Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/b30d0cf3-5bc3-33cb-b512-60884486ed5b.roa
File:                     b30d0cf3-5bc3-33cb-b512-60884486ed5b.roa (raw, json)
Hash identifier:          YwtFehk8UmbhUjL6a0WDkzhseHgDnUFG1iy6bWBlroU=
Subject key identifier:   84:37:A1:7C:1B:AF:4C:35:AA:D5:D7:79:EF:6E:7B:7E:54:05:C4:A5
Certificate issuer:       /CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744
Certificate serial:       010D0C9F4328584BB4FF0426BA315C00B2FD8E80
Authority key identifier: EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/b30d0cf3-5bc3-33cb-b512-60884486ed5b.roa
Signing time:             Fri 31 Oct 2025 18:27:02 +0000
ROA not before:           Fri 31 Oct 2025 18:27:02 +0000
ROA not after:            Thu 29 Jan 2026 19:27:02 +0000
asID:                     14618
IP address blocks:        149.24.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:ff:04:26:ba:31:5c:00:b2:fd:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744
        Validity
            Not Before: Oct 31 18:27:02 2025 GMT
            Not After : Jan 29 19:27:02 2026 GMT
        Subject: CN=6a1ac81b-00c8-4b90-95ce-b103e82d66ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:57:0f:05:f1:4e:88:5b:e2:e3:4c:89:67:
                    a8:dc:45:f6:fd:58:4c:b7:b8:0a:32:71:91:b9:9e:
                    ed:c7:47:0f:2d:97:ca:d8:27:09:30:0e:fe:c8:8c:
                    7e:cf:fd:61:7a:69:e9:e9:0f:04:57:0a:71:10:63:
                    db:c5:b8:0b:7a:98:08:04:f4:04:37:e7:b7:d4:bd:
                    e6:f7:d1:d5:35:7a:be:79:e3:cf:79:d5:76:0b:16:
                    07:02:48:d2:b5:84:8b:c3:9d:7f:8b:d7:ac:fc:5b:
                    97:01:fb:5b:d5:9c:3a:04:42:d0:9e:2d:77:19:75:
                    01:ae:20:49:3d:42:a5:f4:c9:f6:dd:a4:b2:85:68:
                    70:21:3f:d5:b7:cc:f9:01:77:33:7c:a0:ef:f8:29:
                    a4:08:2e:40:29:aa:a2:ae:7a:1b:3a:0d:f3:92:37:
                    8c:ab:9a:98:8d:fe:92:96:af:25:89:35:0d:df:ba:
                    10:8a:d2:0c:5b:1b:02:0b:e0:e0:40:90:ec:3a:99:
                    99:66:ae:b2:03:17:e9:fd:05:41:08:7f:4a:36:15:
                    12:7a:99:4f:37:87:e4:0a:8b:35:d2:3a:3d:df:e1:
                    2e:46:b1:b2:da:e9:92:3e:af:3e:99:70:00:65:e9:
                    c3:ef:e5:a1:26:e6:c0:85:b7:42:9a:a7:ba:05:6b:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:37:A1:7C:1B:AF:4C:35:AA:D5:D7:79:EF:6E:7B:7E:54:05:C4:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/b30d0cf3-5bc3-33cb-b512-60884486ed5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.crl

            X509v3 Authority Key Identifier:
