Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/37232b7a-fbbe-3b90-ab74-dbf704fcd6c9.roa
File:                     37232b7a-fbbe-3b90-ab74-dbf704fcd6c9.roa (raw, json)
Hash identifier:          DAebXoeH6mJu3h7IUOP15Fh3+xAPmSPk2gxJQeMl24Y=
Subject key identifier:   7C:E5:29:16:30:14:9B:61:3B:79:AA:90:E0:77:DB:97:0B:3D:43:44
Certificate issuer:       /CN=110a5b23-7e5e-47cb-81e1-4e9068274549
Certificate serial:       010D0C9F4328584B44B1BEDF3D1265A519F29D00
Authority key identifier: D7:6E:E5:FF:07:90:4B:35:26:51:BF:CC:96:CC:6D:9D:FE:9B:0E:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/37232b7a-fbbe-3b90-ab74-dbf704fcd6c9.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     19186
IP address blocks:        208.103.169.85/32 maxlen: 32
                          208.103.169.222/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/110a5b23-7e5e-47cb-81e1-4e9068274549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/110a5b23-7e5e-47cb-81e1-4e9068274549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:be:df:3d:12:65:a5:19:f2:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110a5b23-7e5e-47cb-81e1-4e9068274549
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=071b803d-20f0-4006-8814-4849cf5d9f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:20:73:22:20:e6:85:0a:e0:f5:89:77:6b:
                    b7:08:a1:ce:f5:c8:52:9d:61:85:94:9f:83:40:a4:
                    b9:b7:2d:52:07:96:f5:20:5e:a5:86:03:69:05:85:
                    c3:3b:b3:d8:10:b3:11:76:95:12:6f:1e:8a:7d:11:
                    79:33:44:ba:1c:15:7c:2b:03:df:33:49:98:5c:86:
                    61:89:df:f0:bf:3d:25:91:c4:24:60:60:09:ee:59:
                    08:00:df:03:f6:f2:01:a5:79:42:39:9a:65:2d:97:
                    2c:96:ae:84:e1:ec:fb:22:35:55:10:68:0d:01:ce:
                    fa:0f:95:1b:ec:82:56:66:3f:f9:5d:0e:f0:1a:d4:
                    9a:8b:4a:db:0a:05:8b:ec:cc:a9:83:49:04:b6:5e:
                    c4:39:2e:84:77:1b:08:84:c0:a3:7b:a3:bb:d6:18:
                    4c:bc:e8:94:41:22:69:4e:7d:0f:f6:25:15:6a:4f:
                    07:b7:44:06:a2:2c:61:fa:40:fa:fa:09:92:d1:a8:
                    f7:7c:5d:36:90:ec:d2:13:e1:08:a0:ef:de:2c:84:
                    1f:a3:b8:be:ae:cf:38:40:e7:25:27:e3:77:7e:9f:
                    dd:a2:02:ff:72:36:05:40:1c:fa:27:0e:7e:a1:f4:
                    42:bc:ef:28:56:2d:71:8f:27:39:af:9f:0c:0c:1b:
                    66:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E5:29:16:30:14:9B:61:3B:79:AA:90:E0:77:DB:97:0B:3D:43:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/37232b7a-fbbe-3b90-ab74-dbf704fcd6c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/110a5b23-7e5e-47cb-81e1-4e9068274549.crl

            X509v3 Authority Key Identifier:
                keyid:D7:6E:E5:FF:07:90:4B:35:26:51:BF:CC:96:CC:6D:9D:FE:9B:0E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.169.85/32
