Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/e6fd9a70-3241-3458-aa28-4137ac1f67fa.roa
File:                     e6fd9a70-3241-3458-aa28-4137ac1f67fa.roa (raw, json)
Hash identifier:          lyKwDTZyhWkw67wlWUw80cC7FJz0ZG1MRS2N6pGfHjE=
Subject key identifier:   31:F7:79:B3:36:77:7D:17:11:F1:AF:9C:7D:51:7E:63:D1:97:0D:EB
Certificate issuer:       /CN=932105b1-ce56-44a7-9670-6f4e56578ef8
Certificate serial:       010D0C9F4328584B5141F2961893B2028403E340
Authority key identifier: DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/e6fd9a70-3241-3458-aa28-4137ac1f67fa.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     53724
IP address blocks:        104.156.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:f2:96:18:93:b2:02:84:03:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932105b1-ce56-44a7-9670-6f4e56578ef8
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=4e7402e9-1efe-4060-8e6d-0d7ee2248746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:86:19:20:00:47:7b:ee:ad:b3:7b:d6:da:05:
                    51:f5:ad:f0:81:b1:33:b9:f5:37:d1:44:07:3b:e0:
                    e8:b7:dd:36:03:bf:a0:79:a7:d8:22:49:21:74:5c:
                    44:b2:f6:2f:91:5e:af:c7:14:88:68:d6:67:c0:dd:
                    ca:f1:bc:b7:5e:01:30:66:51:f2:90:de:19:b1:24:
                    3a:05:35:d4:1a:1e:34:d5:94:82:c0:11:5e:69:79:
                    90:ee:0c:4c:ab:09:bf:87:a1:e8:dd:d3:f7:fe:a9:
                    cd:c0:e8:54:08:86:84:14:5e:59:7c:8d:f5:e9:17:
                    d4:45:bc:8c:37:53:a9:a3:65:22:15:3f:35:38:dd:
                    b1:4f:08:a6:5d:e4:ab:be:86:44:67:3e:2d:39:fd:
                    5b:a8:ef:1e:51:11:45:0c:08:87:39:54:0e:80:b3:
                    65:25:2c:18:c0:08:7d:12:8e:ea:57:17:01:0b:84:
                    67:13:f5:45:69:38:28:e8:6b:32:d2:9b:15:d8:ec:
                    50:40:a7:41:de:8e:13:3d:b6:fb:05:c7:47:c5:bd:
                    8a:75:f6:97:e5:df:30:dc:71:71:ee:2e:f4:97:d1:
                    89:18:6d:a1:4c:72:26:4a:f5:b8:64:20:22:bf:da:
                    07:29:b6:a1:6e:02:f7:6f:4f:9c:98:b2:4e:9e:67:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F7:79:B3:36:77:7D:17:11:F1:AF:9C:7D:51:7E:63:D1:97:0D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/e6fd9a70-3241-3458-aa28-4137ac1f67fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b2:27:34:e5:6f:7c:ec:67:0f:98:8d:4a:2e:e5:16:62:43:
         b1:e6:d2:46:01:85:b0:02:c6:b8:2d:92:db:96:0c:83:87:dc:
         1f:ee:34:93:c4:ce:d9:c4:c2:7c:27:ec:0a:93:9f:dd:ad:3a:
         3b:fc:91:d7:5a:fc:e1:40:49:01:6b:c8:02:1e:51:d1:60:ed:
         79:97:89:54:af:52:ae:45:f6:65:20:9a:14:26:81:51:a6:9f:
         62:f8:11:14:40:ce:a1:59:e8:a1:07:51:59:32:03:8f:8a:1f:
         2a:98:67:8c:9f:19:4f:06:30:7c:e0:b9:88:d5:76:12:53:f7:
         48:d5:04:9c:65:41:23:56:4f:5d:e4:07:eb:4c:4c:fc:d4:90:
         b4:8d:10:fe:a8:8a:49:6d:7c:68:a2:9e:a9:78:80:e5:76:b5:
         88:ce:4c:25:83:dc:af:65:9a:44:76:8f:46:b7:28:55:4f:01:
         01:24:94:f6:87:cf:bc:e7:dd:c5:53:7d:ce:a4:59:f4:10:be:
         f9:a4:a0:22:c9:a6:30:a3:4a:ef:19:40:db:34:e2:3a:b0:bd:
         69:a8:01:d1:50:0e:4b:60:da:02:98:19:cf:b1:8e:f5:2a:63:
         c1:4e:6d:a8:7d:09:2a:4f:ef:b5:2a:dd:23:32:ed:42:2d:69:
         9c:a2:ab:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQfKWGJOyAoQD40AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTMyMTA1YjEtY2U1Ni00NGE3LTk2NzAtNmY0ZTU2NTc4
ZWY4MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk
NGU3NDAyZTktMWVmZS00MDYwLThlNmQtMGQ3ZWUyMjQ4NzQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIYZIABHe+6ts3vW2gVR9a3wgbEzufU30UQH
O+Dot902A7+geafYIkkhdFxEsvYvkV6vxxSIaNZnwN3K8by3XgEwZlHykN4ZsSQ6
BTXUGh401ZSCwBFeaXmQ7gxMqwm/h6Ho3dP3/qnNwOhUCIaEFF5ZfI316RfURbyM
N1Opo2UiFT81ON2xTwimXeSrvoZEZz4tOf1bqO8eURFFDAiHOVQOgLNlJSwYwAh9
Eo7qVxcBC4RnE/VFaTgo6Gsy0psV2OxQQKdB3o4TPbb7BcdHxb2KdfaX5d8w3HFx
7i70l9GJGG2hTHImSvW4ZCAiv9oHKbahbgL3b0+cmLJOnmfcOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDH3ebM2d30XEfGvnH1RfmPRlw3rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MzIx
MDViMS1jZTU2LTQ0YTctOTY3MC02ZjRlNTY1NzhlZjgvZTZmZDlhNzAtMzI0MS0z
NDU4LWFhMjgtNDEzN2FjMWY2N2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTMyMTA1YjEtY2U1Ni00NGE3LTk2
NzAtNmY0ZTU2NTc4ZWY4LzkzMjEwNWIxLWNlNTYtNDRhNy05NjcwLTZmNGU1NjU3
OGVmOC5jcmwwHwYDVR0jBBgwFoAU2oXXhzBPtQ/DehLEbjKC7ia9QuYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MzIxMDViMS1jZTU2LTQ0YTctOTY3MC02ZjRl
NTY1NzhlZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAOyJzTlb3zsZw+YjUou5RZiQ7Hm0kYBhbACxrgtktuWDIOH3B/uNJPE
ztnEwnwn7AqTn92tOjv8kdda/OFASQFryAIeUdFg7XmXiVSvUq5F9mUgmhQmgVGm
n2L4ERRAzqFZ6KEHUVkyA4+KHyqYZ4yfGU8GMHzguYjVdhJT90jVBJxlQSNWT13k
B+tMTPzUkLSNEP6oikltfGiinql4gOV2tYjOTCWD3K9lmkR2j0a3KFVPAQEklPaH
z7zn3cVTfc6kWfQQvvmkoCLJpjCjSu8ZQNs04jqwvWmoAdFQDktg2gKYGc+xjvUq
Y8FObah9CSpP77Uq3SMy7UItaZyiq7s=
-----END CERTIFICATE-----
Generated at Thu Oct 9 06:20:29 2025 by rpki-client