Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ce4727d-bf95-33c1-b85d-fc4f9b438af3.roa
File:                     1ce4727d-bf95-33c1-b85d-fc4f9b438af3.roa (raw, json)
Hash identifier:          N+V26+KqoqhK0QRablkRiPGQYa/CdXNYv6DCLrqF3Os=
Subject key identifier:   C8:A7:F0:C8:03:27:86:FF:4B:84:0C:46:5B:8F:C7:D0:1D:D1:67:3E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5ABA0F62A1F07C779C3DE00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ce4727d-bf95-33c1-b85d-fc4f9b438af3.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        108.162.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:a0:f6:2a:1f:07:c7:79:c3:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=d67680c8-92c6-4320-a9ea-9fd3b8732abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8b:5b:f6:7d:8e:d1:85:7a:c7:4a:3a:59:73:
                    e4:dd:c3:51:51:da:8a:14:bc:3a:1e:e0:2d:82:ae:
                    1a:b5:e1:a0:ff:c3:9c:ef:50:63:ed:35:e6:1a:c8:
                    40:b3:27:57:50:a6:5b:40:1d:6e:42:79:f7:ae:e8:
                    61:fc:7f:a4:96:ed:24:21:a8:c8:ec:f0:c9:ca:2e:
                    b0:6d:7b:f4:49:37:e8:b0:6b:ee:5a:78:74:3c:f6:
                    0d:b4:41:0b:6f:0f:a4:ff:bc:ba:bf:a0:5c:35:bd:
                    b0:57:eb:9c:95:98:d8:63:7c:31:2a:05:f2:6a:59:
                    3e:fc:05:a5:3e:d1:ff:1e:30:d7:c0:01:8d:c4:4b:
                    cc:9f:b6:a9:4b:3e:b3:6e:10:43:35:57:2d:4b:e3:
                    3c:eb:02:cc:cc:ee:53:07:ba:dc:47:1d:67:2e:2d:
                    b3:c5:21:1c:60:5c:17:4f:c7:63:eb:14:4c:ee:a1:
                    19:3d:0a:44:cd:d0:88:ee:67:d3:04:ac:2b:5a:87:
                    d0:3d:4a:b6:c2:a9:47:68:e0:27:52:cf:aa:2d:e4:
                    eb:23:14:d2:a8:58:c1:68:39:61:f6:bc:54:10:68:
                    b5:c8:f4:4f:b4:bf:16:9c:ee:a6:eb:a3:40:33:e0:
                    9e:bf:a4:d0:a5:bc:64:92:c7:48:8f:b9:36:2f:d0:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A7:F0:C8:03:27:86:FF:4B:84:0C:46:5B:8F:C7:D0:1D:D1:67:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ce4727d-bf95-33c1-b85d-fc4f9b438af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:25:78:46:c4:c3:75:96:b2:25:97:bd:2f:af:3f:2a:4b:92:
         bc:96:b9:d4:df:0c:be:14:8b:bd:1b:95:90:9b:32:e1:3a:d5:
         67:3a:21:ec:8b:f7:c7:bd:89:02:ac:24:85:fb:09:26:1f:99:
         dc:8a:a0:99:4c:a4:4b:16:19:28:e6:bd:14:85:f8:46:44:f4:
         a4:4c:21:3e:b6:fc:2c:0d:e6:37:86:d9:2e:97:1e:1d:f2:6a:
         7f:e9:52:a7:f6:f0:a9:ef:14:c0:cc:0e:d2:41:1b:5c:f7:c3:
         40:f0:e7:82:db:a1:84:47:ba:e0:4b:54:69:9f:70:ca:d1:1f:
         ad:25:bc:c9:a8:00:8f:79:d1:fb:ed:61:08:67:78:33:9c:18:
         f5:70:07:c5:c5:46:a6:01:88:1e:e4:10:e8:97:a3:aa:a8:23:
         cf:f5:f9:67:c6:eb:98:d4:79:64:15:2f:27:60:72:c8:ab:a1:
         ad:c2:8c:13:b0:21:01:0e:a2:57:64:89:9f:36:98:12:a3:ae:
         6b:18:de:ed:b3:41:e8:18:00:9c:8f:9f:a9:df:51:83:23:cb:
         b1:83:30:09:91:cc:00:64:6d:8a:b2:58:81:58:2f:ca:62:3e:
         47:77:7b:82:24:0d:4f:29:39:17:5b:c4:61:de:4d:9d:20:37:
         d1:6d:b1:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6D2Kh8Hx3nD3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk
ZDY3NjgwYzgtOTJjNi00MzIwLWE5ZWEtOWZkM2I4NzMyYWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmItb9n2O0YV6x0o6WXPk3cNRUdqKFLw6HuAt
gq4ateGg/8Oc71Bj7TXmGshAsydXUKZbQB1uQnn3ruhh/H+klu0kIajI7PDJyi6w
bXv0STfosGvuWnh0PPYNtEELbw+k/7y6v6BcNb2wV+uclZjYY3wxKgXyalk+/AWl
PtH/HjDXwAGNxEvMn7apSz6zbhBDNVctS+M86wLMzO5TB7rcRx1nLi2zxSEcYFwX
T8dj6xRM7qEZPQpEzdCI7mfTBKwrWofQPUq2wqlHaOAnUs+qLeTrIxTSqFjBaDlh
9rxUEGi1yPRPtL8WnO6m66NAM+Cev6TQpbxkksdIj7k2L9B+wQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMin8MgDJ4b/S4QMRluPx9Ad0Wc+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWNlNDcyN2QtYmY5NS0z
M2MxLWI4NWQtZmM0ZjliNDM4YWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALEleEbEw3WWsiWXvS+vPypLkryWudTfDL4Ui70blZCbMuE61Wc6IeyL
98e9iQKsJIX7CSYfmdyKoJlMpEsWGSjmvRSF+EZE9KRMIT62/CwN5jeG2S6XHh3y
an/pUqf28KnvFMDMDtJBG1z3w0Dw54LboYRHuuBLVGmfcMrRH60lvMmoAI950fvt
YQhneDOcGPVwB8XFRqYBiB7kEOiXo6qoI8/1+WfG65jUeWQVLydgcsiroa3CjBOw
IQEOoldkiZ82mBKjrmsY3u2zQegYAJyPn6nfUYMjy7GDMAmRzABkbYqyWIFYL8pi
Pkd3e4IkDU8pORdbxGHeTZ0gN9FtsWM=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:11:48 2025 by rpki-client