Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/18558921-61c2-3fb0-9c32-d14f1c940d1b.roa
File:                     18558921-61c2-3fb0-9c32-d14f1c940d1b.roa (raw, json)
Hash identifier:          XxGrdFQXB97UAsgB7vAcnI+iTM/BjvQy2U7ZWqAlnyA=
Subject key identifier:   1E:24:90:86:D3:6E:28:86:8F:65:DF:70:C4:25:4C:34:D1:2C:16:DC
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584B2E5C58D9E5F2891CBE6B65C0
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/18558921-61c2-3fb0-9c32-d14f1c940d1b.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     31898
IP address blocks:        69.6.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:58:d9:e5:f2:89:1c:be:6b:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=a7a046c7-025c-4669-8e32-adb3401ff259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:f3:8f:50:ea:a0:8e:84:fb:46:c7:d7:9f:
                    07:62:51:bd:73:4b:49:95:28:29:0c:e0:1d:68:77:
                    f4:d7:58:8a:18:f3:79:ec:e8:b8:fb:c6:ec:67:7a:
                    c9:1e:64:16:97:e9:ae:d5:14:3e:4a:4f:dc:ce:46:
                    63:54:fa:f1:cd:64:c7:cd:fd:59:26:00:55:53:57:
                    bb:a0:25:8f:21:91:49:bc:40:c0:e2:5f:31:ed:96:
                    0a:da:b0:b7:43:a1:b9:65:0e:da:89:44:92:b2:f1:
                    4d:1f:a8:29:8d:23:5a:40:83:55:e5:e0:24:39:23:
                    c3:2d:54:61:7a:2f:c4:d6:c7:d8:14:95:78:71:c5:
                    61:a9:b7:0b:6a:f9:46:1d:e3:e4:03:5c:c0:f5:eb:
                    7a:63:5b:49:9c:62:59:d6:92:ba:81:81:78:b0:8b:
                    53:c6:3a:0e:52:ea:a0:60:5c:8f:87:e2:13:88:c0:
                    0f:68:6a:d1:28:36:8b:f2:ef:d0:cf:3d:8a:fb:ad:
                    c9:f8:07:53:83:0b:11:1e:58:d2:2a:3d:e2:c2:c4:
                    7c:ce:77:f9:32:4d:b2:5f:21:af:f5:87:16:61:d9:
                    5e:ce:1a:c2:5d:61:fa:97:69:41:2f:cf:dc:a0:c5:
                    cc:df:de:e5:72:cf:6d:84:b4:89:91:d3:29:b4:4d:
                    62:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:24:90:86:D3:6E:28:86:8F:65:DF:70:C4:25:4C:34:D1:2C:16:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/18558921-61c2-3fb0-9c32-d14f1c940d1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.6.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:6c:17:66:62:d3:65:f4:c1:e3:9f:b1:7f:2e:51:0e:62:af:
         90:81:82:31:bd:6c:67:7e:70:f5:21:1a:12:fe:ef:6e:a0:93:
         2d:32:68:c2:53:d2:04:b8:15:db:a0:99:cc:b9:18:b2:71:21:
         83:b2:73:71:c2:a8:99:73:aa:48:f1:03:e1:c0:f4:09:d8:1e:
         87:8c:e5:22:a2:40:2d:d0:dd:41:93:25:cb:1d:29:39:0c:52:
         87:60:06:fd:a0:6b:07:76:af:76:49:6c:7f:62:f9:c5:38:ad:
         f5:dc:15:fe:3e:da:cb:fe:e3:19:c4:0f:7d:87:2b:4c:31:94:
         72:65:b5:ae:a1:4a:12:f1:32:29:99:a6:6a:bd:2d:da:32:fc:
         4e:81:4f:96:d6:7c:1b:dc:3d:9b:02:01:99:98:a6:ea:6c:62:
         ab:d7:da:b2:5d:f6:a2:61:87:04:c8:67:1b:e6:d9:87:cc:25:
         e6:26:5e:be:6c:88:9d:d0:7f:bf:6d:5d:a3:a1:68:ad:97:63:
         14:e7:9d:eb:97:db:76:34:57:21:dc:e3:2e:db:fc:cb:db:db:
         f0:e1:b9:58:9a:de:43:b8:54:fe:f4:67:17:f9:9d:29:ad:93:
         9d:68:d0:0e:ce:58:b9:d0:a4:9d:b8:c2:57:bb:74:b5:e4:f4:
         d1:a1:82:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXFjZ5fKJHL5rZcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi
MDhlMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk
YTdhMDQ2YzctMDI1Yy00NjY5LThlMzItYWRiMzQwMWZmMjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVTzj1DqoI6E+0bH158HYlG9c0tJlSgpDOAd
aHf011iKGPN57Oi4+8bsZ3rJHmQWl+mu1RQ+Sk/czkZjVPrxzWTHzf1ZJgBVU1e7
oCWPIZFJvEDA4l8x7ZYK2rC3Q6G5ZQ7aiUSSsvFNH6gpjSNaQINV5eAkOSPDLVRh
ei/E1sfYFJV4ccVhqbcLavlGHePkA1zA9et6Y1tJnGJZ1pK6gYF4sItTxjoOUuqg
YFyPh+ITiMAPaGrRKDaL8u/Qzz2K+63J+AdTgwsRHljSKj3iwsR8znf5Mk2yXyGv
9YcWYdlezhrCXWH6l2lBL8/coMXM397lcs9thLSJkdMptE1i/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB4kkIbTbiiGj2XfcMQlTDTRLBbcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz
Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvMTg1NTg5MjEtNjFjMi0z
ZmIwLTljMzItZDE0ZjFjOTQwZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1
ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy
YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4
MTU2MmIwOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRQbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtsF2Zi02X0weOfsX8uUQ5ir5CBgjG9bGd+cPUhGhL+726gky0yaMJT
0gS4Fdugmcy5GLJxIYOyc3HCqJlzqkjxA+HA9AnYHoeM5SKiQC3Q3UGTJcsdKTkM
UodgBv2gawd2r3ZJbH9i+cU4rfXcFf4+2sv+4xnED32HK0wxlHJlta6hShLxMimZ
pmq9Ldoy/E6BT5bWfBvcPZsCAZmYpupsYqvX2rJd9qJhhwTIZxvm2YfMJeYmXr5s
iJ3Qf79tXaOhaK2XYxTnneuX23Y0VyHc4y7b/Mvb2/DhuVia3kO4VP70Zxf5nSmt
k51o0A7OWLnQpJ24wle7dLXk9NGhgic=
-----END CERTIFICATE-----
Generated at Tue Oct 14 03:10:26 2025 by rpki-client