Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/7159248f-4ebc-3298-a66b-855e619832d0.roa
File:                     7159248f-4ebc-3298-a66b-855e619832d0.roa (raw, json)
Hash identifier:          00jsht6Np1fGkm4Dpp/BXmOuHXA2AoXIl4FglUMCTyk=
Subject key identifier:   EE:24:BF:5E:A1:8D:A0:E7:E9:77:F4:F1:1A:25:70:54:30:3A:09:76
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584B609C9460345DA96A299E7000
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/7159248f-4ebc-3298-a66b-855e619832d0.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     213122
IP address blocks:        104.224.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:94:60:34:5d:a9:6a:29:9e:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=a13d17ae-12f5-4c3b-9535-b13c7b6cd1b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:7d:b8:ae:6b:53:cf:ea:66:31:3c:ed:7e:
                    68:3e:02:41:59:a3:08:27:af:82:75:5f:ab:fc:79:
                    9f:ee:91:55:88:2e:f8:d9:09:06:36:d5:54:ca:92:
                    22:b2:9c:b0:d9:4b:62:8e:95:95:0f:de:3c:9c:b0:
                    be:2c:bb:ea:aa:bd:70:20:f3:95:6c:d2:ae:8c:6a:
                    25:a9:39:2d:3c:b2:8e:80:57:7e:59:6d:37:68:c2:
                    53:99:3f:3f:f0:f1:ff:a8:de:db:8c:a4:a4:a0:ce:
                    da:89:99:f5:6d:2e:4f:7f:e4:c6:4a:98:2f:83:d1:
                    90:ba:79:84:e4:9a:ed:69:f9:4b:e7:80:db:25:e8:
                    9f:12:69:df:2a:8a:ee:91:cf:64:6e:00:8a:5e:41:
                    de:f1:f1:76:60:d9:80:f0:0d:bf:c8:1e:68:88:14:
                    21:dd:85:75:ac:f4:c8:5c:b2:cf:52:88:7a:fc:91:
                    53:1b:97:4d:73:2b:e8:2a:5d:17:cd:8d:e9:f8:2c:
                    09:b4:5b:8d:a5:7f:c8:9d:f9:ec:70:66:33:ef:48:
                    a0:fa:11:a9:52:23:2c:c4:db:df:42:e0:7f:8a:e2:
                    ce:63:1a:0b:0b:19:ff:c9:15:2f:6b:2a:58:f5:63:
                    eb:80:2e:4e:a3:69:1f:14:d8:c9:69:12:b0:84:59:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:24:BF:5E:A1:8D:A0:E7:E9:77:F4:F1:1A:25:70:54:30:3A:09:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/7159248f-4ebc-3298-a66b-855e619832d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e0:e2:69:2b:a6:59:fa:39:1f:d2:e4:83:9a:a8:3a:46:1d:
         17:de:53:18:67:91:02:9c:7a:be:c4:62:12:86:c5:06:8f:ef:
         41:e0:a9:6c:2a:f7:ec:38:c2:68:41:9c:95:65:5c:93:72:0a:
         c0:96:e3:2f:c0:3b:68:b2:83:87:2b:63:42:d7:09:f4:89:be:
         73:f9:dc:8a:b8:a1:23:73:4a:17:3d:c6:96:b7:f9:8d:82:58:
         3e:9d:1d:95:24:18:c0:9c:e9:73:47:66:d1:45:34:c4:ff:ad:
         08:d3:c1:87:f7:ea:f6:3e:57:a6:44:06:74:a6:46:05:d0:a0:
         1d:31:8b:0b:a5:34:c4:6e:94:b7:a1:7b:2c:28:2d:ac:e8:03:
         87:a4:18:a8:4c:07:ff:39:da:ab:b9:e7:a7:bb:09:af:a9:f8:
         f5:06:e0:52:b2:c5:02:7e:47:d3:55:e8:30:2d:49:9e:49:7a:
         81:03:52:2f:06:d1:0b:6d:d7:f4:00:a4:16:25:4f:68:c7:17:
         9a:e5:11:90:96:02:04:6e:23:61:f5:30:1e:77:2e:41:37:f0:
         25:fa:79:7f:ba:04:5f:e6:44:9d:15:87:82:12:ca:f3:c8:0c:
         79:d1:26:dd:95:39:74:17:6a:4f:d5:d6:7e:d0:64:03:10:fb:
         24:8f:15:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJRgNF2paimecAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0
YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk
YTEzZDE3YWUtMTJmNS00YzNiLTk1MzUtYjEzYzdiNmNkMWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlJ9uK5rU8/qZjE87X5oPgJBWaMIJ6+CdV+r
/Hmf7pFViC742QkGNtVUypIispyw2UtijpWVD948nLC+LLvqqr1wIPOVbNKujGol
qTktPLKOgFd+WW03aMJTmT8/8PH/qN7bjKSkoM7aiZn1bS5Pf+TGSpgvg9GQunmE
5JrtaflL54DbJeifEmnfKorukc9kbgCKXkHe8fF2YNmA8A2/yB5oiBQh3YV1rPTI
XLLPUoh6/JFTG5dNcyvoKl0XzY3p+CwJtFuNpX/InfnscGYz70ig+hGpUiMsxNvf
QuB/iuLOYxoLCxn/yRUvaypY9WPrgC5Oo2kfFNjJaRKwhFnb6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO4kv16hjaDn6Xf08RolcFQwOgl2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0
NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNzE1OTI0OGYtNGViYy0z
Mjk4LWE2NmItODU1ZTYxOTgzMmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0
NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4
NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3
YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/g4mkrpln6OR/S5IOaqDpGHRfeUxhnkQKcer7EYhKGxQaP70HgqWwq
9+w4wmhBnJVlXJNyCsCW4y/AO2iyg4crY0LXCfSJvnP53Iq4oSNzShc9xpa3+Y2C
WD6dHZUkGMCc6XNHZtFFNMT/rQjTwYf36vY+V6ZEBnSmRgXQoB0xiwulNMRulLeh
eywoLazoA4ekGKhMB/852qu556e7Ca+p+PUG4FKyxQJ+R9NV6DAtSZ5JeoEDUi8G
0Qtt1/QApBYlT2jHF5rlEZCWAgRuI2H1MB53LkE38CX6eX+6BF/mRJ0Vh4ISyvPI
DHnRJt2VOXQXak/V1n7QZAMQ+ySPFUo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:33:25 2025 by rpki-client