Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/d46ff718-b4a6-38ee-9408-04de2dd327e1.roa
File:                     d46ff718-b4a6-38ee-9408-04de2dd327e1.roa (raw, json)
Hash identifier:          zlu9Ejo2hZLIHi6G6S1LXZrVw3zwrEUJmJ5Y6VMt1Cs=
Subject key identifier:   37:1F:9E:C2:E8:1F:BF:EF:C3:FD:1F:A9:09:A3:D0:21:67:4C:8D:79
Certificate issuer:       /CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da
Certificate serial:       010D0C9F4328584AA160E1DAE044B3B088EE7A80
Authority key identifier: D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/d46ff718-b4a6-38ee-9408-04de2dd327e1.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     30399
IP address blocks:        149.112.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:e1:da:e0:44:b3:b0:88:ee:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=17e726fc-afa9-4cdd-92fa-39342cf756ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f8:83:dc:2f:3a:f7:8a:fa:3f:d7:f9:1c:5d:
                    98:15:d5:02:0d:6e:98:da:fa:5e:a3:c3:36:1f:7e:
                    51:5d:bd:2d:cf:18:99:91:b5:f7:61:0b:c9:8c:cc:
                    81:84:c3:ca:38:40:6e:bd:bb:7b:0b:27:e9:cd:7f:
                    c6:8c:48:e7:6f:dd:18:03:e3:f0:a9:c7:e3:96:9d:
                    d2:66:9f:72:b3:6a:99:d3:10:f1:1f:53:aa:40:36:
                    0a:6d:27:60:a7:62:06:40:43:4b:43:25:23:75:2e:
                    a4:e8:07:ab:75:5c:ac:82:9a:74:c7:d4:48:60:ea:
                    35:cb:c4:90:36:c1:34:99:c4:2f:5c:9d:ff:b7:7e:
                    06:4a:38:4f:e7:8a:bd:74:11:1b:e7:dd:32:f5:44:
                    5e:e7:c5:8a:37:e3:9a:97:ce:37:52:5c:14:f7:f5:
                    f3:36:a3:64:e4:aa:9b:d5:6f:16:c6:84:83:11:3d:
                    f3:e1:e0:4f:0e:20:48:fa:42:ff:bc:9e:b2:37:3a:
                    e9:de:84:de:96:12:7f:71:e3:8b:1e:22:68:2e:db:
                    6b:e6:a4:fb:d9:b9:20:ac:5e:e8:17:e5:a5:eb:82:
                    2b:4a:0d:90:81:14:9b:7c:8c:ef:b9:0b:ed:73:2e:
                    b7:46:b1:15:35:a6:57:58:9a:99:2b:73:58:c1:52:
                    7d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1F:9E:C2:E8:1F:BF:EF:C3:FD:1F:A9:09:A3:D0:21:67:4C:8D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/d46ff718-b4a6-38ee-9408-04de2dd327e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.crl

            X509v3 Authority Key Identifier:
                keyid:D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:69:20:3c:22:31:10:bf:53:17:df:42:e1:4d:78:b0:a9:35:
         d8:9e:e0:38:2f:0d:e0:e6:1e:3d:72:69:67:c8:f4:1b:31:7e:
         7b:2f:0f:86:ce:5c:cc:67:ca:5f:35:0c:12:ca:f8:dd:dd:7a:
         cf:c2:ef:78:31:de:ca:07:73:68:c9:5d:93:7b:8d:46:a4:97:
         9c:c9:ea:49:93:04:17:3e:fc:f3:21:d5:03:99:c0:97:1d:46:
         a6:bb:6e:79:aa:75:ae:cc:d1:29:05:7e:d6:9a:89:c8:e3:4b:
         90:7c:50:65:a8:34:98:6d:3b:48:31:eb:5b:7b:eb:4a:4c:3d:
         81:a7:be:ca:69:10:27:22:96:1c:53:d1:9a:75:71:ed:15:68:
         11:d4:40:f3:89:74:0d:18:db:17:b9:45:f7:68:bb:d8:89:d6:
         34:38:44:f7:8e:57:81:f8:71:a2:ea:99:80:8f:5f:60:15:9a:
         c1:8c:ca:a9:2c:5b:b5:37:0a:8b:e1:6a:75:4e:06:aa:fb:0f:
         07:4e:fb:21:27:ae:fa:2a:ae:78:b0:3e:80:c3:6d:5e:1b:c0:
         20:61:d3:15:02:db:5c:ba:2a:2d:30:38:55:15:1f:71:31:74:
         da:2f:fc:e9:1a:28:de:d4:fa:f3:65:90:69:ef:48:23:84:4b:
         2f:59:5b:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYOHa4ESzsIjueoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IxMGQ3YmEtZTI3My00ZDM0LTg2ODgtYzdjMWUzOGFi
NmRhMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
MTdlNzI2ZmMtYWZhOS00Y2RkLTkyZmEtMzkzNDJjZjc1NmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fiD3C8694r6P9f5HF2YFdUCDW6Y2vpeo8M2
H35RXb0tzxiZkbX3YQvJjMyBhMPKOEBuvbt7CyfpzX/GjEjnb90YA+Pwqcfjlp3S
Zp9ys2qZ0xDxH1OqQDYKbSdgp2IGQENLQyUjdS6k6AerdVysgpp0x9RIYOo1y8SQ
NsE0mcQvXJ3/t34GSjhP54q9dBEb590y9URe58WKN+Oal843UlwU9/XzNqNk5Kqb
1W8WxoSDET3z4eBPDiBI+kL/vJ6yNzrp3oTelhJ/ceOLHiJoLttr5qT72bkgrF7o
F+Wl64IrSg2QgRSbfIzvuQvtcy63RrEVNaZXWJqZK3NYwVJ9AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDcfnsLoH7/vw/0fqQmj0CFnTI15MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YjEw
ZDdiYS1lMjczLTRkMzQtODY4OC1jN2MxZTM4YWI2ZGEvZDQ2ZmY3MTgtYjRhNi0z
OGVlLTk0MDgtMDRkZTJkZDMyN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2IxMGQ3YmEtZTI3My00ZDM0LTg2
ODgtYzdjMWUzOGFiNmRhLzdiMTBkN2JhLWUyNzMtNGQzNC04Njg4LWM3YzFlMzhh
YjZkYS5jcmwwHwYDVR0jBBgwFoAU1kXVwWz7OXhjCYzZhMaxExZymo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83YjEwZDdiYS1lMjczLTRkMzQtODY4OC1jN2Mx
ZTM4YWI2ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXBvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVpIDwiMRC/UxffQuFNeLCpNdie4DgvDeDmHj1yaWfI9BsxfnsvD4bO
XMxnyl81DBLK+N3des/C73gx3soHc2jJXZN7jUakl5zJ6kmTBBc+/PMh1QOZwJcd
Rqa7bnmqda7M0SkFftaaicjjS5B8UGWoNJhtO0gx61t760pMPYGnvsppECcilhxT
0Zp1ce0VaBHUQPOJdA0Y2xe5Rfdou9iJ1jQ4RPeOV4H4caLqmYCPX2AVmsGMyqks
W7U3CovhanVOBqr7DwdO+yEnrvoqrniwPoDDbV4bwCBh0xUC21y6Ki0wOFUVH3Ex
dNov/OkaKN7U+vNlkGnvSCOESy9ZW+U=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:24:37 2025 by rpki-client