Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/bfc668e6-2f3e-30a4-a410-a3e745688f64.roa
File:                     bfc668e6-2f3e-30a4-a410-a3e745688f64.roa (raw, json)
Hash identifier:          S3rW3E0DZ35rpoIxk/PCulEcMyuaRNiafOKJOT6K6Rw=
Subject key identifier:   4D:AF:49:7B:5E:02:FE:07:40:4B:6E:49:A5:F4:40:B8:FE:C4:C6:BA
Certificate issuer:       /CN=946cb195-9b9a-4836-9152-b97e9e831144
Certificate serial:       010D0C9F4328584AA42B809110AAA2B2AA3F3B80
Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/bfc668e6-2f3e-30a4-a410-a3e745688f64.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        142.54.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:80:91:10:aa:a2:b2:aa:3f:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=1f69e8e7-87c4-47ee-ab87-84b26c6cbe15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:3e:45:5e:fd:c0:91:e0:fc:aa:df:c7:d1:
                    20:dc:29:d4:c2:6a:0d:35:a4:f7:81:39:ca:cb:2a:
                    16:bf:06:44:74:18:4d:1c:09:c3:f8:bc:ed:4f:d3:
                    9b:da:f5:27:10:96:63:b5:07:3f:e6:25:75:84:8e:
                    30:80:3f:5c:c7:cd:c0:1c:bf:ae:13:78:e4:38:a2:
                    63:50:8a:06:f3:8b:2b:4e:19:37:bc:e7:68:a6:a8:
                    42:86:c8:fb:cf:83:4d:1d:48:cd:94:80:44:cf:ad:
                    34:76:a9:07:12:78:87:39:58:41:24:dc:4e:44:d3:
                    e4:e6:72:d5:cc:6a:aa:43:be:c7:82:40:92:4c:bb:
                    20:46:1d:b8:af:05:1b:aa:a9:63:50:74:cf:61:e8:
                    9d:7b:43:d6:ca:ec:42:c2:b0:17:a5:e1:dc:1e:55:
                    72:15:2a:02:b1:ef:f4:9d:2d:6b:6b:0e:2b:ee:3d:
                    50:d0:ed:be:62:e2:9f:09:f6:f2:7d:dd:a1:9c:90:
                    35:53:cf:43:90:d3:77:6f:16:77:be:47:5e:63:3e:
                    54:47:33:a1:2b:fe:16:d6:ce:7f:ec:fa:72:9b:f6:
                    c2:05:af:22:a8:cf:ed:1c:70:0c:af:c7:cf:f1:af:
                    0e:5f:9e:6b:aa:55:76:13:c7:10:78:f1:f5:d8:94:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AF:49:7B:5E:02:FE:07:40:4B:6E:49:A5:F4:40:B8:FE:C4:C6:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/bfc668e6-2f3e-30a4-a410-a3e745688f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl

            X509v3 Authority Key Identifier:
                keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:46:85:b0:d4:1a:0e:75:6f:30:2e:ee:1f:b7:1a:41:f8:79:
         bb:a3:15:a0:eb:e2:f6:43:02:73:ed:71:8d:e6:e2:89:62:a0:
         4c:22:04:d9:c0:23:5b:4f:0d:82:b6:1c:04:17:4a:39:26:38:
         61:28:23:ee:c6:29:ed:7f:9c:a1:61:ca:b2:af:73:04:5f:2d:
         03:c4:89:4e:93:4d:dc:b5:7b:e4:03:81:38:e9:94:f9:11:b0:
         3f:2b:ad:38:12:b9:05:51:f4:0c:9e:82:a3:5a:ae:84:87:13:
         08:bf:4e:5f:77:e6:aa:4c:9d:b8:7b:6f:4c:bb:be:0a:cd:fa:
         ec:eb:ca:80:89:53:fe:07:53:12:93:a4:f5:00:79:a3:9f:bb:
         bb:c0:3c:60:bb:79:5f:dc:fe:37:41:5f:23:3c:87:24:dc:ce:
         57:8a:fe:fe:ee:a4:31:c4:16:2e:a3:70:ac:c8:8c:d5:bb:34:
         14:f1:bd:51:78:33:16:3f:37:ea:57:0f:45:ac:a0:f8:08:30:
         f3:d4:5d:38:21:fb:4f:ba:54:92:f9:c0:fb:68:34:01:d4:ae:
         b5:6e:23:2c:61:0a:90:ce:f5:a7:08:36:f8:1f:6f:12:47:c2:
         c0:d5:d9:26:c2:bb:ec:ed:cf:fa:6b:69:40:44:eb:2e:d4:af:
         23:30:e2:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4CREKqisqo/O4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ2Y2IxOTUtOWI5YS00ODM2LTkxNTItYjk3ZTllODMx
MTQ0MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
MWY2OWU4ZTctODdjNC00N2VlLWFiODctODRiMjZjNmNiZTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgE+RV79wJHg/Krfx9Eg3CnUwmoNNaT3gTnK
yyoWvwZEdBhNHAnD+LztT9Ob2vUnEJZjtQc/5iV1hI4wgD9cx83AHL+uE3jkOKJj
UIoG84srThk3vOdopqhChsj7z4NNHUjNlIBEz600dqkHEniHOVhBJNxORNPk5nLV
zGqqQ77HgkCSTLsgRh24rwUbqqljUHTPYeide0PWyuxCwrAXpeHcHlVyFSoCse/0
nS1raw4r7j1Q0O2+YuKfCfbyfd2hnJA1U89DkNN3bxZ3vkdeYz5URzOhK/4W1s5/
7Ppym/bCBa8iqM/tHHAMr8fP8a8OX55rqlV2E8cQePH12JR5fQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE2vSXteAv4HQEtuSaX0QLj+xMa6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NDZj
YjE5NS05YjlhLTQ4MzYtOTE1Mi1iOTdlOWU4MzExNDQvYmZjNjY4ZTYtMmYzZS0z
MGE0LWE0MTAtYTNlNzQ1Njg4ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTQ2Y2IxOTUtOWI5YS00ODM2LTkx
NTItYjk3ZTllODMxMTQ0Lzk0NmNiMTk1LTliOWEtNDgzNi05MTUyLWI5N2U5ZTgz
MTE0NC5jcmwwHwYDVR0jBBgwFoAU1WDzXob02ndtuMXazfHRY5vlND0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85NDZjYjE5NS05YjlhLTQ4MzYtOTE1Mi1iOTdl
OWU4MzExNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjjYpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL9GhbDUGg51bzAu7h+3GkH4ebujFaDr4vZDAnPtcY3m4olioEwiBNnA
I1tPDYK2HAQXSjkmOGEoI+7GKe1/nKFhyrKvcwRfLQPEiU6TTdy1e+QDgTjplPkR
sD8rrTgSuQVR9AyegqNaroSHEwi/Tl935qpMnbh7b0y7vgrN+uzryoCJU/4HUxKT
pPUAeaOfu7vAPGC7eV/c/jdBXyM8hyTczleK/v7upDHEFi6jcKzIjNW7NBTxvVF4
MxY/N+pXD0WsoPgIMPPUXTgh+0+6VJL5wPtoNAHUrrVuIyxhCpDO9acINvgfbxJH
wsDV2SbCu+ztz/praUBE6y7UryMw4qU=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:38:17 2025 by rpki-client