Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/278e207d-c161-3fc4-9e26-e453efa0b531.roa
File:                     278e207d-c161-3fc4-9e26-e453efa0b531.roa (raw, json)
Hash identifier:          TzPv+q+1NOW1QVFmtQ341N3Tc4UWh/sgVLM153o3nzY=
Subject key identifier:   24:29:6E:F8:EF:57:01:7F:A7:5A:7B:C5:A9:BF:DF:78:B5:C2:59:C3
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F4328584B13D6C5E49756ECB943028BC0
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/278e207d-c161-3fc4-9e26-e453efa0b531.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     23470
IP address blocks:        104.243.32.0/24 maxlen: 24
                          104.243.33.0/24 maxlen: 24
                          104.243.34.0/24 maxlen: 24
                          104.243.35.0/24 maxlen: 24
                          104.243.36.0/24 maxlen: 24
                          104.243.37.0/24 maxlen: 24
                          104.243.38.0/24 maxlen: 24
                          104.243.39.0/24 maxlen: 24
                          104.243.40.0/24 maxlen: 24
                          104.243.41.0/24 maxlen: 24
                          104.243.42.0/24 maxlen: 24
                          104.243.43.0/24 maxlen: 24
                          104.243.44.0/24 maxlen: 24
                          104.243.45.0/24 maxlen: 24
                          104.243.46.0/24 maxlen: 24
                          104.243.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c5:e4:97:56:ec:b9:43:02:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=b1cc8e37-35c3-4eb6-a4c9-2fbd5919fdcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1a:6c:39:29:7e:98:7c:ca:53:89:02:53:76:
                    ff:30:1a:10:82:b6:e7:12:58:f8:37:fc:44:1b:f9:
                    a9:e9:10:8f:e6:bf:a5:8b:b9:b6:44:02:ea:b8:ed:
                    c5:41:7b:87:66:3f:3e:6d:5d:61:7f:b1:90:aa:a9:
                    45:81:52:4f:37:4a:71:1e:57:ca:3c:63:d0:5c:f1:
                    de:56:a3:0b:5b:fd:b1:02:46:ce:37:e9:3b:4f:62:
                    04:18:85:21:71:8b:32:b8:c0:55:f3:2f:83:aa:48:
                    44:97:f3:2d:9a:26:a4:6e:f5:ae:9a:5c:88:fe:6f:
                    9c:f9:12:25:e3:45:5a:8b:93:37:7a:a4:1b:4c:ba:
                    ab:5b:92:40:21:0e:e9:68:63:4f:30:1a:99:66:17:
                    f8:b9:d1:df:f3:1e:49:a8:a1:25:71:76:09:05:83:
                    f9:86:35:a7:8f:73:de:25:70:88:67:5a:12:bc:6d:
                    6d:9b:bd:e7:31:02:23:9a:da:15:dc:e8:04:cc:20:
                    1d:b3:0c:1c:94:be:c2:8c:e8:49:ed:92:f8:7b:e8:
                    35:d2:03:65:c9:8c:8b:aa:d1:c3:9c:9e:da:36:b7:
                    46:24:0a:28:98:70:77:6b:ca:35:41:8e:ce:c8:84:
                    96:2f:41:64:b6:1f:1d:77:86:37:8f:35:d9:85:e7:
                    d4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:29:6E:F8:EF:57:01:7F:A7:5A:7B:C5:A9:BF:DF:78:B5:C2:59:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/278e207d-c161-3fc4-9e26-e453efa0b531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:51:06:e3:62:4d:ac:e4:8c:6e:05:2e:55:26:f1:c8:b8:d6:
         c4:28:ee:57:06:f9:78:5a:a8:7d:a0:ed:28:91:eb:8b:f2:6f:
         13:0a:15:2e:66:94:34:d1:c8:8e:41:2d:40:b7:e0:9d:a2:5f:
         e8:75:43:eb:14:6a:1a:f9:6c:32:e0:ee:c1:1d:a1:30:df:4d:
         3e:34:6c:3a:78:22:28:d1:0d:16:43:6a:48:09:a9:b5:26:de:
         c7:80:a4:d5:4e:b5:9f:8b:c1:80:5e:3f:22:26:ff:92:bc:1f:
         8a:8b:9f:f1:e5:0e:0d:04:44:15:63:2e:5c:84:3a:0e:1b:dc:
         06:6e:45:2a:35:c7:72:b5:06:11:e8:3b:d7:3c:77:be:7e:f6:
         43:83:f7:e0:62:94:4a:20:f1:7a:f5:bc:96:e4:be:d1:12:0c:
         bf:ea:75:34:d6:30:94:73:ae:06:96:d7:71:da:3d:42:62:46:
         c7:3e:e2:f9:c4:16:26:14:2b:08:8a:fb:52:ad:43:3a:a5:52:
         d0:79:9c:e1:eb:88:c2:a5:92:c7:d0:31:9f:6e:16:64:26:46:
         6b:6d:e4:f5:f0:e8:93:65:1e:43:be:62:ba:95:da:e5:d6:62:
         4a:49:dd:cb:42:0f:d8:d2:3d:3a:7d:73:7c:8a:a2:51:ff:54:
         b4:8e:8c:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sXkl1bsuUMCi8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy
NTQ0MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
YjFjYzhlMzctMzVjMy00ZWI2LWE0YzktMmZiZDU5MTlmZGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BpsOSl+mHzKU4kCU3b/MBoQgrbnElj4N/xE
G/mp6RCP5r+li7m2RALquO3FQXuHZj8+bV1hf7GQqqlFgVJPN0pxHlfKPGPQXPHe
VqMLW/2xAkbON+k7T2IEGIUhcYsyuMBV8y+DqkhEl/MtmiakbvWumlyI/m+c+RIl
40Vai5M3eqQbTLqrW5JAIQ7paGNPMBqZZhf4udHf8x5JqKElcXYJBYP5hjWnj3Pe
JXCIZ1oSvG1tm73nMQIjmtoV3OgEzCAdswwclL7CjOhJ7ZL4e+g10gNlyYyLqtHD
nJ7aNrdGJAoomHB3a8o1QY7OyISWL0Fkth8dd4Y3jzXZhefUSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCQpbvjvVwF/p1p7xam/33i1wlnDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5
YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvMjc4ZTIwN2QtYzE2MS0z
ZmM0LTllMjYtZTQ1M2VmYTBiNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2
ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj
MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx
ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPMgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFRBuNiTazkjG4FLlUm8ci41sQo7lcG+XhaqH2g7SiR64vybxMKFS5m
lDTRyI5BLUC34J2iX+h1Q+sUahr5bDLg7sEdoTDfTT40bDp4IijRDRZDakgJqbUm
3seApNVOtZ+LwYBePyIm/5K8H4qLn/HlDg0ERBVjLlyEOg4b3AZuRSo1x3K1BhHo
O9c8d75+9kOD9+BilEog8Xr1vJbkvtESDL/qdTTWMJRzrgaW13HaPUJiRsc+4vnE
FiYUKwiK+1KtQzqlUtB5nOHriMKlksfQMZ9uFmQmRmtt5PXw6JNlHkO+YrqV2uXW
YkpJ3ctCD9jSPTp9c3yKolH/VLSOjIU=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:22:49 2025 by rpki-client