                keyid:EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.24.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:7f:82:b8:2f:89:f7:a9:bb:e6:e6:1f:58:eb:cd:c4:ae:e9:
         3c:49:aa:ff:f7:d8:b6:3f:10:e7:55:0d:00:4e:f4:0d:61:8f:
         ca:45:51:ce:05:a2:f8:42:6e:0d:b7:ae:96:80:07:25:f9:21:
         33:69:26:6d:98:ba:06:00:5a:34:0d:81:ca:98:28:cf:ff:b5:
         e4:8a:83:3e:55:d6:8f:63:13:34:81:0a:71:6a:f6:93:d4:e2:
         1d:c0:1b:a6:7e:cf:bc:49:11:2a:4e:a9:0f:ba:ff:f5:b9:48:
         aa:19:e7:e5:6a:c4:b7:da:c4:08:db:9d:e2:a8:01:e5:49:f6:
         6d:5a:0e:48:ff:c0:88:15:0b:91:72:17:30:ba:37:6f:63:8b:
         ce:23:fa:40:6c:65:b3:77:ec:bf:08:4e:c3:14:05:e9:6f:55:
         9b:6d:81:57:09:31:24:3d:51:b2:fa:f8:49:e8:fd:19:86:7e:
         80:7d:d2:63:d0:03:b8:6f:97:fa:3f:99:bb:25:de:c2:46:3a:
         19:cc:c0:7a:c7:29:fd:ef:5f:48:50:49:ad:31:6b:62:0d:63:
         a9:99:7b:f0:e7:3c:17:94:a7:91:d4:db:d2:6b:54:63:a4:1f:
         63:23:14:03:1d:31:af:d4:7f:c1:55:af:1a:48:5d:ea:7b:5b:
         51:a9:a2:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0/wQmujFcALL9joAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzc2OGYyYzEtZjU1Yi00YWU4LWE0NGMtYjliNjA2MmQz
NzQ0MB4XDTI1MTAzMTE4MjcwMloXDTI2MDEyOTE5MjcwMlowLzEtMCsGA1UEAxMk
NmExYWM4MWItMDBjOC00YjkwLTk1Y2UtYjEwM2U4MmQ2NmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEBXDwXxTohb4uNMiWeo3EX2/VhMt7gKMnGR
uZ7tx0cPLZfK2CcJMA7+yIx+z/1hemnp6Q8EVwpxEGPbxbgLepgIBPQEN+e31L3m
99HVNXq+eePPedV2CxYHAkjStYSLw51/i9es/FuXAftb1Zw6BELQni13GXUBriBJ
PUKl9Mn23aSyhWhwIT/Vt8z5AXczfKDv+CmkCC5AKaqirnobOg3zkjeMq5qYjf6S
lq8liTUN37oQitIMWxsCC+DgQJDsOpmZZq6yAxfp/QVBCH9KNhUSeplPN4fkCos1
0jo93+EuRrGy2umSPq8+mXAAZenD7+WhJubAhbdCmqe6BWsOQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIQ3oXwbr0w1qtXXee9ue35UBcSlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNzY4
ZjJjMS1mNTViLTRhZTgtYTQ0Yy1iOWI2MDYyZDM3NDQvYjMwZDBjZjMtNWJjMy0z
M2NiLWI1MTItNjA4ODQ0ODZlZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzc2OGYyYzEtZjU1Yi00YWU4LWE0
NGMtYjliNjA2MmQzNzQ0L2M3NjhmMmMxLWY1NWItNGFlOC1hNDRjLWI5YjYwNjJk
Mzc0NC5jcmwwHwYDVR0jBBgwFoAU7k9Fo7URssO3gzYRQV66lfbLbZ0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNzY4ZjJjMS1mNTViLTRhZTgtYTQ0Yy1iOWI2
MDYyZDM3NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlRh6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFB/grgvifepu+bmH1jrzcSu6TxJqv/32LY/EOdVDQBO9A1hj8pFUc4F
ovhCbg23rpaAByX5ITNpJm2YugYAWjQNgcqYKM//teSKgz5V1o9jEzSBCnFq9pPU
4h3AG6Z+z7xJESpOqQ+6//W5SKoZ5+VqxLfaxAjbneKoAeVJ9m1aDkj/wIgVC5Fy
FzC6N29ji84j+kBsZbN37L8ITsMUBelvVZttgVcJMSQ9UbL6+Eno/RmGfoB90mPQ
A7hvl/o/mbsl3sJGOhnMwHrHKf3vX0hQSa0xa2INY6mZe/DnPBeUp5HU29JrVGOk
H2MjFAMdMa/Uf8FVrxpIXep7W1Gpopo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:34:42 2025 by rpki-client