Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/a0691ed5-3b7c-3678-901e-743bb1ef8846.roa
File:                     a0691ed5-3b7c-3678-901e-743bb1ef8846.roa (raw, json)
Hash identifier:          a/5hwzfMwVwim5Tly8MSdEoZUi3Ltq7Jc2UhzwVWslY=
Subject key identifier:   D4:3A:37:70:9F:F1:6D:CF:3A:7C:52:7B:93:15:DA:ED:03:AC:3A:6E
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F4328584B8EACE4B034126B67E5BEE580
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/a0691ed5-3b7c-3678-901e-743bb1ef8846.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     5511
IP address blocks:        104.193.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:e4:b0:34:12:6b:67:e5:be:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=89da0468-11f5-4f5e-9bfe-6614015a4f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:67:5a:fc:37:a5:33:b6:66:6f:0b:bd:e4:f1:
                    71:6c:97:be:cc:17:ca:72:b6:99:05:cf:d2:fb:d5:
                    cf:7e:06:e4:35:ae:18:3a:d7:c5:44:7c:11:4f:de:
                    93:bd:7e:3e:0e:f9:f9:2b:1e:be:47:50:82:db:41:
                    21:8b:9a:1f:fb:89:09:2e:6f:1a:96:d1:bc:c2:23:
                    48:ca:56:93:44:ff:6d:c3:a2:6b:1e:ac:b0:3c:61:
                    26:96:46:c5:1f:a2:53:97:56:80:f2:1f:2a:cc:77:
                    a6:31:a3:d4:db:51:bb:2c:96:06:88:d3:8f:b5:4f:
                    6b:60:a0:1b:4d:f5:d4:e5:f3:fa:54:5d:d4:2e:a7:
                    c1:82:12:26:1f:85:6e:a2:62:90:0a:5d:95:7c:09:
                    00:95:94:54:1c:1b:28:a8:46:a2:d1:84:af:d8:81:
                    7d:7c:f1:6b:fc:7b:85:f8:83:09:c1:73:93:0a:7c:
                    2b:5c:02:98:d0:6b:86:6c:33:6a:dd:d8:aa:1c:02:
                    77:d2:14:45:c1:1f:98:2a:b2:0d:8e:b3:20:2b:10:
                    a2:47:3b:07:6d:3b:c0:92:78:6f:ce:3a:37:ff:eb:
                    d4:ad:a6:e7:8e:a1:9d:a8:b3:29:00:e0:e6:80:2e:
                    ac:21:fa:a4:78:7c:6f:5b:01:86:f5:1c:26:68:15:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3A:37:70:9F:F1:6D:CF:3A:7C:52:7B:93:15:DA:ED:03:AC:3A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/a0691ed5-3b7c-3678-901e-743bb1ef8846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:53:a2:0c:07:42:58:1f:81:6f:79:78:f0:10:cc:85:4c:38:
         2d:12:fe:ee:1f:3e:a4:d4:71:e4:af:42:e9:a1:ff:22:32:03:
         24:8c:e0:c4:09:7f:fc:6b:69:22:4c:0e:b5:d1:07:2c:dd:4a:
         b6:a3:0b:85:52:0f:93:4e:fd:c5:38:23:54:4f:a3:57:f8:9b:
         b8:e5:37:3e:21:0e:e9:66:66:98:2c:35:6c:9a:dc:3d:27:b4:
         c9:30:2a:37:4a:2e:b1:01:71:e3:3e:78:76:9e:e8:8a:30:a9:
         0e:74:98:2f:40:89:97:39:a9:41:f5:4a:9c:6c:9b:fe:09:83:
         cc:0b:17:30:d5:ea:48:35:c5:89:ec:14:2b:da:59:3a:4b:e9:
         11:f7:6b:03:e5:4b:7f:22:aa:7f:6f:3a:6b:37:d2:a2:af:42:
         84:5a:86:65:49:58:e5:fa:be:d2:87:09:24:c5:fa:83:75:86:
         f9:78:ac:7c:f7:6c:cb:5f:da:9f:c7:4e:96:a7:7c:e4:bb:ef:
         36:dc:5a:8e:34:f1:f6:ed:3a:b8:16:6f:40:11:bc:55:1e:bd:
         aa:66:17:5b:5b:ea:41:c8:c2:05:09:80:69:8f:d1:a0:71:60:
         b9:a0:e0:9b:12:14:31:16:4c:76:56:67:26:6d:20:7b:95:68:
         c1:a8:30:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOSwNBJrZ+W+5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEy
NzExMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
ODlkYTA0NjgtMTFmNS00ZjVlLTliZmUtNjYxNDAxNWE0ZjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2da/DelM7Zmbwu95PFxbJe+zBfKcraZBc/S
+9XPfgbkNa4YOtfFRHwRT96TvX4+Dvn5Kx6+R1CC20Ehi5of+4kJLm8altG8wiNI
ylaTRP9tw6JrHqywPGEmlkbFH6JTl1aA8h8qzHemMaPU21G7LJYGiNOPtU9rYKAb
TfXU5fP6VF3ULqfBghImH4VuomKQCl2VfAkAlZRUHBsoqEai0YSv2IF9fPFr/HuF
+IMJwXOTCnwrXAKY0GuGbDNq3diqHAJ30hRFwR+YKrINjrMgKxCiRzsHbTvAknhv
zjo3/+vUrabnjqGdqLMpAODmgC6sIfqkeHxvWwGG9RwmaBURdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQ6N3Cf8W3POnxSe5MV2u0DrDpuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMzll
MmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvYTA2OTFlZDUtM2I3Yy0z
Njc4LTkwMWUtNzQzYmIxZWY4ODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjM5ZTJhNzItOTM0Ny00MzE2LTli
ZTctMjBiZGY2NTEyNzExLzIzOWUyYTcyLTkzNDctNDMxNi05YmU3LTIwYmRmNjUx
MjcxMS5jcmwwHwYDVR0jBBgwFoAUxwBadkJgEZ/tem9/Z5RiZOwta1QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJk
ZjY1MTI3MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMHWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERTogwHQlgfgW95ePAQzIVMOC0S/u4fPqTUceSvQumh/yIyAySM4MQJ
f/xraSJMDrXRByzdSrajC4VSD5NO/cU4I1RPo1f4m7jlNz4hDulmZpgsNWya3D0n
tMkwKjdKLrEBceM+eHae6IowqQ50mC9AiZc5qUH1Spxsm/4Jg8wLFzDV6kg1xYns
FCvaWTpL6RH3awPlS38iqn9vOms30qKvQoRahmVJWOX6vtKHCSTF+oN1hvl4rHz3
bMtf2p/HTpanfOS77zbcWo408fbtOrgWb0ARvFUevapmF1tb6kHIwgUJgGmP0aBx
YLmg4JsSFDEWTHZWZyZtIHuVaMGoMK0=
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:21 2025 by rpki-client