Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/292428d1-8747-37ac-aeaf-3d7b27572915.roa
File:                     292428d1-8747-37ac-aeaf-3d7b27572915.roa (raw, json)
Hash identifier:          56YgxH/Xz2ZjWXuGE3/WgwUN/YFG8Mqfo6rZv886I9Y=
Subject key identifier:   61:7D:31:BE:AE:AC:79:11:6D:0F:53:78:12:82:E6:34:9A:B0:E2:E0
Certificate issuer:       /CN=7019d1c7-b32a-4a65-a135-234cde3c7680
Certificate serial:       010D0C9F4328584B2A2C2E80E7768C87BF47B4C0
Authority key identifier: 22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/292428d1-8747-37ac-aeaf-3d7b27572915.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     35280
IP address blocks:        104.193.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:2e:80:e7:76:8c:87:bf:47:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7019d1c7-b32a-4a65-a135-234cde3c7680
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=e9849563-b9de-4004-a72e-0f5477604f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:26:6c:b2:37:39:32:9d:f5:66:8b:eb:ab:
                    fe:de:f3:38:eb:19:45:1e:9b:e6:58:37:ce:0c:37:
                    ea:93:8b:03:bc:42:95:c3:39:38:59:16:b1:2e:3d:
                    a8:87:5a:9c:8c:f4:8a:02:a5:50:47:72:f8:1b:24:
                    70:81:d0:3e:90:1e:2c:be:2c:6b:6e:62:0a:08:73:
                    3e:f6:ea:2b:07:c1:40:53:a6:0d:40:ee:97:5b:46:
                    57:f6:2b:3a:b3:9d:02:b2:64:b5:76:2d:90:e7:6f:
                    b5:93:a6:5e:fb:bb:4d:c4:89:e6:a4:f9:c8:4d:3a:
                    49:e0:c4:c3:98:40:f7:a7:fb:4e:27:c0:f7:01:69:
                    97:33:2e:b2:76:29:5b:1c:e2:27:9d:3e:61:28:a9:
                    62:26:f9:41:c5:6d:41:78:55:35:be:6e:4f:34:4b:
                    84:eb:66:44:62:b8:8f:8d:f8:c4:5a:fb:d7:b6:01:
                    89:18:92:ba:5d:de:a8:0d:88:ed:81:2e:8a:c7:e0:
                    55:44:24:d8:13:9d:96:d7:56:80:b1:a5:d6:c3:c0:
                    56:9d:17:0a:29:35:b6:32:eb:4b:f4:59:9d:3a:87:
                    93:fa:3e:96:10:51:51:ae:c1:dc:d1:0b:94:aa:02:
                    3b:20:dc:f0:88:43:db:f6:90:da:f9:55:5a:ed:b1:
                    10:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7D:31:BE:AE:AC:79:11:6D:0F:53:78:12:82:E6:34:9A:B0:E2:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/292428d1-8747-37ac-aeaf-3d7b27572915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl

            X509v3 Authority Key Identifier:
                keyid:22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:8a:9b:b8:98:22:69:e9:f4:63:e3:ca:be:5d:ce:55:d1:40:
         bd:68:22:98:85:5b:00:da:c8:c7:84:4e:18:b8:d4:52:0c:3e:
         e6:bb:d3:fe:cb:54:01:d5:23:fe:97:7b:ed:c3:88:86:99:63:
         0f:e2:a0:67:bc:a5:31:fe:7b:1f:ad:1a:64:02:dd:5a:3b:b4:
         5f:a9:c5:93:82:cd:29:3d:65:b1:e0:93:5f:10:12:3f:32:c6:
         4b:84:50:92:c6:ad:c8:58:9d:92:44:83:df:cf:37:20:a5:8d:
         8b:9a:0b:92:9c:cf:64:c1:7b:a9:c9:26:f0:ab:27:a1:b3:5e:
         ad:69:ff:97:b2:cc:8f:e9:5c:e9:6c:7e:1b:1c:31:52:07:e5:
         e8:17:70:7f:f8:b5:77:5b:27:d1:58:6f:e9:5e:6e:a0:f1:37:
         19:67:c5:80:9d:66:a8:24:ee:65:30:61:ed:ab:32:c3:2a:73:
         33:75:ee:85:65:0f:7f:f0:e8:6f:ed:33:ed:61:78:a4:91:2a:
         b8:f6:7f:90:f1:36:6d:61:7e:cb:91:38:8a:be:aa:1c:0b:2e:
         dc:c6:b8:4a:9d:86:f0:29:70:46:b6:4a:cd:ea:b9:80:68:e5:
         bb:93:56:b8:a9:d8:aa:8c:44:72:0b:75:07:e0:8f:ef:11:79:
         3d:87:a5:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLC6A53aMh79HtMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzAxOWQxYzctYjMyYS00YTY1LWExMzUtMjM0Y2RlM2M3
NjgwMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZTk4NDk1NjMtYjlkZS00MDA0LWE3MmUtMGY1NDc3NjA0ZjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfombLI3OTKd9WaL66v+3vM46xlFHpvmWDfO
DDfqk4sDvEKVwzk4WRaxLj2oh1qcjPSKAqVQR3L4GyRwgdA+kB4svixrbmIKCHM+
9uorB8FAU6YNQO6XW0ZX9is6s50CsmS1di2Q52+1k6Ze+7tNxInmpPnITTpJ4MTD
mED3p/tOJ8D3AWmXMy6ydilbHOInnT5hKKliJvlBxW1BeFU1vm5PNEuE62ZEYriP
jfjEWvvXtgGJGJK6Xd6oDYjtgS6Kx+BVRCTYE52W11aAsaXWw8BWnRcKKTW2MutL
9FmdOoeT+j6WEFFRrsHc0QuUqgI7INzwiEPb9pDa+VVa7bEQBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGF9Mb6urHkRbQ9TeBKC5jSasOLgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MDE5
ZDFjNy1iMzJhLTRhNjUtYTEzNS0yMzRjZGUzYzc2ODAvMjkyNDI4ZDEtODc0Ny0z
N2FjLWFlYWYtM2Q3YjI3NTcyOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzAxOWQxYzctYjMyYS00YTY1LWEx
MzUtMjM0Y2RlM2M3NjgwLzcwMTlkMWM3LWIzMmEtNGE2NS1hMTM1LTIzNGNkZTNj
NzY4MC5jcmwwHwYDVR0jBBgwFoAUIg3xbZnjAw8pgoinQ5WJawDMTZMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83MDE5ZDFjNy1iMzJhLTRhNjUtYTEzNS0yMzRj
ZGUzYzc2ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMEPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHyKm7iYImnp9GPjyr5dzlXRQL1oIpiFWwDayMeEThi41FIMPua70/7L
VAHVI/6Xe+3DiIaZYw/ioGe8pTH+ex+tGmQC3Vo7tF+pxZOCzSk9ZbHgk18QEj8y
xkuEUJLGrchYnZJEg9/PNyCljYuaC5Kcz2TBe6nJJvCrJ6GzXq1p/5eyzI/pXOls
fhscMVIH5egXcH/4tXdbJ9FYb+lebqDxNxlnxYCdZqgk7mUwYe2rMsMqczN17oVl
D3/w6G/tM+1heKSRKrj2f5DxNm1hfsuROIq+qhwLLtzGuEqdhvApcEa2Ss3quYBo
5buTVrip2KqMRHILdQfgj+8ReT2HpWo=
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:25 2025 by rpki-client