Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/0831fca7-c103-3db5-927b-de05e0f518ba.roa
File:                     0831fca7-c103-3db5-927b-de05e0f518ba.roa (raw, json)
Hash identifier:          jsm5xPlmJuMoDIb+RVU5VacBj5tQmnEAuEFAzU8Ktys=
Subject key identifier:   AC:41:03:3F:77:EA:52:D0:4A:CE:89:61:D5:FE:85:44:9B:50:93:3B
Certificate issuer:       /CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Certificate serial:       010D0C9F4328584B6D35A8B50418101CBC3A0580
Authority key identifier: 6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/0831fca7-c103-3db5-927b-de05e0f518ba.roa
Signing time:             Mon 06 Oct 2025 01:18:56 +0000
ROA not before:           Mon 06 Oct 2025 01:18:56 +0000
ROA not after:            Sun 04 Jan 2026 02:18:56 +0000
asID:                     19318
IP address blocks:        104.251.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:35:a8:b5:04:18:10:1c:bc:3a:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
        Validity
            Not Before: Oct  6 01:18:56 2025 GMT
            Not After : Jan  4 02:18:56 2026 GMT
        Subject: CN=27828795-ed8a-4752-87a7-343c22a9afb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:52:42:fa:18:05:65:9a:d7:b2:03:d9:16:
                    30:bc:b3:8e:37:b9:82:40:0a:9c:34:be:9d:6a:49:
                    d2:92:fe:ff:e0:5d:d1:a1:fe:37:3c:48:e4:10:73:
                    85:a5:52:c6:da:f9:cc:aa:6f:5d:f0:e5:2e:e4:24:
                    dd:fb:7e:1c:69:5a:03:7b:3a:5a:8d:93:d0:dd:7f:
                    0f:cc:48:76:43:c4:7f:4e:ff:c3:d5:aa:53:5c:d2:
                    9d:6f:83:dd:15:4b:f8:b0:c3:8e:db:ac:80:d1:4c:
                    e9:60:5e:7d:92:15:c9:0c:28:74:aa:06:8b:92:d6:
                    22:2f:1a:33:f7:7f:a2:bf:6a:4f:84:42:94:d7:cf:
                    23:b1:27:b6:25:ba:99:d1:ad:e5:ff:ce:6d:d2:4d:
                    36:0a:bf:cf:94:56:4d:c6:2d:79:cb:1d:f4:86:09:
                    ae:d4:ac:30:eb:e0:b9:c4:01:32:6d:2f:b0:57:7d:
                    b9:c2:d0:da:61:90:b8:32:c1:2b:c2:b2:90:7a:a7:
                    10:cf:05:36:78:24:0a:0a:6f:9a:62:8a:43:d5:b2:
                    5a:64:9d:7b:d8:8e:a8:c1:b0:f4:9d:fe:b9:a4:12:
                    46:6c:2a:ab:66:ab:d7:9e:33:43:3d:6a:a0:24:6b:
                    81:eb:05:e7:03:6a:d4:a7:fe:3d:d2:3e:ed:3d:94:
                    ae:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:41:03:3F:77:EA:52:D0:4A:CE:89:61:D5:FE:85:44:9B:50:93:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/0831fca7-c103-3db5-927b-de05e0f518ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl

            X509v3 Authority Key Identifier:
