Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/07215d43-75a8-3912-bf71-436c82bc6e22.roa
File:                     07215d43-75a8-3912-bf71-436c82bc6e22.roa (raw, json)
Hash identifier:          01K4NHtdvwDT3rYyTQu4RVpmNI58RSHP0NkRVExYug4=
Subject key identifier:   D7:9A:2F:E5:CF:BC:CB:08:67:75:17:5A:C6:01:8B:F2:ED:B9:B6:32
Certificate issuer:       /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
Certificate serial:       010D0C9F4328584B1806E53888D685A4A2A87C80
Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/07215d43-75a8-3912-bf71-436c82bc6e22.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     40788
IP address blocks:        104.243.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:e5:38:88:d6:85:a4:a2:a8:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=d7d270d0-e5f7-434e-9348-6c5a1631f4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:ce:13:17:e0:37:23:d3:e0:58:83:e1:76:
                    e3:83:7e:d6:1a:6a:0f:7b:b4:61:58:3a:3d:43:48:
                    7e:d6:b9:3d:b2:9c:22:02:95:2e:9c:47:7e:75:71:
                    32:88:68:66:7b:56:18:25:0f:4b:d5:16:21:f9:cf:
                    c9:0b:fe:81:b4:70:71:7e:c1:4f:23:5a:dc:9a:53:
                    77:fb:cd:64:4a:7d:23:fb:fd:d3:ac:3a:8d:f6:d4:
                    e6:13:41:c6:36:d7:d7:16:15:85:62:a9:15:02:bc:
                    40:55:7a:6c:21:9a:3e:4e:20:b4:9c:c0:bd:cd:db:
                    6c:1a:12:85:64:7a:2c:ec:0b:b3:a9:69:e4:04:f6:
                    1d:5c:9b:4c:88:b5:1d:5b:82:60:3c:da:cf:ae:0b:
                    71:e7:77:af:8c:8b:d3:b3:75:eb:07:56:98:c4:8a:
                    1e:a7:77:d7:e1:b7:15:cf:0b:2f:c2:5e:eb:8d:00:
                    a8:64:36:a2:53:52:47:bd:7b:4b:e4:2a:ba:e8:0a:
                    0f:34:60:e9:5a:33:a3:e9:34:e9:64:58:c5:9c:cf:
                    d4:16:6a:0f:67:ae:d1:7c:89:b1:80:55:25:7e:6e:
                    38:ed:9e:ca:f1:78:f8:96:75:d8:0f:e1:d2:ad:cc:
                    87:12:d4:12:fc:56:54:34:8b:c6:22:65:02:15:83:
                    e9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9A:2F:E5:CF:BC:CB:08:67:75:17:5A:C6:01:8B:F2:ED:B9:B6:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/07215d43-75a8-3912-bf71-436c82bc6e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:52:be:47:ec:42:d4:73:78:0a:c2:93:d9:cc:61:00:c5:49:
         cf:8f:0c:aa:41:b5:dc:c9:c2:cf:a5:b0:e1:de:b4:10:0a:88:
         86:51:54:a8:34:de:12:20:ca:1e:fc:85:ae:ca:47:70:8b:ff:
         52:86:65:17:3a:65:13:7e:6c:1a:d0:a5:a5:84:45:45:2c:ec:
         3a:d2:3a:f1:b8:62:d8:64:6f:d4:a7:09:e8:25:36:51:93:f2:
         b7:5a:f8:2d:28:98:9f:35:59:52:f0:97:09:9f:4e:a1:bb:75:
         39:b2:fe:46:a5:dc:36:a7:5e:7e:42:a4:4f:06:ef:00:b9:dd:
         be:1f:da:fd:fd:6c:7f:b5:9d:17:55:4b:94:20:0e:d4:a4:6a:
         44:17:ee:fb:93:51:3e:2e:3c:6a:ec:97:6d:f7:b0:18:f3:c7:
         85:f9:a7:41:8d:bd:d6:f5:86:c6:ff:b2:ee:c2:f8:c5:64:8f:
         c9:80:03:d0:d9:15:77:69:11:87:e1:b0:8f:22:1b:7a:0b:35:
         42:97:41:c6:f7:24:00:c9:7f:59:86:1f:2a:8e:ec:21:9b:99:
         18:ff:d6:c7:3e:7c:8a:f6:e8:dc:57:60:bc:87:a4:9c:5f:1d:
         0d:4e:dd:44:96:08:b5:94:99:8d:fc:39:64:2e:ad:c7:8b:7e:
         e4:2c:fd:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuU4iNaFpKKofIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM2MDQ3MDgtM2UwZi00ZWE2LWIxNTEtNGQyZjc0MDhk
MzI2MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZDdkMjcwZDAtZTVmNy00MzRlLTkzNDgtNmM1YTE2MzFmNGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNPOExfgNyPT4FiD4Xbjg37WGmoPe7RhWDo9
Q0h+1rk9spwiApUunEd+dXEyiGhme1YYJQ9L1RYh+c/JC/6BtHBxfsFPI1rcmlN3
+81kSn0j+/3TrDqN9tTmE0HGNtfXFhWFYqkVArxAVXpsIZo+TiC0nMC9zdtsGhKF
ZHos7AuzqWnkBPYdXJtMiLUdW4JgPNrPrgtx53evjIvTs3XrB1aYxIoep3fX4bcV
zwsvwl7rjQCoZDaiU1JHvXtL5Cq66AoPNGDpWjOj6TTpZFjFnM/UFmoPZ67RfImx
gFUlfm447Z7K8Xj4lnXYD+HSrcyHEtQS/FZUNIvGImUCFYPpPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNeaL+XPvMsIZ3UXWsYBi/LtubYyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYw
NDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQwOGQzMjYvMDcyMTVkNDMtNzVhOC0z
OTEyLWJmNzEtNDM2YzgyYmM2ZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTM2MDQ3MDgtM2UwZi00ZWE2LWIx
NTEtNGQyZjc0MDhkMzI2L2UzNjA0NzA4LTNlMGYtNGVhNi1iMTUxLTRkMmY3NDA4
ZDMyNi5jcmwwHwYDVR0jBBgwFoAU5LlVX3UhkJoYMg04VOQhuidg6RQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJm
NzQwOGQzMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPNQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdSvkfsQtRzeArCk9nMYQDFSc+PDKpBtdzJws+lsOHetBAKiIZRVKg0
3hIgyh78ha7KR3CL/1KGZRc6ZRN+bBrQpaWERUUs7DrSOvG4Ythkb9SnCeglNlGT
8rda+C0omJ81WVLwlwmfTqG7dTmy/kal3DanXn5CpE8G7wC53b4f2v39bH+1nRdV
S5QgDtSkakQX7vuTUT4uPGrsl233sBjzx4X5p0GNvdb1hsb/su7C+MVkj8mAA9DZ
FXdpEYfhsI8iG3oLNUKXQcb3JADJf1mGHyqO7CGbmRj/1sc+fIr26NxXYLyHpJxf
HQ1O3USWCLWUmY38OWQurceLfuQs/RI=
-----END CERTIFICATE-----
Generated at Fri Oct 10 23:40:22 2025 by rpki-client