Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/0a6f4ae0-6d63-386f-a433-6e442af05c5b.roa
File:                     0a6f4ae0-6d63-386f-a433-6e442af05c5b.roa (raw, json)
Hash identifier:          402901eifuzZJQJB1evmtuFXXFwk3XDi9hSuk6IDbcU=
Subject key identifier:   2C:BE:30:22:B5:8D:97:7F:2B:51:23:E2:DD:34:8B:AD:24:42:61:21
Certificate issuer:       /CN=480e68d2-5883-4233-9f17-992a2ca71e2b
Certificate serial:       010D0C9F4328584AA42B8E7907E56072E4A7B440
Authority key identifier: 26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/0a6f4ae0-6d63-386f-a433-6e442af05c5b.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     33559
IP address blocks:        107.155.128.0/23 maxlen: 24
                          184.175.192.0/23 maxlen: 24
                          184.175.200.0/22 maxlen: 24
                          208.84.132.0/22 maxlen: 24
                          2604:4600:aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:8e:79:07:e5:60:72:e4:a7:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480e68d2-5883-4233-9f17-992a2ca71e2b
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=98ebba40-e620-420e-9e8a-e8ab4bf221b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e9:b1:38:00:a1:eb:fb:f2:ed:df:ec:49:45:
                    07:5a:e2:99:bd:e3:7d:72:7f:da:10:29:80:8a:c3:
                    35:2b:59:cc:da:31:dd:4b:be:51:47:38:ec:9e:e3:
                    8a:8e:5b:5c:b0:fb:85:c2:60:33:ec:50:a6:1c:85:
                    8e:ee:b8:6a:8d:b4:4e:61:ac:6c:e6:92:58:47:90:
                    e0:54:59:86:12:8f:d7:8a:cc:13:1f:c2:6b:83:7f:
                    c8:09:36:13:36:c5:28:9f:ab:36:7b:70:07:98:b4:
                    6c:86:3b:ee:fd:3f:00:de:75:b1:fb:95:5d:d7:8b:
                    18:0b:ba:95:3c:63:5f:ce:3a:3d:62:ac:d9:00:1f:
                    39:3c:0a:6f:93:dd:c9:85:89:40:19:58:2e:85:91:
                    1b:78:09:5b:2b:95:17:33:9a:a4:a2:bd:1d:a9:15:
                    35:6f:09:3a:13:79:aa:cb:d4:cc:72:87:97:cd:97:
                    b9:a2:43:2f:f0:6d:3e:7e:9f:68:a9:5c:03:3a:65:
                    6a:db:83:6b:14:41:09:66:26:65:39:2f:e2:58:94:
                    f7:02:6d:aa:47:95:68:85:8a:00:8c:cf:04:c3:4f:
                    f3:bc:82:75:d5:fd:18:37:3a:16:34:80:60:50:45:
                    0a:1d:ef:e6:64:13:d0:f1:fc:6f:2d:09:d2:3a:84:
                    0a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BE:30:22:B5:8D:97:7F:2B:51:23:E2:DD:34:8B:AD:24:42:61:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/0a6f4ae0-6d63-386f-a433-6e442af05c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl

            X509v3 Authority Key Identifier:
                keyid:26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.155.128.0/23
                  184.175.192.0/23
                  184.175.200.0/22
                  208.84.132.0/22
                IPv6:
