Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bed1dd50-d36b-3af3-ade0-a9f8d474bcb0.roa
File:                     bed1dd50-d36b-3af3-ade0-a9f8d474bcb0.roa (raw, json)
Hash identifier:          rSGFHpKfmbhaaCc9xYN4sF236b2Xvm3kjXtp77DLYFM=
Subject key identifier:   B0:71:7D:BF:17:C3:4E:58:3F:98:C7:44:F5:AF:D1:3E:28:09:35:40
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4B9A8464943788192042C0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bed1dd50-d36b-3af3-ade0-a9f8d474bcb0.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        142.79.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:9a:84:64:94:37:88:19:20:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=380876e6-3976-4edb-b31a-cad32bd6209e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:08:f8:fe:3d:3c:20:47:0f:13:94:ad:94:8f:
                    56:d9:a9:b8:e0:f5:4f:1a:34:66:e4:f5:c8:e2:cf:
                    86:0a:4a:03:c3:d3:ff:c1:a9:14:f2:07:92:d2:61:
                    53:d5:e2:af:e3:44:7e:ef:8f:d6:c5:6f:b3:d5:d6:
                    6c:90:aa:99:11:a1:b4:41:42:ed:ae:ad:75:d8:3a:
                    d2:5b:95:b8:50:8e:f1:08:59:b9:7d:96:33:4d:4d:
                    72:4f:e6:ad:30:a6:36:73:01:62:31:33:79:d7:07:
                    99:ec:d0:75:bf:35:51:dc:5e:2d:9f:39:b1:83:dc:
                    60:7c:a0:38:61:13:8f:e3:db:bf:5b:c0:c3:2d:db:
                    4c:de:f8:a9:85:8c:75:a6:58:07:87:38:e4:8a:38:
                    38:a2:a1:d4:cb:ec:15:52:7b:8b:fa:73:1f:df:c0:
                    c6:cb:2e:56:fb:e9:b3:69:47:0c:da:e9:65:3f:55:
                    8e:0e:71:d7:5a:15:b5:29:bb:5d:ae:79:bb:25:96:
                    02:16:7e:c6:8e:43:13:b4:46:75:de:f9:b8:3d:e5:
                    b2:10:db:a9:67:d6:51:81:a7:6b:f4:81:6e:fd:a8:
                    e7:e6:a3:78:c2:fb:c3:d8:41:06:d7:a4:8c:f3:8b:
                    15:80:53:78:fc:3d:6d:bf:ac:63:3b:38:cf:ec:68:
                    cb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:71:7D:BF:17:C3:4E:58:3F:98:C7:44:F5:AF:D1:3E:28:09:35:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bed1dd50-d36b-3af3-ade0-a9f8d474bcb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e7:eb:c7:ee:b3:5b:aa:c6:1e:25:a0:78:e5:64:ec:be:80:
         49:89:ea:87:9c:ea:ef:9a:8b:a4:fb:d5:b6:da:74:58:70:03:
         e8:19:e8:4b:37:a4:98:30:38:04:d1:53:6e:55:4e:73:04:df:
         13:39:72:07:76:88:fa:1f:5b:ab:a7:64:88:b3:83:c0:fd:8f:
         30:b5:04:ac:6e:e9:7f:28:05:85:c3:72:87:9c:d9:8c:28:e2:
         83:84:83:a0:df:bb:58:69:20:83:71:4d:06:3b:94:a1:63:3b:
         41:c1:e9:30:9b:fb:65:77:ff:c3:14:f7:f8:76:74:3d:07:d2:
         49:5e:dd:7b:35:90:ac:38:5e:03:ac:05:84:76:b1:de:84:2f:
         0e:4b:fa:8f:61:d5:b5:48:c1:83:0a:d5:4e:00:fe:ca:4a:75:
         36:94:48:d9:be:a7:e8:5e:58:be:3c:ce:e0:9c:84:de:65:4f:
         53:8e:58:61:e8:9c:dd:0c:63:de:e6:20:81:1a:79:ca:29:a7:
         b0:75:05:2b:ee:0c:18:22:52:e4:eb:c9:32:e1:dc:43:c8:ef:
         66:c8:58:f4:f1:61:13:29:e5:e3:d5:0f:d4:66:3e:75:7f:02:
         03:8d:f5:bb:7d:9c:5c:fc:75:13:85:06:54:05:88:7e:8d:b1:
         a2:38:d8:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5qEZJQ3iBkgQsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
MzgwODc2ZTYtMzk3Ni00ZWRiLWIzMWEtY2FkMzJiZDYyMDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwj4/j08IEcPE5StlI9W2am44PVPGjRm5PXI
4s+GCkoDw9P/wakU8geS0mFT1eKv40R+74/WxW+z1dZskKqZEaG0QULtrq112DrS
W5W4UI7xCFm5fZYzTU1yT+atMKY2cwFiMTN51weZ7NB1vzVR3F4tnzmxg9xgfKA4
YROP49u/W8DDLdtM3viphYx1plgHhzjkijg4oqHUy+wVUnuL+nMf38DGyy5W++mz
aUcM2ullP1WODnHXWhW1Kbtdrnm7JZYCFn7GjkMTtEZ13vm4PeWyENupZ9ZRgadr
9IFu/ajn5qN4wvvD2EEG16SM84sVgFN4/D1tv6xjOzjP7GjL8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLBxfb8Xw05YP5jHRPWv0T4oCTVAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYmVkMWRkNTAtZDM2Yi0z
YWYzLWFkZTAtYTlmOGQ0NzRiY2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjk94MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/n68fus1uqxh4loHjlZOy+gEmJ6oec6u+ai6T71bbadFhwA+gZ6Es3
pJgwOATRU25VTnME3xM5cgd2iPofW6unZIizg8D9jzC1BKxu6X8oBYXDcoec2Ywo
4oOEg6Dfu1hpIINxTQY7lKFjO0HB6TCb+2V3/8MU9/h2dD0H0kle3Xs1kKw4XgOs
BYR2sd6ELw5L+o9h1bVIwYMK1U4A/spKdTaUSNm+p+heWL48zuCchN5lT1OOWGHo
nN0MY97mIIEaecopp7B1BSvuDBgiUuTryTLh3EPI72bIWPTxYRMp5ePVD9RmPnV/
AgON9bt9nFz8dROFBlQFiH6NsaI42O4=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:20:59 2025 by rpki-client