Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/2f307fcc-7384-3e12-a605-cff886065467.roa
File:                     2f307fcc-7384-3e12-a605-cff886065467.roa (raw, json)
Hash identifier:          +QfynnzfKG7cBdIh4BBgRdYL1qHS8yz6PI/N65o5qVY=
Subject key identifier:   FF:6B:93:FC:13:0E:8D:31:39:04:36:72:E9:AD:8B:8E:D2:BC:00:F4
Certificate issuer:       /CN=9753e726-64c1-48a7-af77-48b8031adfe4
Certificate serial:       010D0C9F4328584AB4224C67BF25AAE3047F39C0
Authority key identifier: E8:F9:63:21:AB:42:45:98:40:07:29:D7:6A:10:2C:FB:E5:D2:E6:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/2f307fcc-7384-3e12-a605-cff886065467.roa
Signing time:             Thu 31 Jul 2025 18:15:22 +0000
ROA not before:           Thu 31 Jul 2025 18:15:22 +0000
ROA not after:            Wed 29 Oct 2025 18:15:22 +0000
asID:                     16509
IP address blocks:        204.69.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9753e726-64c1-48a7-af77-48b8031adfe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9753e726-64c1-48a7-af77-48b8031adfe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:22:4c:67:bf:25:aa:e3:04:7f:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9753e726-64c1-48a7-af77-48b8031adfe4
        Validity
            Not Before: Jul 31 18:15:22 2025 GMT
            Not After : Oct 29 18:15:22 2025 GMT
        Subject: CN=f2fb61a9-a8d0-4f54-8c88-6270b7a6726d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:6f:0e:38:3f:3b:88:dd:20:9e:6e:ce:82:
                    8d:59:45:83:c6:0f:73:a6:f1:99:5b:9b:ca:39:29:
                    97:9d:07:3e:38:6c:21:11:7c:1e:3d:6e:dd:de:d7:
                    93:49:04:9c:b9:a7:9e:00:6f:d6:a3:e8:ca:0e:7b:
                    31:94:ba:3a:94:bd:32:9b:13:fa:4e:21:05:18:ea:
                    b5:f3:b0:a6:2f:43:36:b8:bf:62:f9:fe:7a:89:15:
                    40:76:6a:af:18:da:a8:fb:68:53:d0:a0:86:e1:47:
                    27:f0:a8:7d:6f:1f:3d:4f:3b:5b:4b:bd:77:25:28:
                    dc:28:a5:5c:28:58:e4:07:9b:d2:31:e3:82:1a:9e:
                    3f:ba:ed:99:a4:94:c6:ff:d8:2d:f8:e4:fd:fc:43:
                    bc:ca:06:2e:5d:d4:96:83:61:f8:9b:fb:05:7e:e7:
                    f7:3a:9f:b6:f5:97:aa:1f:5d:8b:f5:f7:1f:b1:89:
                    bb:4d:f4:e7:ce:7e:c1:a8:d9:de:d9:56:91:3a:69:
                    c8:8c:c7:f2:c6:6e:d3:f9:45:b9:50:0f:b6:f9:d2:
                    10:ae:fd:4c:1f:86:a5:ff:36:98:02:51:fc:b1:52:
                    b3:78:22:9c:6b:d2:c4:4d:ed:04:f5:e3:46:eb:48:
                    ea:9d:08:6b:12:65:f1:81:9d:e2:5d:ab:1d:cc:39:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6B:93:FC:13:0E:8D:31:39:04:36:72:E9:AD:8B:8E:D2:BC:00:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/2f307fcc-7384-3e12-a605-cff886065467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9753e726-64c1-48a7-af77-48b8031adfe4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F9:63:21:AB:42:45:98:40:07:29:D7:6A:10:2C:FB:E5:D2:E6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:02:fe:d0:bd:a7:85:13:5a:4d:23:8b:c6:37:4d:93:bb:e0:
