Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/de41f8b8-4f2b-3add-bf8e-0fd1df604b15.roa
File:                     de41f8b8-4f2b-3add-bf8e-0fd1df604b15.roa (raw, json)
Hash identifier:          F2TLXVoPWqyBVka/RALb1tGjAHJl7QG8Ad2/Eh23cC0=
Subject key identifier:   17:E1:21:0B:EC:53:59:DC:74:FA:BE:18:90:34:F4:B5:C8:F7:63:03
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584B98554DAA7FD0A8B6D73588E0
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/de41f8b8-4f2b-3add-bf8e-0fd1df604b15.roa
Signing time:             Tue 21 Oct 2025 12:02:27 +0000
ROA not before:           Tue 21 Oct 2025 12:02:27 +0000
ROA not after:            Mon 19 Jan 2026 13:02:27 +0000
asID:                     812
IP address blocks:        108.174.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:55:4d:aa:7f:d0:a8:b6:d7:35:88:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Oct 21 12:02:27 2025 GMT
            Not After : Jan 19 13:02:27 2026 GMT
        Subject: CN=ffd49b4d-f72b-4a1f-86a3-14ec158cb05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:6a:23:4c:f2:20:57:30:ef:4e:8d:d9:75:
                    f2:0a:da:e8:f6:62:39:c1:ac:42:52:91:c8:50:12:
                    d4:66:14:d3:f8:10:18:0c:04:14:16:a3:26:94:e6:
                    81:ce:47:3e:3b:d4:ff:a7:f9:21:91:4e:cc:19:f4:
                    bb:42:53:f4:c8:01:dd:a2:57:84:9b:f8:0c:25:a5:
                    58:81:f7:b4:4a:c6:f1:00:f4:df:66:85:42:ea:92:
                    79:f7:27:2c:4e:f2:f8:6c:3c:99:f2:37:f9:53:8b:
                    25:17:43:63:bc:52:63:02:11:9f:f8:a6:03:96:5b:
                    af:3b:f5:a6:cb:e6:e0:17:8c:39:c3:01:e9:50:9e:
                    3d:2a:1d:ad:12:c2:bc:61:36:f5:c3:63:20:70:7b:
                    85:b4:09:f9:f0:d7:4c:d6:ad:61:dc:98:60:16:b5:
                    d8:a0:07:7b:4e:0f:86:1d:7a:bb:f4:61:5e:4f:32:
                    08:53:d0:aa:94:e4:f7:8f:9e:27:d7:4f:89:fa:9e:
                    38:24:94:3f:58:f0:15:ba:85:e9:0a:ba:cf:a7:63:
                    90:d1:a7:ab:85:09:33:78:15:75:42:60:91:58:72:
                    4e:11:5d:6c:55:64:4a:b5:2e:c4:ae:10:e2:26:ee:
                    2e:47:cd:79:77:32:1d:7e:32:d0:17:f1:54:a1:81:
                    38:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E1:21:0B:EC:53:59:DC:74:FA:BE:18:90:34:F4:B5:C8:F7:63:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/de41f8b8-4f2b-3add-bf8e-0fd1df604b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.174.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b2:7e:a2:93:b9:4a:bb:8a:3f:01:6b:fc:75:cd:b3:12:01:
