Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/25e244e3-f519-394a-951d-cdac4dc84db7.roa
File:                     25e244e3-f519-394a-951d-cdac4dc84db7.roa (raw, json)
Hash identifier:          xuku1KOTtNnIc3gbF2RgcRUft1Mg3dSv8H9vInVyF9w=
Subject key identifier:   6F:C5:AA:14:30:5B:7A:87:55:E1:AE:1F:24:F4:EA:64:FA:74:EF:6E
Certificate issuer:       /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial:       010D0C9F4328584FA5933DCF8847067665666280
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/25e244e3-f519-394a-951d-cdac4dc84db7.roa
Signing time:             Wed 28 Oct 2026 01:00:13 +0000
ROA not before:           Wed 28 Oct 2026 01:00:13 +0000
ROA not after:            Tue 26 Jan 2027 02:00:13 +0000
asID:                     8014
IP address blocks:        108.60.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:93:3d:cf:88:47:06:76:65:66:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Validity
            Not Before: Oct 28 01:00:13 2026 GMT
            Not After : Jan 26 02:00:13 2027 GMT
        Subject: CN=c471b2fb-3331-43a8-87e8-be6b4fd9b8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:48:03:fc:69:3c:71:94:91:28:c1:0f:52:23:
                    18:3f:2a:ce:d1:12:47:c4:b6:2f:cf:33:dd:e9:52:
                    a7:0b:80:94:8b:c5:0d:6c:89:15:02:48:ef:33:63:
                    da:5f:4d:da:c1:2e:10:83:c1:66:24:d6:17:d9:6c:
                    14:f0:a9:b0:a1:db:dd:c1:ac:c6:30:d2:30:97:86:
                    8f:9b:37:a0:a8:aa:f9:d0:61:f1:df:cd:78:e4:66:
                    7c:51:10:30:45:9e:5a:a1:ad:38:b5:fe:5b:30:70:
                    c5:30:cb:da:7e:33:a8:44:58:23:b1:76:f1:9a:e3:
                    fb:4f:17:18:b2:85:29:e0:e4:07:34:b2:29:7d:74:
                    c2:e5:20:30:76:8c:5f:6d:db:12:01:9c:a3:86:0a:
                    13:6e:c6:ba:ac:fe:e0:f7:85:8f:b0:4e:0a:d0:a5:
                    82:b1:10:e2:59:6a:bb:be:82:94:a3:60:58:ee:ce:
                    ff:24:b1:c4:52:92:33:fe:bb:b4:05:34:c7:ff:b6:
                    0a:89:65:3e:be:c7:2a:44:ea:20:d8:4a:44:08:b4:
                    87:40:22:47:cd:15:16:85:e1:d9:f9:71:25:e6:47:
                    3f:35:0e:83:f0:4f:cc:e9:c4:06:50:01:64:c7:3e:
                    88:62:03:05:d9:2d:2e:4b:42:a2:3f:90:1c:79:9c:
                    46:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C5:AA:14:30:5B:7A:87:55:E1:AE:1F:24:F4:EA:64:FA:74:EF:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/25e244e3-f519-394a-951d-cdac4dc84db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.60.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:57:ec:3d:c0:16:b0:0b:a2:b5:b8:f7:eb:00:39:d6:04:43:
         8e:3f:b7:c9:3d:17:26:b9:fd:c4:60:bc:b2:41:97:49:ad:3a:
         f9:fa:3a:18:cd:fc:77:03:cf:f9:a3:99:36:c5:81:dc:68:3e:
         9e:37:22:60:66:50:28:4d:bc:61:fe:56:95:f5:20:b0:a5:17:
         f1:0b:57:49:4a:99:18:52:28:e8:5e:16:d0:e9:63:eb:88:eb:
         d9:92:36:e3:0b:38:2d:91:e6:61:a6:f5:5d:dd:09:07:c8:19:
         1d:64:46:47:35:a6:d2:05:a4:d0:e4:77:e2:72:41:11:7f:31:
         89:91:aa:c4:e8:3c:08:d6:3b:aa:a9:7f:a6:6d:08:ef:81:0e:
         8b:2e:f2:85:09:89:44:12:4a:b7:a0:a3:4f:cc:e2:ce:2d:0f:
         39:66:da:6d:ce:b7:4e:68:e9:5d:23:38:48:eb:76:d6:86:1a:
         b1:96:cb:23:00:20:cf:3d:fe:6a:ac:2d:0a:56:9e:9c:4f:30:
         b7:69:45:d7:cb:11:76:99:32:b5:da:53:9b:2d:11:42:31:b7:
         bb:93:ab:1f:ae:92:55:36:93:47:07:4e:76:c0:f8:3f:39:6e:
         6f:cf:c2:bc:78:72:29:c6:60:b1:91:87:3d:e6:7d:4f:b3:61:
         77:d7:47:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+lkz3PiEcGdmVmYoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz
Zjc1MB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk
YzQ3MWIyZmItMzMzMS00M2E4LTg3ZTgtYmU2YjRmZDliOGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkgD/Gk8cZSRKMEPUiMYPyrO0RJHxLYvzzPd
6VKnC4CUi8UNbIkVAkjvM2PaX03awS4Qg8FmJNYX2WwU8KmwodvdwazGMNIwl4aP
mzegqKr50GHx38145GZ8URAwRZ5aoa04tf5bMHDFMMvafjOoRFgjsXbxmuP7TxcY
soUp4OQHNLIpfXTC5SAwdoxfbdsSAZyjhgoTbsa6rP7g94WPsE4K0KWCsRDiWWq7
voKUo2BY7s7/JLHEUpIz/ru0BTTH/7YKiWU+vscqROog2EpECLSHQCJHzRUWheHZ
+XEl5kc/NQ6D8E/M6cQGUAFkxz6IYgMF2S0uS0KiP5AceZxGSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG/FqhQwW3qHVeGuHyT06mT6dO9uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk
MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvMjVlMjQ0ZTMtZjUxOS0z
OTRhLTk1MWQtY2RhYzRkYzg0ZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj
NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5
M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm
Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbDzgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI9X7D3AFrALorW49+sAOdYEQ44/t8k9Fya5/cRgvLJBl0mtOvn6OhjN
/HcDz/mjmTbFgdxoPp43ImBmUChNvGH+VpX1ILClF/ELV0lKmRhSKOheFtDpY+uI
69mSNuMLOC2R5mGm9V3dCQfIGR1kRkc1ptIFpNDkd+JyQRF/MYmRqsToPAjWO6qp
f6ZtCO+BDosu8oUJiUQSSrego0/M4s4tDzlm2m3Ot05o6V0jOEjrdtaGGrGWyyMA
IM89/mqsLQpWnpxPMLdpRdfLEXaZMrXaU5stEUIxt7uTqx+uklU2k0cHTnbA+D85
bm/Pwrx4cinGYLGRhz3mfU+zYXfXR+Q=
-----END CERTIFICATE-----
Generated at Thu Oct 29 06:08:09 2026 by rpki-client