                  2604:4600:aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:91:f9:cc:1a:ac:9b:4a:df:f1:41:4d:33:93:bd:b6:ea:70:
         62:f8:33:08:6a:ec:16:51:6d:fc:68:d9:ae:c7:e2:f5:2e:bd:
         f8:47:c9:52:d6:74:d0:a8:e1:5a:6b:b6:d5:78:1a:38:d6:1c:
         22:3b:88:af:8a:1b:33:ed:e6:e4:07:f6:2c:36:9c:e4:e8:2f:
         0f:6b:dd:2b:42:fb:e9:0f:bb:ec:60:ab:37:52:03:68:3e:45:
         eb:74:b3:f6:5d:ed:08:4f:92:26:92:d9:f3:a5:95:2f:6c:91:
         64:54:d4:ba:a1:68:84:71:7f:45:77:cd:6d:5f:57:94:0e:17:
         a9:c3:8f:f5:18:2c:11:cf:e0:b3:bc:01:fe:d2:96:40:a2:13:
         2b:07:82:71:f2:0b:cc:bf:ba:7f:3a:79:4e:1d:5e:7b:de:1f:
         f5:b2:e5:b3:09:e8:38:b1:00:0c:3e:0f:96:3c:cd:a1:d5:a1:
         62:1a:d2:6c:ba:7f:9f:a5:55:52:dd:e0:fb:74:3a:d7:ed:cb:
         47:08:af:9a:a7:1c:50:ab:3a:b4:fd:e9:6d:e8:c0:da:89:be:
         12:6e:f0:17:1b:bd:44:09:eb:2f:b0:b6:22:cb:38:58:21:c8:
         9d:02:29:94:40:78:94:ef:9b:bd:11:41:11:9a:0e:5a:c8:72:
         0c:58:e5:68
-----BEGIN CERTIFICATE-----
MIIGZjCCBU6gAwIBAgIUAQ0Mn0MoWEqkK455B+VgcuSntEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDgwZTY4ZDItNTg4My00MjMzLTlmMTctOTkyYTJjYTcx
ZTJiMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
OThlYmJhNDAtZTYyMC00MjBlLTllOGEtZThhYjRiZjIyMWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhumxOACh6/vy7d/sSUUHWuKZveN9cn/aECmA
isM1K1nM2jHdS75RRzjsnuOKjltcsPuFwmAz7FCmHIWO7rhqjbROYaxs5pJYR5Dg
VFmGEo/XiswTH8Jrg3/ICTYTNsUon6s2e3AHmLRshjvu/T8A3nWx+5Vd14sYC7qV
PGNfzjo9YqzZAB85PApvk93JhYlAGVguhZEbeAlbK5UXM5qkor0dqRU1bwk6E3mq
y9TMcoeXzZe5okMv8G0+fp9oqVwDOmVq24NrFEEJZiZlOS/iWJT3Am2qR5VohYoA
jM8Ew0/zvIJ11f0YNzoWNIBgUEUKHe/mZBPQ8fxvLQnSOoQKjQIDAQABo4IDeDCC
A3QwHQYDVR0OBBYEFCy+MCK1jZd/K1Ej4t00i60kQmEhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ODBl
NjhkMi01ODgzLTQyMzMtOWYxNy05OTJhMmNhNzFlMmIvMGE2ZjRhZTAtNmQ2My0z
ODZmLWE0MzMtNmU0NDJhZjA1YzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDgwZTY4ZDItNTg4My00MjMzLTlm
MTctOTkyYTJjYTcxZTJiLzQ4MGU2OGQyLTU4ODMtNDIzMy05ZjE3LTk5MmEyY2E3
MWUyYi5jcmwwHwYDVR0jBBgwFoAUJpseaAPDCWnjiuWVpz8zM2aKXwwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ODBlNjhkMi01ODgzLTQyMzMtOWYxNy05OTJh
MmNhNzFlMmIuY2VyMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQBa5uAAwQB
uK/AAwQCuK/IAwQC0FSEMA8EAgACMAkDBwAmBEYAAKowVAYDVR0gAQH/BEowSDBG
BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y
ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcpH5zBqs
m0rf8UFNM5O9tupwYvgzCGrsFlFt/GjZrsfi9S69+EfJUtZ00KjhWmu21XgaONYc
IjuIr4obM+3m5Af2LDac5OgvD2vdK0L76Q+77GCrN1IDaD5F63Sz9l3tCE+SJpLZ
86WVL2yRZFTUuqFohHF/RXfNbV9XlA4XqcOP9RgsEc/gs7wB/tKWQKITKweCcfIL
zL+6fzp5Th1ee94f9bLlswnoOLEADD4PljzNodWhYhrSbLp/n6VVUt3g+3Q61+3L
RwivmqccUKs6tP3pbejA2om+Em7wFxu9RAnrL7C2Iss4WCHInQIplEB4lO+bvRFB
EZoOWshyDFjlaA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:01 2025 by rpki-client