                keyid:6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ef:18:95:84:df:f3:41:c1:74:19:c4:05:cd:a9:62:fb:2a:
         02:ba:f5:55:b8:b4:2f:7d:d9:7a:be:40:ee:0f:c4:9d:61:ac:
         69:7f:09:2a:cb:da:0f:13:15:aa:29:78:23:7f:39:11:3b:6f:
         ea:c9:9d:28:dd:51:1b:b9:f2:9d:2d:5d:4c:e8:6d:55:1a:50:
         b0:72:bd:c9:8f:ed:c0:ef:cb:9e:37:6e:a6:9f:9f:7f:54:06:
         0f:31:29:c9:83:1d:30:eb:93:19:9d:f8:a1:01:95:79:d1:78:
         c1:c3:c6:87:3b:fa:92:6d:4c:21:75:43:c4:94:4e:8c:9b:e1:
         8a:d4:ee:6c:f7:ed:73:69:88:e9:04:7d:2f:6f:cb:ac:8e:02:
         aa:7c:d7:4c:f9:27:e6:1d:8b:69:df:59:9d:14:0d:c0:77:82:
         8b:24:b8:bb:bb:7b:71:16:c5:3f:11:48:02:d8:d9:38:d6:54:
         47:45:87:e8:6f:09:c2:0c:04:0b:18:14:ba:e4:99:ce:1d:e8:
         d7:f9:48:26:f1:22:2a:07:b4:f8:51:e0:25:bc:99:9a:32:03:
         86:b4:1f:0c:20:37:1a:19:12:2a:f9:f1:4c:a0:6d:23:54:fe:
         d5:2c:02:b2:29:79:31:e9:fe:49:d7:82:20:a3:fd:69:c4:99:
         73:3a:5c:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttNai1BBgQHLw6BYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTg5YWI5ZDUtZWFhMi00YTcyLTg3MjEtNzhhM2ZlMTEw
NjgwMB4XDTI1MTAwNjAxMTg1NloXDTI2MDEwNDAyMTg1NlowLzEtMCsGA1UEAxMk
Mjc4Mjg3OTUtZWQ4YS00NzUyLTg3YTctMzQzYzIyYTlhZmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwhSQvoYBWWa17ID2RYwvLOON7mCQAqcNL6d
aknSkv7/4F3Rof43PEjkEHOFpVLG2vnMqm9d8OUu5CTd+34caVoDezpajZPQ3X8P
zEh2Q8R/Tv/D1apTXNKdb4PdFUv4sMOO26yA0UzpYF59khXJDCh0qgaLktYiLxoz
93+iv2pPhEKU188jsSe2JbqZ0a3l/85t0k02Cr/PlFZNxi15yx30hgmu1Kww6+C5
xAEybS+wV325wtDaYZC4MsErwrKQeqcQzwU2eCQKCm+aYopD1bJaZJ172I6owbD0
nf65pBJGbCqrZqvXnjNDPWqgJGuB6wXnA2rUp/490j7tPZSu+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKxBAz936lLQSs6JYdX+hUSbUJM7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ODlh
YjlkNS1lYWEyLTRhNzItODcyMS03OGEzZmUxMTA2ODAvMDgzMWZjYTctYzEwMy0z
ZGI1LTkyN2ItZGUwNWUwZjUxOGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTg5YWI5ZDUtZWFhMi00YTcyLTg3
MjEtNzhhM2ZlMTEwNjgwLzU4OWFiOWQ1LWVhYTItNGE3Mi04NzIxLTc4YTNmZTEx
MDY4MC5jcmwwHwYDVR0jBBgwFoAUbyZ8dlCkFkcmkzn3ZwVPgDkTo/AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ODlhYjlkNS1lYWEyLTRhNzItODcyMS03OGEz
ZmUxMTA2ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPuwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE7vGJWE3/NBwXQZxAXNqWL7KgK69VW4tC992Xq+QO4PxJ1hrGl/CSrL
2g8TFaopeCN/ORE7b+rJnSjdURu58p0tXUzobVUaULByvcmP7cDvy543bqafn39U
Bg8xKcmDHTDrkxmd+KEBlXnReMHDxoc7+pJtTCF1Q8SUToyb4YrU7mz37XNpiOkE
fS9vy6yOAqp810z5J+Ydi2nfWZ0UDcB3goskuLu7e3EWxT8RSALY2TjWVEdFh+hv
CcIMBAsYFLrkmc4d6Nf5SCbxIioHtPhR4CW8mZoyA4a0HwwgNxoZEir58UygbSNU
/tUsArIpeTHp/knXgiCj/WnEmXM6XLQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:36 2025 by rpki-client