Oct 19 07:08:05 2025 by rpki-client