Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/e6fd9a70-3241-3458-aa28-4137ac1f67fa.roa
File:                     e6fd9a70-3241-3458-aa28-4137ac1f67fa.roa (raw, json)
Hash identifier:          PT3KKb8OvyR+KcrxVv7XGSEy8WHAu8T7Zj90MAtA7ow=
Subject key identifier:   4E:11:01:6B:B1:A5:14:7E:94:8A:E6:37:38:A0:E6:1D:3F:2F:A7:14
Certificate issuer:       /CN=932105b1-ce56-44a7-9670-6f4e56578ef8
Certificate serial:       010D0C9F4328584A717331FC4EF0BF495A47AE00
Authority key identifier: DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/e6fd9a70-3241-3458-aa28-4137ac1f67fa.roa
Signing time:             Mon 07 Jul 2025 20:59:13 +0000
ROA not before:           Mon 07 Jul 2025 20:59:13 +0000
ROA not after:            Sun 05 Oct 2025 20:59:13 +0000
asID:                     53724
IP address blocks:        104.156.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:73:31:fc:4e:f0:bf:49:5a:47:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932105b1-ce56-44a7-9670-6f4e56578ef8
        Validity
            Not Before: Jul  7 20:59:13 2025 GMT
            Not After : Oct  5 20:59:13 2025 GMT
        Subject: CN=aee3286e-e069-4ab1-ae00-b47c687a58b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f9:8c:17:6f:15:01:1c:83:c1:77:0a:57:16:
                    f3:35:a3:23:40:ad:69:d6:1c:0b:4b:46:61:19:19:
                    49:2a:42:9d:17:4e:47:ea:80:a5:be:5c:7a:8b:da:
                    a6:a4:13:6f:f0:f6:62:1d:8d:2e:26:5d:96:2e:41:
                    95:18:49:cf:f9:44:9e:9f:a4:19:01:64:fe:17:4f:
                    25:8e:11:90:42:05:54:a5:5b:77:85:f3:e1:db:c3:
                    29:ce:2e:92:0d:be:4b:87:e7:1c:44:a8:04:0e:a5:
                    a9:68:6c:21:da:f1:f1:53:a7:33:2c:f0:f2:2f:6f:
                    df:b6:10:01:88:1f:55:6b:f7:a7:88:0a:8c:f3:d1:
                    aa:ae:c2:4d:4a:38:9b:c5:c8:b8:a4:a7:20:78:a1:
                    be:d5:21:9d:6b:56:27:64:49:dc:91:a4:cc:a4:3b:
                    ee:31:f2:92:af:c9:bb:c6:6f:83:f9:26:8f:39:f5:
                    b7:71:ea:18:32:4d:a9:ad:07:f5:c6:c1:fa:20:63:
                    8f:3b:ae:7f:23:77:3b:61:9f:be:96:02:7b:15:8f:
                    6c:4b:13:39:1f:7c:b6:49:1d:94:86:7d:f2:96:ca:
                    93:e4:3a:dc:8e:41:76:d2:cd:26:b8:42:65:b4:ac:
                    ec:68:fb:9d:92:b8:43:c8:30:fc:f8:f2:b1:3c:b1:
                    dc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:11:01:6B:B1:A5:14:7E:94:8A:E6:37:38:A0:E6:1D:3F:2F:A7:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/e6fd9a70-3241-3458-aa28-4137ac1f67fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c7:a8:f4:60:07:27:16:49:03:51:8b:21:96:fe:34:d2:96:
         67:de:95:17:2e:79:82:b2:e3:0d:ad:be:76:72:92:7d:79:c6:
         87:6c:c3:24:fa:9f:79:41:1e:9f:70:a7:54:ef:95:9f:f8:66:
         40:d6:60:2c:42:24:69:15:5b:7d:e0:dd:54:c0:5f:6d:ff:5a:
         cd:f8:47:68:1a:46:37:d6:af:06:2b:ef:07:ca:31:76:8e:b8:
         a2:5b:c3:ed:aa:dc:45:9a:ec:49:79:9c:6f:c5:a1:e8:0f:0d:
         1b:ab:87:3a:d6:22:99:14:91:6b:65:6e:78:a0:21:8d:c8:20:
         b7:18:8b:02:87:29:24:8b:27:65:4e:d3:6f:75:45:ea:50:a8:
         d6:75:4e:f5:cf:c0:3f:c2:0e:56:d8:61:f5:c1:7f:a5:6a:b7:
         8a:c9:bc:1c:1d:22:66:98:4d:b0:16:92:53:e3:a4:48:99:7c:
         ae:1a:e0:58:13:9a:59:9f:e7:18:12:75:44:37:fc:3b:23:5c:
         22:54:d4:33:7b:20:5d:15:fc:23:1c:f5:2d:f4:7c:9b:dc:45:
         6a:22:de:28:0a:2b:f2:5d:d0:f4:f7:49:de:90:32:da:88:26:
         ba:8c:f4:ec:1e:2b:1e:bd:7d:1c:88:e4:4e:0b:14:71:23:33:
         8d:73:16:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpxczH8TvC/SVpHrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTMyMTA1YjEtY2U1Ni00NGE3LTk2NzAtNmY0ZTU2NTc4
ZWY4MB4XDTI1MDcwNzIwNTkxM1oXDTI1MTAwNTIwNTkxM1owLzEtMCsGA1UEAxMk
YWVlMzI4NmUtZTA2OS00YWIxLWFlMDAtYjQ3YzY4N2E1OGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfmMF28VARyDwXcKVxbzNaMjQK1p1hwLS0Zh
GRlJKkKdF05H6oClvlx6i9qmpBNv8PZiHY0uJl2WLkGVGEnP+USen6QZAWT+F08l
jhGQQgVUpVt3hfPh28Mpzi6SDb5Lh+ccRKgEDqWpaGwh2vHxU6czLPDyL2/fthAB
iB9Va/eniAqM89GqrsJNSjibxci4pKcgeKG+1SGda1YnZEnckaTMpDvuMfKSr8m7
xm+D+SaPOfW3ceoYMk2prQf1xsH6IGOPO65/I3c7YZ++lgJ7FY9sSxM5H3y2SR2U
hn3ylsqT5DrcjkF20s0muEJltKzsaPudkrhDyDD8+PKxPLHcFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE4RAWuxpRR+lIrmNzig5h0/L6cUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MzIx
MDViMS1jZTU2LTQ0YTctOTY3MC02ZjRlNTY1NzhlZjgvZTZmZDlhNzAtMzI0MS0z
NDU4LWFhMjgtNDEzN2FjMWY2N2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTMyMTA1YjEtY2U1Ni00NGE3LTk2
NzAtNmY0ZTU2NTc4ZWY4LzkzMjEwNWIxLWNlNTYtNDRhNy05NjcwLTZmNGU1NjU3
OGVmOC5jcmwwHwYDVR0jBBgwFoAU2oXXhzBPtQ/DehLEbjKC7ia9QuYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MzIxMDViMS1jZTU2LTQ0YTctOTY3MC02ZjRl
NTY1NzhlZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDHqPRgBycWSQNRiyGW/jTSlmfelRcueYKy4w2tvnZykn15xodswyT6
n3lBHp9wp1TvlZ/4ZkDWYCxCJGkVW33g3VTAX23/Ws34R2gaRjfWrwYr7wfKMXaO
uKJbw+2q3EWa7El5nG/FoegPDRurhzrWIpkUkWtlbnigIY3IILcYiwKHKSSLJ2VO
0291RepQqNZ1TvXPwD/CDlbYYfXBf6Vqt4rJvBwdImaYTbAWklPjpEiZfK4a4FgT
mlmf5xgSdUQ3/DsjXCJU1DN7IF0V/CMc9S30fJvcRWoi3igKK/Jd0PT3Sd6QMtqI
JrqM9OweKx69fRyI5E4LFHEjM41zFrY=
-----END CERTIFICATE-----
Generated at Thu Aug 21 15:59:38 2025 by rpki-client