                  208.103.169.222/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:10:c3:63:96:98:18:aa:71:b2:34:a9:0f:92:6d:02:9a:7b:
         39:dc:d7:69:05:b4:aa:f1:a4:d1:d5:9b:7d:8d:9b:7a:8a:5e:
         34:ed:fb:2b:28:f6:bd:b3:ef:4f:e6:04:43:bb:38:4e:5a:b1:
         af:a9:97:3c:dc:7a:cd:df:fa:c1:c0:41:8a:72:50:f4:39:50:
         c6:bb:30:51:1a:7b:6c:b1:af:66:7d:d0:29:21:ec:a9:3e:f0:
         54:67:ca:68:84:87:c1:97:01:d9:f8:07:61:80:1d:9c:00:e6:
         23:f6:a8:48:ae:63:9a:bf:3f:c5:6c:8d:cd:ad:f3:89:8c:93:
         93:96:84:64:68:41:3c:53:48:d0:8e:f1:30:d7:5d:8c:72:6d:
         db:ef:8d:9c:e5:2a:d4:de:c8:b4:a1:18:aa:f5:eb:95:64:3b:
         0f:e6:e5:6e:6f:70:05:32:c5:a4:d0:7e:de:1e:c1:e2:d9:ae:
         e6:e2:49:b4:ed:b5:2a:93:23:14:f3:62:60:da:8c:e0:d9:9b:
         be:cb:2d:69:a8:bc:d6:cc:6e:08:4b:5d:d1:d7:b2:42:2d:41:
         08:92:24:88:a6:fe:69:9e:5b:a4:04:66:39:3b:61:b7:eb:fe:
         ed:e4:bb:56:8b:c5:7f:a9:44:a4:cb:7a:19:2b:3d:aa:e3:0e:
         e3:81:5d:9c
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEtEsb7fPRJlpRnynQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTEwYTViMjMtN2U1ZS00N2NiLTgxZTEtNGU5MDY4Mjc0
NTQ5MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk
MDcxYjgwM2QtMjBmMC00MDA2LTg4MTQtNDg0OWNmNWQ5ZjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2AgcyIg5oUK4PWJd2u3CKHO9chSnWGFlJ+D
QKS5ty1SB5b1IF6lhgNpBYXDO7PYELMRdpUSbx6KfRF5M0S6HBV8KwPfM0mYXIZh
id/wvz0lkcQkYGAJ7lkIAN8D9vIBpXlCOZplLZcslq6E4ez7IjVVEGgNAc76D5Ub
7IJWZj/5XQ7wGtSai0rbCgWL7Mypg0kEtl7EOS6EdxsIhMCje6O71hhMvOiUQSJp
Tn0P9iUVak8Ht0QGoixh+kD6+gmS0aj3fF02kOzSE+EIoO/eLIQfo7i+rs84QOcl
J+N3fp/dogL/cjYFQBz6Jw5+ofRCvO8oVi1xjyc5r58MDBtmdwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFHzlKRYwFJthO3mqkOB325cLPUNEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xMTBh
NWIyMy03ZTVlLTQ3Y2ItODFlMS00ZTkwNjgyNzQ1NDkvMzcyMzJiN2EtZmJiZS0z
YjkwLWFiNzQtZGJmNzA0ZmNkNmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTEwYTViMjMtN2U1ZS00N2NiLTgx
ZTEtNGU5MDY4Mjc0NTQ5LzExMGE1YjIzLTdlNWUtNDdjYi04MWUxLTRlOTA2ODI3
NDU0OS5jcmwwHwYDVR0jBBgwFoAU127l/weQSzUmUb/Mlsxtnf6bDjcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xMTBhNWIyMy03ZTVlLTQ3Y2ItODFlMS00ZTkw
NjgyNzQ1NDkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUA0GepVQMF
ANBnqd4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAaBDDY5aYGKpxsjSpD5JtApp7OdzXaQW0qvGk0dWbfY2b
eopeNO37Kyj2vbPvT+YEQ7s4Tlqxr6mXPNx6zd/6wcBBinJQ9DlQxrswURp7bLGv
Zn3QKSHsqT7wVGfKaISHwZcB2fgHYYAdnADmI/aoSK5jmr8/xWyNza3ziYyTk5aE
ZGhBPFNI0I7xMNddjHJt2++NnOUq1N7ItKEYqvXrlWQ7D+blbm9wBTLFpNB+3h7B
4tmu5uJJtO21KpMjFPNiYNqM4Nmbvsstaai81sxuCEtd0deyQi1BCJIkiKb+aZ5b
pARmOTtht+v+7eS7VovFf6lEpMt6GSs9quMO44FdnA==
-----END CERTIFICATE-----
Generated at Sat Oct 11 07:34:10 2025 by rpki-client