         06:a9:bb:8a:c0:82:52:51:57:94:00:77:26:a3:b9:08:63:b2:
         89:09:9d:54:91:ad:51:df:a1:e5:d8:76:1e:08:51:ea:f8:28:
         c1:af:6d:a4:37:64:b1:cd:4a:1a:36:61:36:d5:38:ea:58:7b:
         6f:12:7d:a2:6f:73:5d:55:53:0a:ca:78:b8:9c:5b:06:5c:3d:
         e4:64:d5:b9:c5:af:7e:95:64:55:a8:f4:ca:04:3f:c8:9e:5d:
         34:26:b8:13:be:4a:5c:8d:cf:6b:ff:8a:fd:8b:c8:36:fa:e6:
         cf:37:22:9d:e5:4f:68:27:b1:bf:0e:9f:c8:65:e0:7f:b4:6b:
         c2:64:88:60:ba:34:d8:2c:60:ee:c2:b3:7d:9b:92:4c:a7:3a:
         e6:ae:e3:1a:b0:0b:4f:d3:23:90:31:db:aa:f7:73:7a:ac:e5:
         b8:98:2e:7b:64:db:40:f2:15:82:d1:75:5b:7e:ba:e0:40:68:
         c1:fd:28:cf:39:6f:98:93:67:70:00:ac:26:1f:5b:a5:cb:b9:
         44:8b:b2:8d:4f:09:ed:3c:83:43:d3:8b:00:6b:a6:e2:0a:52:
         8e:3b:3d:90:b9:40:a6:cd:bb:c3:81:2a:fd:6d:5f:aa:6a:08:
         58:61:93:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYVU2qf9Cottc1iOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUyNzk5MTgtZjViMS00M2Y3LTk3NDgtOTVhYTBjNjQ2
OWYzMB4XDTI1MTAyMTEyMDIyN1oXDTI2MDExOTEzMDIyN1owLzEtMCsGA1UEAxMk
ZmZkNDliNGQtZjcyYi00YTFmLTg2YTMtMTRlYzE1OGNiMDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi1qI0zyIFcw706N2XXyCtro9mI5waxCUpHI
UBLUZhTT+BAYDAQUFqMmlOaBzkc+O9T/p/khkU7MGfS7QlP0yAHdoleEm/gMJaVY
gfe0SsbxAPTfZoVC6pJ59ycsTvL4bDyZ8jf5U4slF0NjvFJjAhGf+KYDlluvO/Wm
y+bgF4w5wwHpUJ49Kh2tEsK8YTb1w2MgcHuFtAn58NdM1q1h3JhgFrXYoAd7Tg+G
HXq79GFeTzIIU9CqlOT3j54n10+J+p44JJQ/WPAVuoXpCrrPp2OQ0aerhQkzeBV1
QmCRWHJOEV1sVWRKtS7ErhDiJu4uR815dzIdfjLQF/FUoYE4DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBfhIQvsU1ncdPq+GJA09LXI92MDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNTI3
OTkxOC1mNWIxLTQzZjctOTc0OC05NWFhMGM2NDY5ZjMvZGU0MWY4YjgtNGYyYi0z
YWRkLWJmOGUtMGZkMWRmNjA0YjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDUyNzk5MTgtZjViMS00M2Y3LTk3
NDgtOTVhYTBjNjQ2OWYzLzA1Mjc5OTE4LWY1YjEtNDNmNy05NzQ4LTk1YWEwYzY0
NjlmMy5jcmwwHwYDVR0jBBgwFoAUcgH1iAdeZMnpAPYfP2ut8NzCz9YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNTI3OTkxOC1mNWIxLTQzZjctOTc0OC05NWFh
MGM2NDY5ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbK4QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyyfqKTuUq7ij8Ba/x1zbMSAQapu4rAglJRV5QAdyajuQhjsokJnVSR
rVHfoeXYdh4IUer4KMGvbaQ3ZLHNSho2YTbVOOpYe28SfaJvc11VUwrKeLicWwZc
PeRk1bnFr36VZFWo9MoEP8ieXTQmuBO+SlyNz2v/iv2LyDb65s83Ip3lT2gnsb8O
n8hl4H+0a8JkiGC6NNgsYO7Cs32bkkynOuau4xqwC0/TI5Ax26r3c3qs5biYLntk
20DyFYLRdVt+uuBAaMH9KM85b5iTZ3AArCYfW6XLuUSLso1PCe08g0PTiwBrpuIK
Uo47PZC5QKbNu8OBKv1tX6pqCFhhk/8=
-----END CERTIFICATE-----
Generated at Tue Oct 21 23:28:57 2025 by rpki-client