Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/6cefd9ed-c6aa-377f-b955-242338127643.roa
File:                     6cefd9ed-c6aa-377f-b955-242338127643.roa (raw, json)
Hash identifier:          wffjFf70x0Y9FkmfrZTUcIA+2qt8+gEJl9TrezEbs0M=
Subject key identifier:   FD:CF:02:D4:D3:39:53:CB:75:54:0D:45:8E:2A:46:D0:C4:B6:65:7B
Certificate issuer:       /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
Certificate serial:       010D0C9F4328584B583CA9BA110A9EE4EDF10F80
Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/6cefd9ed-c6aa-377f-b955-242338127643.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     21581
IP address blocks:        108.161.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:a9:ba:11:0a:9e:e4:ed:f1:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=5ec1b3a5-18dc-44c1-8649-0805239925c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:32:9a:59:63:a6:f9:89:ac:19:33:d6:84:
                    18:c6:6e:9f:54:31:54:d2:38:fb:e3:ae:ee:ff:69:
                    39:4f:fd:55:93:8a:34:0a:54:21:a8:a6:54:47:43:
                    46:35:05:65:b8:f8:8a:94:a2:1c:93:91:24:09:8b:
                    be:e7:a8:e3:d8:71:84:be:72:c0:65:88:b8:f6:a2:
                    05:ef:37:6d:cf:f0:8d:38:56:ed:8b:99:be:96:de:
                    ad:cc:bf:03:94:00:8c:aa:79:ae:e4:ac:10:c6:ac:
                    34:b6:f4:f8:81:4d:83:e8:73:d6:7c:10:c0:97:f3:
                    e1:14:7a:2b:91:c0:b4:a8:f9:69:db:4e:4a:01:b8:
                    f8:d5:9a:26:3f:15:78:4b:86:ca:7e:3a:c6:ca:b1:
                    95:9a:b9:e2:84:b4:60:13:58:59:c6:d8:8a:6e:6c:
                    f3:c6:7b:00:fd:b3:ea:9f:2a:e4:de:d6:b4:b5:9e:
                    7e:e6:bc:53:d6:33:9d:7f:e1:2a:35:dd:58:46:fb:
                    7c:e8:c3:8c:74:b8:25:5e:47:61:de:78:90:ef:7a:
                    d2:ca:c1:2d:b3:7b:bd:15:38:06:38:29:0d:20:d7:
                    61:75:0d:9d:60:d1:3b:c5:e9:52:22:af:e4:82:1c:
                    9c:03:af:4d:e6:18:e9:1a:a0:ee:9b:b8:cd:8f:cb:
                    92:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CF:02:D4:D3:39:53:CB:75:54:0D:45:8E:2A:46:D0:C4:B6:65:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/6cefd9ed-c6aa-377f-b955-242338127643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl

            X509v3 Authority Key Identifier:
                keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:45:ec:3e:48:12:94:ff:62:51:b6:d2:95:b9:1e:4d:67:a4:
         31:8f:71:4e:17:f6:7d:a7:7f:a6:51:8e:00:14:c1:0c:2d:c9:
         3d:2b:8c:ee:bf:3b:4b:db:57:07:f6:0a:57:f6:8d:56:13:1e:
         15:36:19:04:fd:66:83:75:0a:2b:b6:7d:57:e3:d6:71:56:e2:
         fc:33:4f:21:f1:64:60:c8:09:a9:29:a7:2e:cc:17:d4:1c:f2:
         f0:ec:e7:fd:c3:55:92:8f:4d:71:45:e5:a1:ea:f6:f2:71:ae:
         c1:f8:57:d3:de:fa:9f:06:1a:27:66:cb:a3:5a:ec:5d:b2:db:
         b0:ca:b3:e6:6e:85:3d:e3:97:94:34:71:46:84:b3:23:5a:36:
         43:0c:cc:71:75:a8:86:e0:db:dd:3e:b5:81:f4:ed:e1:30:75:
         9d:87:50:8a:17:9e:46:ec:fd:6b:4d:1e:ed:db:0c:83:ca:aa:
         ad:81:89:7a:94:5b:91:73:93:d0:60:a4:f4:0f:a8:1f:bf:dc:
         4a:ab:20:97:cc:93:71:9c:cf:fb:c3:fb:5d:8e:62:18:92:5a:
         ee:31:57:82:e2:35:da:b7:c4:76:8c:45:ca:fb:13:59:cf:9b:
         01:3c:25:73:c5:bf:2f:b2:52:4b:f3:49:81:23:14:f9:c8:cc:
         59:d8:b2:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKm6EQqe5O3xD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh
ZDRjMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk
NWVjMWIzYTUtMThkYy00NGMxLTg2NDktMDgwNTIzOTkyNWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHUymlljpvmJrBkz1oQYxm6fVDFU0jj7467u
/2k5T/1Vk4o0ClQhqKZUR0NGNQVluPiKlKIck5EkCYu+56jj2HGEvnLAZYi49qIF
7zdtz/CNOFbti5m+lt6tzL8DlACMqnmu5KwQxqw0tvT4gU2D6HPWfBDAl/PhFHor
kcC0qPlp205KAbj41ZomPxV4S4bKfjrGyrGVmrnihLRgE1hZxtiKbmzzxnsA/bPq
nyrk3ta0tZ5+5rxT1jOdf+EqNd1YRvt86MOMdLglXkdh3niQ73rSysEts3u9FTgG
OCkNINdhdQ2dYNE7xelSIq/kghycA69N5hjpGqDum7jNj8uSAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3PAtTTOVPLdVQNRY4qRtDEtmV7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll
NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvNmNlZmQ5ZWQtYzZhYS0z
NzdmLWI5NTUtMjQyMzM4MTI3NjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy
MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi
YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk
NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbKGQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZF7D5IEpT/YlG20pW5Hk1npDGPcU4X9n2nf6ZRjgAUwQwtyT0rjO6/
O0vbVwf2Clf2jVYTHhU2GQT9ZoN1Ciu2fVfj1nFW4vwzTyHxZGDICakppy7MF9Qc
8vDs5/3DVZKPTXFF5aHq9vJxrsH4V9Pe+p8GGidmy6Na7F2y27DKs+ZuhT3jl5Q0
cUaEsyNaNkMMzHF1qIbg290+tYH07eEwdZ2HUIoXnkbs/WtNHu3bDIPKqq2BiXqU
W5Fzk9BgpPQPqB+/3EqrIJfMk3Gcz/vD+12OYhiSWu4xV4LiNdq3xHaMRcr7E1nP
mwE8JXPFvy+yUkvzSYEjFPnIzFnYskw=
-----END CERTIFICATE-----
Generated at Fri Oct 10 16:15:30 2025 by rpki-client