Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef70d90d-b557-3f5f-bffe-49339ac72b38.roa
File:                     ef70d90d-b557-3f5f-bffe-49339ac72b38.roa (raw, json)
Hash identifier:          LHYJHEV1ZiwkNCGCQQZ47rlNHZABJYSNiuJtbX4qVOQ=
Subject key identifier:   AD:9E:A0:74:C8:4D:4A:EF:D5:20:BB:F0:83:E7:06:33:24:DD:E9:9C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F498305101907641D7AB73940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef70d90d-b557-3f5f-bffe-49339ac72b38.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        67.54.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:05:10:19:07:64:1d:7a:b7:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=744847a0-edc8-48d4-a80c-0e1c4b6c32ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cc:02:d9:a1:c0:71:b3:cf:ed:69:a0:07:9c:
                    11:8a:f1:0e:45:63:73:6b:5e:77:fe:ee:a0:ba:69:
                    19:bd:e5:5a:e7:79:ef:49:2a:41:0e:9d:40:34:2a:
                    9e:02:37:11:b3:16:f5:97:f6:ca:f9:72:95:66:a2:
                    fc:10:5e:83:41:fb:65:a1:f9:fe:66:86:54:33:68:
                    05:e4:5b:82:c5:b1:7d:bc:2f:59:96:5c:74:9d:f7:
                    d5:f2:81:78:2d:13:c4:30:f7:e0:19:76:6f:3d:c4:
                    77:5d:06:9a:c8:7a:ca:9d:7a:46:3e:8e:f5:f3:1e:
                    6f:cd:73:81:3c:de:fc:a1:9b:17:78:ae:38:2b:b6:
                    da:29:3f:27:4c:f7:b3:c0:23:bd:61:e1:47:46:96:
                    0b:a3:82:9f:d0:00:de:69:f9:05:e6:0f:e5:f7:cd:
                    91:a7:67:68:10:c1:3a:59:3c:49:e8:0d:0a:87:69:
                    15:d6:c1:ca:38:3e:c2:36:40:18:de:d5:a9:bb:5d:
                    fa:6f:cf:37:b1:b3:51:63:19:6c:39:a2:cb:5a:9a:
                    51:3f:e6:58:20:ce:b9:f1:99:d6:8d:04:b1:aa:f1:
                    df:bb:17:bf:a9:e0:ff:64:e2:da:6c:f3:85:d8:ac:
                    b5:71:58:a2:f3:64:d4:61:52:11:b7:0f:fe:a9:a3:
                    55:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9E:A0:74:C8:4D:4A:EF:D5:20:BB:F0:83:E7:06:33:24:DD:E9:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef70d90d-b557-3f5f-bffe-49339ac72b38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:3b:cd:e9:77:34:29:5d:32:61:57:5d:61:8c:86:6f:a9:e5:
         21:98:62:7f:34:b9:f1:0a:82:20:cd:4d:96:be:53:63:07:85:
         5d:1b:b4:d6:a4:26:2f:d4:ab:df:8a:06:aa:71:61:72:1e:8d:
         a0:15:ca:2b:9a:c0:33:d5:dc:bb:22:73:f4:80:31:6f:e5:29:
         15:07:b2:b6:45:20:20:f8:8b:8c:49:3c:07:ee:a4:8c:e0:74:
         d0:0b:03:fe:94:14:f6:e6:ff:8e:35:e8:25:9a:fc:63:7f:f2:
         0e:33:ee:59:bd:38:c7:f7:ab:d0:20:1f:2b:c1:ac:4d:4f:96:
         cc:fa:7c:ad:d9:6f:02:b5:94:db:ad:70:1f:b5:0d:3f:6d:48:
         1d:46:b3:6a:0e:f2:f0:6e:a1:55:29:59:ef:52:e8:b9:aa:0c:
         58:33:97:30:9b:23:22:b4:2c:be:4c:f7:ec:23:6a:d8:e7:3d:
         bf:df:ed:53:ae:e3:6a:49:a4:8d:33:f9:d7:7d:38:a1:54:ea:
         8b:18:a0:56:61:ff:b3:d4:42:59:09:93:f2:b2:42:6a:54:dd:
         de:bc:7c:89:72:2f:52:47:2e:29:1e:5d:71:07:99:c4:9c:2c:
         78:87:b1:e8:fd:40:f0:ab:82:0c:ba:7c:89:f9:f3:b6:73:2a:
         32:3a:ea:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgwUQGQdkHXq3OUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzQ0ODQ3YTAtZWRjOC00OGQ0LWE4MGMtMGUxYzRiNmMzMmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMwC2aHAcbPP7WmgB5wRivEORWNza153/u6g
umkZveVa53nvSSpBDp1ANCqeAjcRsxb1l/bK+XKVZqL8EF6DQftlofn+ZoZUM2gF
5FuCxbF9vC9Zllx0nffV8oF4LRPEMPfgGXZvPcR3XQaayHrKnXpGPo718x5vzXOB
PN78oZsXeK44K7baKT8nTPezwCO9YeFHRpYLo4Kf0ADeafkF5g/l982Rp2doEME6
WTxJ6A0Kh2kV1sHKOD7CNkAY3tWpu136b883sbNRYxlsOaLLWppRP+ZYIM658ZnW
jQSxqvHfuxe/qeD/ZOLabPOF2Ky1cVii82TUYVIRtw/+qaNVvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK2eoHTITUrv1SC78IPnBjMk3emcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWY3MGQ5MGQtYjU1Ny0z
ZjVmLWJmZmUtNDkzMzlhYzcyYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzaRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD87zel3NCldMmFXXWGMhm+p5SGYYn80ufEKgiDNTZa+U2MHhV0btNak
Ji/Uq9+KBqpxYXIejaAVyiuawDPV3Lsic/SAMW/lKRUHsrZFICD4i4xJPAfupIzg
dNALA/6UFPbm/4416CWa/GN/8g4z7lm9OMf3q9AgHyvBrE1Plsz6fK3ZbwK1lNut
cB+1DT9tSB1Gs2oO8vBuoVUpWe9S6LmqDFgzlzCbIyK0LL5M9+wjatjnPb/f7VOu
42pJpI0z+dd9OKFU6osYoFZh/7PUQlkJk/KyQmpU3d68fIlyL1JHLikeXXEHmcSc
LHiHsej9QPCrggy6fIn587ZzKjI66kc=
-----END CERTIFICATE-----
Generated at Sat Oct 3 14:24:47 2026 by rpki-client