Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d7a05ebe-63e1-3875-a2f2-629ca8c5acd1.roa
File:                     d7a05ebe-63e1-3875-a2f2-629ca8c5acd1.roa (raw, json)
Hash identifier:          DXNOMj3VVPx3WHmB1VNnS9CUSBtE2k0wg2r5LMpY/EA=
Subject key identifier:   1A:DC:25:ED:7A:3E:63:60:B6:64:B6:E2:F1:32:3E:A6:51:51:D1:B8
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6F96A724D231ADA1B1378
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d7a05ebe-63e1-3875-a2f2-629ca8c5acd1.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        199.232.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:f9:6a:72:4d:23:1a:da:1b:13:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=084e4adf-8af7-4643-bf1a-8eadbd97f487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:f0:40:ce:c8:b0:ab:0c:2a:1a:29:08:cf:
                    18:c5:aa:b2:e2:d9:22:ae:3a:be:b0:e8:19:ea:6b:
                    1a:4f:bb:41:7c:ee:67:91:a6:9a:86:b3:d5:51:5f:
                    88:de:db:33:e2:c5:d0:de:f3:eb:88:6c:5c:e2:58:
                    87:e6:07:5d:68:31:f7:50:e1:72:0a:5b:98:95:11:
                    a3:4f:8a:00:a2:00:a1:51:dc:66:35:a9:4b:31:c4:
                    b2:a9:9e:0b:10:49:24:ad:6c:5b:06:1f:a5:0e:e6:
                    7f:06:c1:10:12:47:28:7d:13:8b:21:18:72:b3:76:
                    66:09:d0:c2:8c:db:e9:54:65:6b:0c:94:d1:0b:67:
                    e9:e1:46:8d:44:c0:8d:e7:5e:bb:1d:b6:79:ff:c9:
                    94:ac:0c:56:4e:aa:4a:7f:a2:25:a2:2b:71:19:92:
                    e3:67:48:93:51:a3:6c:b9:31:b2:91:e0:46:00:e1:
                    e9:3f:66:93:22:f3:c5:2c:0b:df:42:84:a3:2c:34:
                    3a:7a:f9:df:58:56:7c:92:a9:4c:86:cc:fd:9d:c0:
                    6e:fe:53:7b:c7:05:44:68:97:27:54:2d:3d:dd:4b:
                    42:fb:fc:84:f5:b5:b6:f9:0c:81:07:65:81:6b:ea:
                    63:15:57:68:6d:39:7e:78:54:87:ec:e3:16:bb:dc:
                    45:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DC:25:ED:7A:3E:63:60:B6:64:B6:E2:F1:32:3E:A6:51:51:D1:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d7a05ebe-63e1-3875-a2f2-629ca8c5acd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:be:c1:33:08:ef:d9:ad:57:95:51:f1:09:48:6c:99:9a:53:
         4c:fa:d1:31:f3:17:af:62:8b:cc:f8:c2:85:8b:35:ec:6a:04:
         35:15:c8:d6:dc:58:02:95:d5:5a:8e:bb:b7:5f:5c:fe:ed:44:
         ad:8d:6c:b9:73:7c:08:33:5e:75:c6:d2:04:de:8c:99:7d:af:
         5f:d6:cc:9c:74:94:0b:7e:22:1c:56:42:12:9a:95:10:82:70:
         7d:03:15:93:d5:1a:ca:a0:01:81:b2:98:82:f5:d3:b9:c9:31:
         c2:c6:1c:97:38:61:87:b5:d7:00:6a:94:b0:e5:cf:cc:07:54:
         fd:5e:b7:3c:e9:9b:4e:41:39:81:b2:5c:98:2e:27:90:1d:f4:
         73:86:80:ac:d2:63:f8:c9:6c:e4:75:8a:4a:e8:c7:2f:8e:78:
         a7:f7:68:9d:5e:8e:d5:a7:22:90:81:4b:6c:03:6f:db:1e:4e:
         f3:ea:8c:da:9a:b9:23:b5:98:6b:76:a9:3e:6f:c6:b2:5f:79:
         d0:ee:eb:8f:ab:7b:71:aa:ed:7a:35:6f:4e:17:1d:70:7a:8a:
         bb:f5:32:bd:43:81:c4:93:61:fa:d8:aa:0d:77:74:bc:49:39:
         d5:64:dc:db:d3:10:f4:bb:25:69:7e:94:03:8e:fe:78:e3:4d:
         ee:84:2c:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1vlqck0jGtobE3gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
MDg0ZTRhZGYtOGFmNy00NjQzLWJmMWEtOGVhZGJkOTdmNDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hDwQM7IsKsMKhopCM8Yxaqy4tkirjq+sOgZ
6msaT7tBfO5nkaaahrPVUV+I3tsz4sXQ3vPriGxc4liH5gddaDH3UOFyCluYlRGj
T4oAogChUdxmNalLMcSyqZ4LEEkkrWxbBh+lDuZ/BsEQEkcofROLIRhys3ZmCdDC
jNvpVGVrDJTRC2fp4UaNRMCN5167HbZ5/8mUrAxWTqpKf6IloitxGZLjZ0iTUaNs
uTGykeBGAOHpP2aTIvPFLAvfQoSjLDQ6evnfWFZ8kqlMhsz9ncBu/lN7xwVEaJcn
VC093UtC+/yE9bW2+QyBB2WBa+pjFVdobTl+eFSH7OMWu9xFXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBrcJe16PmNgtmS24vEyPqZRUdG4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZDdhMDVlYmUtNjNlMS0z
ODc1LWEyZjItNjI5Y2E4YzVhY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+hoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABq+wTMI79mtV5VR8QlIbJmaU0z60THzF69ii8z4woWLNexqBDUVyNbc
WAKV1VqOu7dfXP7tRK2NbLlzfAgzXnXG0gTejJl9r1/WzJx0lAt+IhxWQhKalRCC
cH0DFZPVGsqgAYGymIL107nJMcLGHJc4YYe11wBqlLDlz8wHVP1etzzpm05BOYGy
XJguJ5Ad9HOGgKzSY/jJbOR1ikroxy+OeKf3aJ1ejtWnIpCBS2wDb9seTvPqjNqa
uSO1mGt2qT5vxrJfedDu64+re3Gq7Xo1b04XHXB6irv1Mr1DgcSTYfrYqg13dLxJ
OdVk3NvTEPS7JWl+lAOO/njjTe6ELO4=
-----END CERTIFICATE-----
Generated at Thu Oct 9 05:49:22 2025 by rpki-client