Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8338b3cf-c58c-37a1-a2b4-244f96c3e59a.roa
File:                     8338b3cf-c58c-37a1-a2b4-244f96c3e59a.roa (raw, json)
Hash identifier:          c1j5dWonvp/zlaQPCsjQ/1NIUo67aLDFpJ58uEFGqAw=
Subject key identifier:   CE:CC:4F:D1:12:CE:B4:BA:D9:A1:13:C1:6D:DC:B7:D2:13:6E:A7:72
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B5F376017975BDB2A7316B900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8338b3cf-c58c-37a1-a2b4-244f96c3e59a.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     15169
IP address blocks:        104.196.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:60:17:97:5b:db:2a:73:16:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=bfb4aba0-fad6-427e-80b7-e06eec604d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:1d:37:d6:df:52:9b:80:0a:81:56:49:a9:
                    4b:c7:de:d4:ff:11:89:26:33:f6:27:3e:20:ff:6c:
                    2a:0f:8c:14:88:cd:cd:5c:8f:ba:98:00:ab:21:9b:
                    bc:88:53:bf:46:99:f8:cd:85:9c:7f:58:76:4f:7e:
                    05:94:73:4e:4a:36:dd:fd:be:a5:0f:62:4d:b6:f3:
                    b1:8d:05:42:4d:76:72:84:39:23:67:40:43:65:6f:
                    a1:a7:bd:cd:27:0f:72:b6:ab:04:4d:05:da:7b:16:
                    3d:ac:cd:a5:26:df:ba:6b:6c:6f:5f:5d:9f:de:36:
                    fd:6e:8c:8f:f0:67:24:24:f7:ad:94:0c:45:16:5e:
                    e1:22:db:c9:97:67:05:ef:71:99:0d:ab:bf:1b:4c:
                    3b:f2:52:eb:d7:ed:09:39:38:cd:8d:c3:df:5b:be:
                    ce:36:81:67:50:b6:ee:46:76:64:bb:b8:1d:f1:74:
                    5a:03:fa:41:f5:13:c9:df:86:78:6c:c4:8e:32:0f:
                    18:ea:8c:7d:a8:35:74:a2:66:34:b3:5b:23:2d:ed:
                    5c:7e:50:86:19:bc:ae:58:cf:56:16:09:ba:7f:99:
                    b9:03:2d:15:49:29:ae:dd:5a:93:1f:d2:3e:cd:3b:
                    93:33:7e:a5:a3:2b:e2:00:7c:fd:c4:85:60:99:f7:
                    f7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CC:4F:D1:12:CE:B4:BA:D9:A1:13:C1:6D:DC:B7:D2:13:6E:A7:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8338b3cf-c58c-37a1-a2b4-244f96c3e59a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.196.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f9:39:d9:6c:f1:19:94:c9:fa:d1:23:10:40:48:1d:9c:f5:
         f7:b0:13:ad:f5:ad:7b:ae:29:87:ec:2a:89:ce:9f:e4:94:27:
         d1:29:b2:ba:52:bd:3f:27:34:bf:9d:bd:68:1f:e2:d1:4f:7f:
         7f:c9:58:19:c3:91:70:c5:1b:1c:4a:98:f3:9e:0b:52:f0:cc:
         20:32:01:be:dd:eb:63:74:ba:1d:48:83:14:e6:5e:10:8a:bc:
         99:83:dc:44:19:62:49:27:01:50:47:a0:49:9e:af:58:93:47:
         dd:90:e4:86:8e:14:8d:ba:72:81:6c:32:13:e4:00:00:e7:06:
         2b:d3:68:77:e9:11:38:25:1e:31:89:9b:c6:67:ec:00:eb:65:
         6b:1c:73:01:0b:da:4b:7f:6f:ce:cc:e3:9a:e2:b6:0b:ea:ff:
         0b:27:74:b7:3c:bf:f7:b0:8a:01:87:aa:47:f1:21:2f:bf:c5:
         cd:bf:3a:6c:fc:6e:43:ae:f1:42:39:dc:8d:ef:2a:63:73:8d:
         7e:45:fc:de:c2:13:39:3d:8e:e8:96:d8:1e:52:1d:d5:8b:65:
         de:2c:b3:15:26:d0:01:67:73:ab:a3:58:7e:13:81:ac:27:9a:
         5f:26:f1:70:88:54:50:34:8b:b9:62:57:a4:55:a5:8e:38:c0:
         47:e6:1b:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2AXl1vbKnMWuQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk
YmZiNGFiYTAtZmFkNi00MjdlLTgwYjctZTA2ZWVjNjA0ZDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwkdN9bfUpuACoFWSalLx97U/xGJJjP2Jz4g
/2wqD4wUiM3NXI+6mACrIZu8iFO/Rpn4zYWcf1h2T34FlHNOSjbd/b6lD2JNtvOx
jQVCTXZyhDkjZ0BDZW+hp73NJw9ytqsETQXaexY9rM2lJt+6a2xvX12f3jb9boyP
8GckJPetlAxFFl7hItvJl2cF73GZDau/G0w78lLr1+0JOTjNjcPfW77ONoFnULbu
RnZku7gd8XRaA/pB9RPJ34Z4bMSOMg8Y6ox9qDV0omY0s1sjLe1cflCGGbyuWM9W
Fgm6f5m5Ay0VSSmu3VqTH9I+zTuTM36loyviAHz9xIVgmff37wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM7MT9ESzrS62aETwW3ct9ITbqdyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODMzOGIzY2YtYzU4Yy0z
N2ExLWEyYjQtMjQ0Zjk2YzNlNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMQgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACH5Odls8RmUyfrRIxBASB2c9fewE631rXuuKYfsKonOn+SUJ9EpsrpS
vT8nNL+dvWgf4tFPf3/JWBnDkXDFGxxKmPOeC1LwzCAyAb7d62N0uh1IgxTmXhCK
vJmD3EQZYkknAVBHoEmer1iTR92Q5IaOFI26coFsMhPkAADnBivTaHfpETglHjGJ
m8Zn7ADrZWsccwEL2kt/b87M45ritgvq/wsndLc8v/ewigGHqkfxIS+/xc2/Omz8
bkOu8UI53I3vKmNzjX5F/N7CEzk9juiW2B5SHdWLZd4ssxUm0AFnc6ujWH4Tgawn
ml8m8XCIVFA0i7liV6RVpY44wEfmG04=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:44:39 2025 by rpki-client