Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/899d01bf-729a-3d98-bb6d-bfe66e020c97.roa
File:                     899d01bf-729a-3d98-bb6d-bfe66e020c97.roa (raw, json)
Hash identifier:          jX8o4rP3eJ2rkFxTzASzdGBseNCpWz7YDNrjs4ijxo8=
Subject key identifier:   7B:FB:82:CA:54:5E:C6:FB:13:06:24:1F:0A:EB:C5:7B:B8:84:35:12
Certificate issuer:       /CN=e102a5ad-786a-444b-bd0b-6bd116f20466
Certificate serial:       010D0C9F4328584B80B75B4CD77BE84453512700
Authority key identifier: 98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/899d01bf-729a-3d98-bb6d-bfe66e020c97.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     393290
IP address blocks:        162.223.108.0/22 maxlen: 24
                          2604:9d40::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:5b:4c:d7:7b:e8:44:53:51:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e102a5ad-786a-444b-bd0b-6bd116f20466
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=e79e0c43-93d7-4be8-82db-fe5b5ea82f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:bc:2f:b2:85:69:90:57:95:95:b6:5f:1a:
                    7b:76:cd:9d:ea:49:c5:fd:67:c7:3f:cc:48:20:77:
                    4e:0f:b5:46:a9:8c:57:c2:7e:ed:0b:36:4e:d5:c4:
                    3a:89:7c:fb:a3:6e:ac:ae:a9:8d:df:b2:34:d3:a8:
                    59:b0:25:32:bf:66:09:b4:72:13:d4:42:bf:e4:4e:
                    36:28:73:f4:61:64:fd:75:e7:1a:86:20:bb:7a:a1:
                    bb:41:70:c2:53:2b:88:3c:00:23:fc:37:db:09:18:
                    7d:64:68:7c:44:72:46:6e:17:ad:28:c7:f2:e2:f8:
                    f5:ce:bc:cf:97:ac:5f:d3:93:66:12:a9:f1:54:dd:
                    9b:86:a7:00:a1:a0:56:3c:f7:37:41:7c:7d:4f:71:
                    26:82:76:f0:17:f8:2c:e8:c1:10:9f:60:b1:3a:35:
                    71:33:02:de:4b:c2:ec:53:d8:35:e4:cc:94:e4:7c:
                    97:b7:36:38:66:95:52:84:36:e7:25:6b:dd:b6:aa:
                    00:7d:d4:0a:04:5f:19:45:0d:64:f2:4c:c7:62:21:
                    07:ea:7b:1a:a0:82:ec:05:13:66:4d:eb:47:e8:0c:
                    6d:0b:d3:02:61:89:6c:52:6c:fc:87:80:60:50:18:
                    6f:c0:11:de:00:00:47:2f:f8:f5:33:3f:2a:c8:62:
                    37:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FB:82:CA:54:5E:C6:FB:13:06:24:1F:0A:EB:C5:7B:B8:84:35:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/899d01bf-729a-3d98-bb6d-bfe66e020c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.crl

            X509v3 Authority Key Identifier:
                keyid:98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.108.0/22
                IPv6:
                  2604:9d40::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a5:b2:31:5a:c9:8e:61:f4:e6:70:ba:59:74:72:3c:92:fa:
         87:0d:b5:cd:85:1c:c5:55:61:b0:4f:18:fd:12:dc:36:cb:8d:
         26:ba:c1:6b:c6:a2:13:0b:24:4f:2f:d5:14:46:eb:38:c7:42:
         b7:c3:a0:5c:13:73:35:c9:92:e7:b6:87:60:87:9b:12:65:d7:
         18:31:71:18:8b:87:9f:f7:0e:a7:7c:33:ba:7a:ef:9a:e1:d7:
         19:7a:01:34:1e:6c:3c:14:9a:9a:7a:d8:47:45:f8:8f:f1:3f:
         92:23:b5:38:e9:df:61:6d:06:8e:2f:18:86:26:c0:73:4d:e2:
         3a:12:9a:e2:1a:9e:15:2d:cc:70:78:af:34:91:a5:a1:b6:62:
         84:c5:eb:6b:42:c3:3f:79:9a:41:80:ac:0b:b3:2a:ef:35:0c:
         00:1b:ae:3f:8e:0d:2a:74:68:da:ec:13:3b:f1:96:c3:64:d8:
         00:48:9e:6b:d6:97:ca:cf:23:87:cd:08:3c:7a:e7:36:fb:8b:
         86:76:6a:31:df:72:b5:c5:1a:71:a0:2a:39:4c:ab:6c:db:48:
         b0:5b:e3:e4:18:ab:05:00:26:25:f3:c6:26:14:70:0c:14:63:
         47:25:a7:e2:c1:ae:00:0e:95:bf:fb:22:59:40:12:9d:02:fd:
         52:cb:fa:6b
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEuAt1tM13voRFNRJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTEwMmE1YWQtNzg2YS00NDRiLWJkMGItNmJkMTE2ZjIw
NDY2MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk
ZTc5ZTBjNDMtOTNkNy00YmU4LTgyZGItZmU1YjVlYTgyZjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2O8L7KFaZBXlZW2Xxp7ds2d6knF/WfHP8xI
IHdOD7VGqYxXwn7tCzZO1cQ6iXz7o26srqmN37I006hZsCUyv2YJtHIT1EK/5E42
KHP0YWT9decahiC7eqG7QXDCUyuIPAAj/DfbCRh9ZGh8RHJGbhetKMfy4vj1zrzP
l6xf05NmEqnxVN2bhqcAoaBWPPc3QXx9T3EmgnbwF/gs6MEQn2CxOjVxMwLeS8Ls
U9g15MyU5HyXtzY4ZpVShDbnJWvdtqoAfdQKBF8ZRQ1k8kzHYiEH6nsaoILsBRNm
TetH6AxtC9MCYYlsUmz8h4BgUBhvwBHeAABHL/j1Mz8qyGI3GQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFHv7gspUXsb7EwYkHwrrxXu4hDUSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTAy
YTVhZC03ODZhLTQ0NGItYmQwYi02YmQxMTZmMjA0NjYvODk5ZDAxYmYtNzI5YS0z
ZDk4LWJiNmQtYmZlNjZlMDIwYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTEwMmE1YWQtNzg2YS00NDRiLWJk
MGItNmJkMTE2ZjIwNDY2L2UxMDJhNWFkLTc4NmEtNDQ0Yi1iZDBiLTZiZDExNmYy
MDQ2Ni5jcmwwHwYDVR0jBBgwFoAUmOuumIaU+Z26tSR7THaZ3Uuit+8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTAyYTVhZC03ODZhLTQ0NGItYmQwYi02YmQx
MTZmMjA0NjYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCot9sMA4E
AgACMAgDBgEmBJ1AADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTpbIxWsmOYfTmcLpZdHI8kvqHDbXNhRzF
VWGwTxj9Etw2y40musFrxqITCyRPL9UURus4x0K3w6BcE3M1yZLntodgh5sSZdcY
MXEYi4ef9w6nfDO6eu+a4dcZegE0Hmw8FJqaethHRfiP8T+SI7U46d9hbQaOLxiG
JsBzTeI6EpriGp4VLcxweK80kaWhtmKExetrQsM/eZpBgKwLsyrvNQwAG64/jg0q
dGja7BM78ZbDZNgASJ5r1pfKzyOHzQg8euc2+4uGdmox33K1xRpxoCo5TKts20iw
W+PkGKsFACYl88YmFHAMFGNHJafiwa4ADpW/+yJZQBKdAv1Sy/pr
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:25:56 2025 by rpki-client