Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/c0061223-367e-304e-b257-a101e5234c0c.roa
File:                     c0061223-367e-304e-b257-a101e5234c0c.roa (raw, json)
Hash identifier:          j9EzMozK9SBsmlW1rlF7wpn4ga1qCAzA2C3KUinhYHA=
Subject key identifier:   5E:0D:63:10:E4:80:15:13:64:DD:45:F8:01:D6:55:92:5B:EA:8D:71
Certificate issuer:       /CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
Certificate serial:       010D0C9F4328584B0B76ABCC2848F5C9C2561100
Authority key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/c0061223-367e-304e-b257-a101e5234c0c.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     205220
IP address blocks:        104.193.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:ab:cc:28:48:f5:c9:c2:56:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=e5aa3013-187b-4ffa-ae65-d36c2b1fa812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:92:05:89:9f:bb:9e:92:95:2e:05:ae:60:63:
                    64:0f:cf:cb:e8:c4:95:a0:23:fa:08:4b:38:30:5d:
                    40:6c:ae:9e:02:73:db:82:76:79:b7:0f:08:8f:37:
                    f4:df:8c:3b:96:3d:fe:66:84:68:1d:f5:b3:82:47:
                    e4:a2:3f:28:b1:b6:25:b1:77:45:db:54:17:73:4d:
                    c1:ea:2f:ef:3d:a5:ba:d3:c7:b9:54:16:ee:b8:4d:
                    90:46:10:a0:b6:03:4c:08:ab:d2:53:ac:e9:70:d5:
                    cf:cb:f7:c9:1c:06:b3:2b:54:82:6a:e6:3f:0b:cd:
                    db:2c:5a:de:f4:3f:90:ce:97:85:16:0f:ba:db:f5:
                    19:f5:86:b1:97:0c:af:5c:53:04:c9:d2:92:c4:15:
                    25:28:7f:f8:79:2c:70:1a:73:60:ea:0d:4f:ce:88:
                    dd:7c:28:71:8c:8b:f8:d7:4d:90:f9:56:69:3a:92:
                    ca:9f:98:d6:2f:4d:f3:71:01:0e:33:0d:c4:01:70:
                    de:30:ef:97:02:d1:a7:90:d3:12:a5:00:a5:63:f0:
                    54:1d:6c:f4:04:4e:a0:dc:18:c5:3c:26:c8:ad:4a:
                    12:f1:e0:ed:f4:a9:ab:18:a3:54:b2:3f:92:80:6b:
                    1d:ec:6d:75:3b:8e:f5:a1:0f:55:59:d9:15:c8:c0:
                    c8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0D:63:10:E4:80:15:13:64:DD:45:F8:01:D6:55:92:5B:EA:8D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/c0061223-367e-304e-b257-a101e5234c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl

            X509v3 Authority Key Identifier:
                keyid:53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:63:7f:68:6e:d5:0a:be:75:aa:8a:5e:cd:dd:75:29:b4:26:
         24:34:56:e2:69:1b:bf:06:35:94:6f:67:5d:e1:0c:2c:88:58:
         d9:39:5f:2f:58:8c:d7:b5:47:c4:ec:d3:bf:f8:6b:ae:82:45:
         59:9b:03:9f:66:01:92:9f:cb:23:c6:99:28:29:ec:57:d4:c1:
         10:53:4a:f2:25:5a:3b:3c:98:5f:64:1a:c2:97:fe:fc:92:2f:
         71:f1:a9:ee:ce:3f:39:c2:d1:ed:b1:d5:ff:67:72:b3:e3:e2:
         41:2d:ac:e6:60:1a:a5:cc:4c:e1:1e:1b:7a:9b:96:4c:74:6c:
         62:56:80:16:bb:91:97:a8:fe:2d:16:88:8e:a9:76:6e:3d:98:
         dc:a3:96:a9:b5:09:c5:5d:6f:02:b6:4a:d3:5a:6d:20:98:b5:
         5c:67:e0:6f:49:de:0e:83:33:3d:21:3b:e6:72:c0:1c:07:9b:
         56:29:56:a9:82:fb:e1:45:f6:98:88:c7:79:fa:f6:91:28:39:
         5e:72:e5:63:21:df:26:b4:27:93:06:d7:61:ca:2c:39:84:f0:
         3c:dd:a8:27:24:f8:d3:f2:04:54:49:88:47:fe:df:3f:4f:80:
         5e:90:3a:98:7d:51:87:05:0b:cb:0e:1f:97:6f:1e:67:8a:b6:
         a6:4c:74:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqvMKEj1ycJWEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlYTEyZmYtZjk1NC00MjI5LTg4YTItZDJjNjY1NmEw
ZWNhMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk
ZTVhYTMwMTMtMTg3Yi00ZmZhLWFlNjUtZDM2YzJiMWZhODEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZIFiZ+7npKVLgWuYGNkD8/L6MSVoCP6CEs4
MF1AbK6eAnPbgnZ5tw8Ijzf034w7lj3+ZoRoHfWzgkfkoj8osbYlsXdF21QXc03B
6i/vPaW608e5VBbuuE2QRhCgtgNMCKvSU6zpcNXPy/fJHAazK1SCauY/C83bLFre
9D+QzpeFFg+62/UZ9YaxlwyvXFMEydKSxBUlKH/4eSxwGnNg6g1PzojdfChxjIv4
102Q+VZpOpLKn5jWL03zcQEOMw3EAXDeMO+XAtGnkNMSpQClY/BUHWz0BE6g3BjF
PCbIrUoS8eDt9KmrGKNUsj+SgGsd7G11O471oQ9VWdkVyMDIqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF4NYxDkgBUTZN1F+AHWVZJb6o1xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMGVh
MTJmZi1mOTU0LTQyMjktODhhMi1kMmM2NjU2YTBlY2EvYzAwNjEyMjMtMzY3ZS0z
MDRlLWIyNTctYTEwMWU1MjM0YzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDBlYTEyZmYtZjk1NC00MjI5LTg4
YTItZDJjNjY1NmEwZWNhL2QwZWExMmZmLWY5NTQtNDIyOS04OGEyLWQyYzY2NTZh
MGVjYS5jcmwwHwYDVR0jBBgwFoAUU0R/CWOSUHfPZabuD30f5r3OpLMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kMGVhMTJmZi1mOTU0LTQyMjktODhhMi1kMmM2
NjU2YTBlY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMHAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAFjf2hu1Qq+daqKXs3ddSm0JiQ0VuJpG78GNZRvZ13hDCyIWNk5Xy9Y
jNe1R8Ts07/4a66CRVmbA59mAZKfyyPGmSgp7FfUwRBTSvIlWjs8mF9kGsKX/vyS
L3Hxqe7OPznC0e2x1f9ncrPj4kEtrOZgGqXMTOEeG3qblkx0bGJWgBa7kZeo/i0W
iI6pdm49mNyjlqm1CcVdbwK2StNabSCYtVxn4G9J3g6DMz0hO+ZywBwHm1YpVqmC
++FF9piIx3n69pEoOV5y5WMh3ya0J5MG12HKLDmE8DzdqCck+NPyBFRJiEf+3z9P
gF6QOph9UYcFC8sOH5dvHmeKtqZMdHw=
-----END CERTIFICATE-----
Generated at Thu Sep 18 03:10:26 2025 by rpki-client