Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/328baafe-3364-3ed0-bd36-2657ea8176d7.roa
File:                     328baafe-3364-3ed0-bd36-2657ea8176d7.roa (raw, json)
Hash identifier:          ZYDlqLdgVRW6zaO1TiuQbewRSY+vYYKWfcyxCkT7gBE=
Subject key identifier:   9F:82:44:35:4D:97:F2:25:81:E6:00:51:A9:EB:48:53:13:AB:33:7C
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F4328584B13D6C964AE746DE00F164C40
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/328baafe-3364-3ed0-bd36-2657ea8176d7.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     393653
IP address blocks:        104.128.156.0/24 maxlen: 24
                          104.128.157.0/24 maxlen: 24
                          104.128.158.0/24 maxlen: 24
                          104.128.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c9:64:ae:74:6d:e0:0f:16:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=cf8e0113-816f-4376-a078-780b09e00045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:eb:54:b7:2c:8e:21:ca:f7:27:03:17:53:b7:
                    8a:46:01:5f:92:62:45:07:64:ea:58:bd:d0:21:ad:
                    5e:b8:1d:2b:f5:60:2f:3f:a9:3f:f2:fa:d5:d5:5a:
                    65:86:14:e9:55:c1:08:66:4a:f4:10:d9:78:02:7c:
                    3f:6b:be:f9:c9:4d:79:62:48:3a:0c:6e:02:48:a1:
                    70:0c:c7:2a:df:05:89:16:32:be:80:95:a6:5f:d6:
                    c2:16:cd:b9:a1:b1:00:a1:b7:a7:e8:3f:ec:62:fa:
                    7a:1e:30:07:35:4a:43:cf:31:f1:90:d7:de:16:19:
                    0d:23:ec:ce:50:ef:50:5e:92:49:85:57:c0:7e:ba:
                    8e:b4:d7:9c:92:78:4a:0a:9b:ce:09:a2:a2:11:5b:
                    82:2b:ed:51:6e:d5:a9:79:34:b8:c1:e0:d7:64:40:
                    57:3c:4f:3a:f8:26:a7:33:ee:6f:da:11:21:39:fb:
                    21:53:4f:c3:bc:0f:c5:25:d6:6f:0d:09:e3:dd:d5:
                    16:da:56:62:d4:4a:08:8c:65:97:35:76:99:23:27:
                    5f:54:70:c7:4c:a2:b2:f6:55:f9:38:7a:97:7e:e7:
                    d2:77:90:15:37:33:04:02:fc:2f:5c:fc:bd:a6:af:
                    5e:f7:b9:f4:b3:f9:0d:84:4d:70:15:a9:e3:20:1d:
                    88:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:82:44:35:4D:97:F2:25:81:E6:00:51:A9:EB:48:53:13:AB:33:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/328baafe-3364-3ed0-bd36-2657ea8176d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:35:b0:82:e5:e7:81:67:55:75:00:0a:f5:fd:02:eb:a9:0c:
         66:2b:eb:d3:c0:44:3f:2c:0f:da:45:8c:d0:29:60:eb:e2:48:
         ef:a8:5c:0c:58:df:37:9f:4b:86:74:65:7a:6f:85:97:0a:2b:
         fd:63:52:21:97:55:3f:7a:a8:e9:b5:4d:98:4e:f4:3b:85:c4:
         08:07:42:d8:d3:9b:3c:4d:ed:c2:ca:4e:da:4b:81:18:7d:7d:
         e2:eb:41:90:14:91:3b:0d:77:93:74:ee:c6:f8:c1:2d:aa:58:
         bb:38:22:ab:4d:07:27:86:ee:5d:c3:ab:e6:7a:db:bd:52:07:
         67:eb:74:66:fd:91:74:75:36:dd:db:0f:8e:4f:aa:94:69:3f:
         98:10:87:55:80:45:2d:c1:17:70:2d:9f:b8:cd:9e:89:6b:b1:
         a3:6b:db:ad:89:cc:07:81:97:a8:1c:58:42:b6:8e:fb:85:1a:
         b5:d3:97:1f:27:e9:c5:a9:ee:20:65:35:9c:b5:54:3d:07:1e:
         34:c4:d9:cf:c6:1d:37:6e:0a:e1:6c:ae:be:1d:c8:bb:82:38:
         49:a6:d5:11:48:e2:b5:a1:d4:5e:9f:3a:bb:da:8f:57:9e:e3:
         74:2e:e5:96:dc:ef:32:ab:29:00:59:52:95:a9:e6:29:5f:af:
         20:5d:3b:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1slkrnRt4A8WTEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzViMmU5YjUtZjFhYS00MWRlLThiZGMtNzA1OGU1OGVm
ODFjMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
Y2Y4ZTAxMTMtODE2Zi00Mzc2LWEwNzgtNzgwYjA5ZTAwMDQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAietUtyyOIcr3JwMXU7eKRgFfkmJFB2TqWL3Q
Ia1euB0r9WAvP6k/8vrV1VplhhTpVcEIZkr0ENl4Anw/a775yU15Ykg6DG4CSKFw
DMcq3wWJFjK+gJWmX9bCFs25obEAoben6D/sYvp6HjAHNUpDzzHxkNfeFhkNI+zO
UO9QXpJJhVfAfrqOtNecknhKCpvOCaKiEVuCK+1RbtWpeTS4weDXZEBXPE86+Can
M+5v2hEhOfshU0/DvA/FJdZvDQnj3dUW2lZi1EoIjGWXNXaZIydfVHDHTKKy9lX5
OHqXfufSd5AVNzMEAvwvXPy9pq9e97n0s/kNhE1wFanjIB2IAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+CRDVNl/IlgeYAUanrSFMTqzN8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NWIy
ZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4ZTU4ZWY4MWMvMzI4YmFhZmUtMzM2NC0z
ZWQwLWJkMzYtMjY1N2VhODE3NmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzViMmU5YjUtZjFhYS00MWRlLThi
ZGMtNzA1OGU1OGVmODFjLzc1YjJlOWI1LWYxYWEtNDFkZS04YmRjLTcwNThlNThl
ZjgxYy5jcmwwHwYDVR0jBBgwFoAU56eLhm6ePsel2+WMY0Cly0mpS40wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NWIyZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4
ZTU4ZWY4MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaICcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQ1sILl54FnVXUACvX9AuupDGYr69PARD8sD9pFjNApYOviSO+oXAxY
3zefS4Z0ZXpvhZcKK/1jUiGXVT96qOm1TZhO9DuFxAgHQtjTmzxN7cLKTtpLgRh9
feLrQZAUkTsNd5N07sb4wS2qWLs4IqtNByeG7l3Dq+Z6271SB2frdGb9kXR1Nt3b
D45PqpRpP5gQh1WARS3BF3Atn7jNnolrsaNr262JzAeBl6gcWEK2jvuFGrXTlx8n
6cWp7iBlNZy1VD0HHjTE2c/GHTduCuFsrr4dyLuCOEmm1RFI4rWh1F6fOrvaj1ee
43Qu5Zbc7zKrKQBZUpWp5ilfryBdO5Q=
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:53:09 2025 by rpki-client