         17:6c:a1:49:c5:d0:89:04:a5:03:fe:44:92:8f:d6:e6:87:f4:
         c7:e0:3c:da:0c:da:be:11:26:e3:e8:c2:fb:c8:ee:e0:31:0d:
         57:a7:12:10:ff:05:80:09:27:97:7c:c1:eb:4c:0d:94:d3:11:
         0a:3a:74:47:3e:dd:fe:49:8c:85:77:f2:fc:2c:d4:45:bf:35:
         62:76:37:10:5a:5d:39:47:a5:79:46:fc:bb:48:28:b1:b1:cb:
         9c:9b:75:61:26:b6:4d:7f:00:c0:31:f4:dc:33:d1:07:65:fa:
         b5:22:e6:f5:b2:b2:1e:1e:f5:da:68:c7:57:a0:c2:f0:6b:1b:
         b3:66:b6:54:7d:4c:42:60:27:66:91:96:f8:4c:e5:2f:72:6d:
         1b:c0:07:6b:bf:c7:ae:bf:36:6d:5e:68:5f:53:f5:55:6f:fe:
         3c:5c:d0:c3:6b:78:13:14:ec:ff:96:72:1d:2d:ca:71:29:5c:
         be:26:f3:35:fd:43:bd:7f:df:d7:46:db:32:a2:96:88:b5:6b:
         f2:a5:91:bc:f3:08:0b:c2:e9:32:f6:a5:09:aa:01:f1:1e:45:
         a9:c4:3e:9f:53:49:e0:76:3b:57:18:fa:c6:f3:93:4f:08:bf:
         52:36:30:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0IkxnvyWq4wR/OcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTc1M2U3MjYtNjRjMS00OGE3LWFmNzctNDhiODAzMWFk
ZmU0MB4XDTI1MDczMTE4MTUyMloXDTI1MTAyOTE4MTUyMlowLzEtMCsGA1UEAxMk
ZjJmYjYxYTktYThkMC00ZjU0LThjODgtNjI3MGI3YTY3MjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozFvDjg/O4jdIJ5uzoKNWUWDxg9zpvGZW5vK
OSmXnQc+OGwhEXwePW7d3teTSQScuaeeAG/Wo+jKDnsxlLo6lL0ymxP6TiEFGOq1
87CmL0M2uL9i+f56iRVAdmqvGNqo+2hT0KCG4Ucn8Kh9bx89TztbS713JSjcKKVc
KFjkB5vSMeOCGp4/uu2ZpJTG/9gt+OT9/EO8ygYuXdSWg2H4m/sFfuf3Op+29Zeq
H12L9fcfsYm7TfTnzn7BqNne2VaROmnIjMfyxm7T+UW5UA+2+dIQrv1MH4al/zaY
AlH8sVKzeCKca9LETe0E9eNG60jqnQhrEmXxgZ3iXasdzDmHKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP9rk/wTDo0xOQQ2cumti47SvAD0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NzUz
ZTcyNi02NGMxLTQ4YTctYWY3Ny00OGI4MDMxYWRmZTQvMmYzMDdmY2MtNzM4NC0z
ZTEyLWE2MDUtY2ZmODg2MDY1NDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTc1M2U3MjYtNjRjMS00OGE3LWFm
NzctNDhiODAzMWFkZmU0Lzk3NTNlNzI2LTY0YzEtNDhhNy1hZjc3LTQ4YjgwMzFh
ZGZlNC5jcmwwHwYDVR0jBBgwFoAU6PljIatCRZhABynXahAs++XS5kowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85NzUzZTcyNi02NGMxLTQ4YTctYWY3Ny00OGI4
MDMxYWRmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEULMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8C/tC9p4UTWk0ji8Y3TZO74BdsoUnF0IkEpQP+RJKP1uaH9MfgPNoM
2r4RJuPowvvI7uAxDVenEhD/BYAJJ5d8wetMDZTTEQo6dEc+3f5JjIV38vws1EW/
NWJ2NxBaXTlHpXlG/LtIKLGxy5ybdWEmtk1/AMAx9Nwz0Qdl+rUi5vWysh4e9dpo
x1egwvBrG7NmtlR9TEJgJ2aRlvhM5S9ybRvAB2u/x66/Nm1eaF9T9VVv/jxc0MNr
eBMU7P+Wch0tynEpXL4m8zX9Q71/39dG2zKiloi1a/KlkbzzCAvC6TL2pQmqAfEe
RanEPp9TSeB2O1cY+sbzk08Iv1I2MCc=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:47:45 2025 by rpki-client