Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/995074cb-a4d4-3ba6-9b3d-5fc0f3372bac.roa
File:                     995074cb-a4d4-3ba6-9b3d-5fc0f3372bac.roa (raw, json)
Hash identifier:          zQjK78BaZWwPJPDX3AKDiM6+q/awPfJPUr4CRxNCKgY=
Subject key identifier:   B5:7D:D8:A9:05:7A:4A:4F:F3:33:E5:90:23:25:9B:D9:79:43:47:EF
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B0FF895FD465EE58EC0E501C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/995074cb-a4d4-3ba6-9b3d-5fc0f3372bac.roa
Signing time:             Tue 02 Sep 2025 15:45:42 +0000
ROA not before:           Tue 02 Sep 2025 15:45:42 +0000
ROA not after:            Mon 01 Dec 2025 16:45:42 +0000
asID:                     46562
IP address blocks:        104.224.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:f8:95:fd:46:5e:e5:8e:c0:e5:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  2 15:45:42 2025 GMT
            Not After : Dec  1 16:45:42 2025 GMT
        Subject: CN=26c1e451-7abd-4e0e-8af8-10d4185fccf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:c6:58:2f:39:73:b8:b1:79:b2:87:58:11:
                    2a:61:b4:82:c1:e7:6c:38:2d:d8:01:2f:c3:49:4a:
                    56:89:96:05:ad:a7:9c:51:c5:4b:05:f6:54:21:2d:
                    ef:9e:b0:da:70:3f:5b:70:f2:3d:4f:13:3c:ec:52:
                    d0:79:bd:ef:f9:0f:b5:d2:d8:af:42:18:f6:4a:13:
                    08:cc:7d:dc:35:01:31:4c:64:0f:0a:f2:db:12:72:
                    19:2f:44:74:67:95:ae:ce:c1:14:72:76:ff:0b:a1:
                    7b:b2:42:61:16:e9:5f:4b:90:78:1d:61:20:ac:d3:
                    a4:fd:1c:5c:9d:7a:1e:1c:d4:36:1e:d7:20:7a:a3:
                    e8:f2:6a:b5:d3:34:87:0c:06:6d:18:85:27:7e:f5:
                    a9:24:81:23:50:6d:b9:25:68:e3:ed:ec:5b:71:03:
                    2d:fe:16:e7:72:6e:b4:27:88:b7:54:4f:91:c3:75:
                    6e:81:3e:b1:15:26:3c:03:e9:73:fd:ed:ad:a3:76:
                    cc:a6:fd:1b:e4:b9:90:f8:ec:ba:53:85:aa:cd:ae:
                    1a:1d:db:91:50:c3:96:bf:3f:77:3e:50:24:2f:f0:
                    79:ad:34:ba:fd:c3:ea:c4:b7:a4:ea:57:fc:b9:00:
                    c2:55:02:8c:1a:c3:e4:f0:9f:68:3c:ba:76:0f:ac:
                    6a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7D:D8:A9:05:7A:4A:4F:F3:33:E5:90:23:25:9B:D9:79:43:47:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/995074cb-a4d4-3ba6-9b3d-5fc0f3372bac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:97:fe:6f:01:5e:17:30:80:41:64:81:60:48:3a:0c:0a:ad:
         d7:94:f6:31:53:5b:e7:1c:0e:67:ea:3f:b3:27:4f:f9:71:e4:
         4d:e3:04:9a:63:6f:5c:9f:3f:cf:d8:d8:d8:91:fd:fa:82:4f:
         7a:7d:a7:1a:8c:dd:60:a7:1b:61:85:2b:3d:e5:ad:22:15:cc:
         fd:b6:cf:aa:7e:ba:58:f6:1c:e3:fc:9e:2a:fd:c3:90:0e:59:
         a2:12:39:f4:6f:b8:09:a5:6f:55:e9:25:36:c4:b9:8f:3d:1a:
         67:14:84:83:43:9a:2c:4b:86:a7:c7:18:27:44:2a:af:fa:70:
         fc:7f:25:d3:c8:40:af:28:ef:73:a5:34:8a:44:71:b9:8a:c4:
         9c:b9:03:6a:01:a6:0d:ac:88:71:68:9b:2c:02:31:d3:4c:60:
         de:69:ce:3a:21:d3:69:3d:f2:34:bc:f0:71:a1:78:38:bd:93:
         c6:a6:c8:fd:d8:62:46:88:ea:a4:0f:17:a2:2e:da:a8:fc:59:
         6f:9b:2a:56:bb:99:94:37:06:9a:a8:9d:8c:99:ba:01:8f:f3:
         88:ea:3b:7e:3d:3f:85:a9:64:95:cc:39:c7:99:a6:3f:44:62:
         fa:20:46:d5:59:4e:0b:97:b8:1b:fc:61:ad:a5:55:54:3c:92:
         2a:21:68:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsP+JX9Rl7ljsDlAcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDkwMjE1NDU0MloXDTI1MTIwMTE2NDU0MlowLzEtMCsGA1UEAxMk
MjZjMWU0NTEtN2FiZC00ZTBlLThhZjgtMTBkNDE4NWZjY2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBDGWC85c7ixebKHWBEqYbSCwedsOC3YAS/D
SUpWiZYFraecUcVLBfZUIS3vnrDacD9bcPI9TxM87FLQeb3v+Q+10tivQhj2ShMI
zH3cNQExTGQPCvLbEnIZL0R0Z5WuzsEUcnb/C6F7skJhFulfS5B4HWEgrNOk/Rxc
nXoeHNQ2HtcgeqPo8mq10zSHDAZtGIUnfvWpJIEjUG25JWjj7exbcQMt/hbncm60
J4i3VE+Rw3VugT6xFSY8A+lz/e2to3bMpv0b5LmQ+Oy6U4Wqza4aHduRUMOWvz93
PlAkL/B5rTS6/cPqxLek6lf8uQDCVQKMGsPk8J9oPLp2D6xqNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLV92KkFekpP8zPlkCMlm9l5Q0fvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOTk1MDc0Y2ItYTRkNC0z
YmE2LTliM2QtNWZjMGYzMzcyYmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOBXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGuX/m8BXhcwgEFkgWBIOgwKrdeU9jFTW+ccDmfqP7MnT/lx5E3jBJpj
b1yfP8/Y2NiR/fqCT3p9pxqM3WCnG2GFKz3lrSIVzP22z6p+ulj2HOP8nir9w5AO
WaISOfRvuAmlb1XpJTbEuY89GmcUhINDmixLhqfHGCdEKq/6cPx/JdPIQK8o73Ol
NIpEcbmKxJy5A2oBpg2siHFomywCMdNMYN5pzjoh02k98jS88HGheDi9k8amyP3Y
YkaI6qQPF6Iu2qj8WW+bKla7mZQ3BpqonYyZugGP84jqO349P4WpZJXMOceZpj9E
YvogRtVZTguXuBv8Ya2lVVQ8kiohaPs=
-----END CERTIFICATE-----
Generated at Mon Sep 15 11:18:46 2025 by rpki-client