Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b369ef2c-216d-3c95-a1f4-d45ca70535ff.roa
File:                     b369ef2c-216d-3c95-a1f4-d45ca70535ff.roa (raw, json)
Hash identifier:          f0sxkVhirYvhX2mJsBlADI5nFlGPi1GqtJZ9P+xVME4=
Subject key identifier:   D1:71:43:75:4A:12:28:9B:96:3B:DA:4D:C5:C3:F3:36:91:24:BE:98
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B6FF748017407F405D48C85FC
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b369ef2c-216d-3c95-a1f4-d45ca70535ff.roa
Signing time:             Tue 07 Oct 2025 01:00:29 +0000
ROA not before:           Tue 07 Oct 2025 01:00:29 +0000
ROA not after:            Mon 05 Jan 2026 02:00:29 +0000
asID:                     19905
IP address blocks:        108.161.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:f7:48:01:74:07:f4:05:d4:8c:85:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  7 01:00:29 2025 GMT
            Not After : Jan  5 02:00:29 2026 GMT
        Subject: CN=2e0ffe1b-9c3e-43a4-9f6b-20c153d15437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:77:c0:04:aa:1d:fc:27:8f:f2:6d:5f:40:31:
                    62:76:1d:ff:4a:5c:aa:34:5b:70:9d:c6:fb:f5:83:
                    78:48:12:70:75:73:a7:a2:42:f4:27:9f:98:87:b0:
                    a5:32:73:25:3f:bb:c8:74:3b:da:34:0b:c9:5c:2e:
                    51:06:91:73:02:ce:28:11:80:14:3f:f5:3d:d8:f6:
                    d1:b0:d7:68:c8:f5:64:3a:5e:5b:d4:f8:95:66:d6:
                    ad:e3:b5:f7:63:ec:de:9c:65:39:b6:b4:72:9f:fb:
                    a9:65:e0:40:26:7e:d7:ba:6b:ff:6b:d1:34:ba:0e:
                    01:9c:5d:33:de:d1:40:2d:b3:e2:48:7d:71:6b:16:
                    1d:44:4b:50:8c:00:51:aa:8c:d6:7c:cd:7f:88:ad:
                    b9:03:3d:a6:61:af:db:11:19:ea:73:fe:4a:48:c3:
                    12:80:fa:bf:72:3b:b4:1d:f3:04:a9:d3:c4:64:3b:
                    d1:bc:1c:a7:16:bc:c3:98:34:87:a2:b8:7e:b2:25:
                    af:aa:48:a5:87:6f:d8:5b:fe:2b:6a:ea:ec:bb:38:
                    07:77:79:45:d6:23:a7:25:5a:5a:5d:e4:76:42:01:
                    92:b4:22:87:64:04:56:1a:05:4e:69:3e:ae:a1:06:
                    c3:a6:07:07:39:a2:20:ad:aa:94:a6:fe:71:7d:fc:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:71:43:75:4A:12:28:9B:96:3B:DA:4D:C5:C3:F3:36:91:24:BE:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b369ef2c-216d-3c95-a1f4-d45ca70535ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:15:29:05:27:4c:3c:02:bd:49:b6:c2:54:1e:79:7b:07:f9:
         73:98:69:44:6b:40:74:b0:e2:a2:0d:0a:81:2d:61:08:2f:5a:
         54:be:b5:12:0a:e9:95:46:bc:05:12:aa:35:f4:89:51:98:dd:
         77:e7:df:bb:09:da:a7:ea:36:0b:4a:2e:15:80:2f:3f:8e:8c:
         36:7f:97:81:b7:26:58:b3:79:ef:05:fc:33:b6:29:09:07:76:
         51:09:ca:1b:14:5b:1a:b9:b7:f1:b1:35:1e:4c:1b:41:c0:51:
         a3:df:30:fd:f4:75:7b:b9:9b:ac:4f:7c:23:7b:12:c6:a6:92:
         bd:0d:d2:92:2a:70:e2:4b:84:50:43:a0:4e:68:aa:b6:04:3c:
         b5:79:7c:d1:ac:82:5d:44:c5:2e:ce:7e:d7:af:37:af:ea:24:
         4a:40:7a:90:5c:40:0c:8d:05:9f:23:c2:08:a4:b6:dd:cd:da:
         18:d1:6e:e5:cf:31:61:e5:16:5d:a5:6e:b9:45:00:f6:c6:16:
         f1:0a:57:c1:2f:42:f7:40:2a:76:54:b5:46:7c:2f:1e:d1:30:
         dd:e7:d1:34:8d:d2:58:7d:27:54:d1:ac:09:d5:fc:a0:b7:5d:
         03:63:bd:9c:79:bb:6e:7e:7b:25:d2:42:56:64:f2:49:70:bb:
         5d:ec:8f:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90gBdAf0BdSMhfwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk
MmUwZmZlMWItOWMzZS00M2E0LTlmNmItMjBjMTUzZDE1NDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXfABKod/CeP8m1fQDFidh3/SlyqNFtwncb7
9YN4SBJwdXOnokL0J5+Yh7ClMnMlP7vIdDvaNAvJXC5RBpFzAs4oEYAUP/U92PbR
sNdoyPVkOl5b1PiVZtat47X3Y+zenGU5trRyn/upZeBAJn7Xumv/a9E0ug4BnF0z
3tFALbPiSH1xaxYdREtQjABRqozWfM1/iK25Az2mYa/bERnqc/5KSMMSgPq/cju0
HfMEqdPEZDvRvBynFrzDmDSHorh+siWvqkilh2/YW/4raursuzgHd3lF1iOnJVpa
XeR2QgGStCKHZARWGgVOaT6uoQbDpgcHOaIgraqUpv5xffz7dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNFxQ3VKEiibljvaTcXD8zaRJL6YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjM2OWVmMmMtMjE2ZC0z
Yzk1LWExZjQtZDQ1Y2E3MDUzNWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbKFQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKIVKQUnTDwCvUm2wlQeeXsH+XOYaURrQHSw4qINCoEtYQgvWlS+tRIK
6ZVGvAUSqjX0iVGY3Xfn37sJ2qfqNgtKLhWALz+OjDZ/l4G3Jlizee8F/DO2KQkH
dlEJyhsUWxq5t/GxNR5MG0HAUaPfMP30dXu5m6xPfCN7Esamkr0N0pIqcOJLhFBD
oE5oqrYEPLV5fNGsgl1ExS7OftevN6/qJEpAepBcQAyNBZ8jwgiktt3N2hjRbuXP
MWHlFl2lbrlFAPbGFvEKV8EvQvdAKnZUtUZ8Lx7RMN3n0TSN0lh9J1TRrAnV/KC3
XQNjvZx5u25+eyXSQlZk8klwu13sj2g=
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:13 2025 by rpki-client