Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/ecbf30c8-7329-3304-805e-346857b377f6.roa
File:                     ecbf30c8-7329-3304-805e-346857b377f6.roa (raw, json)
Hash identifier:          aUuHYcQeZgUPnKXjMgubTzvc3K0i60octOlq/wqzCog=
Subject key identifier:   AD:6C:69:6D:21:59:56:85:F6:5B:15:A1:BA:46:48:72:64:93:14:49
Certificate issuer:       /CN=12e1088c-ebe4-47cb-a051-5344b3551a83
Certificate serial:       010D0C9F4328584ACCA65130AC8748CA099594B0
Authority key identifier: 8A:03:C2:F9:CF:26:95:00:81:79:BC:0B:85:CC:44:9F:BB:C5:B5:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/ecbf30c8-7329-3304-805e-346857b377f6.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     13621
IP address blocks:        104.128.78.0/23 maxlen: 24
                          198.190.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/12e1088c-ebe4-47cb-a051-5344b3551a83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/12e1088c-ebe4-47cb-a051-5344b3551a83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:51:30:ac:87:48:ca:09:95:94:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e1088c-ebe4-47cb-a051-5344b3551a83
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=65d5e3e3-ec11-41b0-9961-a012996220b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:ce:53:fd:be:75:26:b2:d1:f3:fd:e6:67:
                    ec:7c:bb:c1:0f:24:37:47:20:f0:fa:1b:bd:47:4b:
                    c2:f1:e7:a0:b9:66:7f:3c:4e:70:6a:0e:1a:5b:29:
                    af:c1:51:bb:4d:cd:c7:a2:b4:a8:73:27:c1:b0:ce:
                    82:a1:49:24:ae:5c:c1:7f:dd:6d:5d:82:22:9c:13:
                    64:6d:b4:fb:fa:f7:56:11:34:cf:02:d2:c4:f1:4b:
                    74:41:07:66:c8:6c:78:39:a9:98:b9:db:b8:c0:55:
                    08:60:fa:8a:94:2c:04:82:a9:93:fa:67:cf:dd:e5:
                    9a:40:af:41:38:37:78:65:b0:ce:65:fd:21:52:00:
                    a5:b3:c6:69:ca:63:5e:be:e2:31:3c:7a:1c:84:94:
                    2e:b6:5b:d4:fd:a9:9f:4e:8d:a3:e5:43:cd:49:28:
                    1a:77:4e:ea:5d:6f:f1:f5:58:84:50:67:e0:23:81:
                    40:47:f4:ab:c1:fe:ea:ab:16:15:92:17:39:b6:5e:
                    63:54:d6:09:02:ea:ea:67:b3:0a:5c:95:7a:26:27:
                    b0:49:8b:c7:7c:3f:3a:3e:c3:03:87:78:be:b7:f5:
                    f9:2b:cd:0a:9c:32:dc:4a:ce:5e:ea:d9:bc:08:c1:
                    89:e5:fe:aa:18:bc:e2:25:f1:cf:26:51:e3:19:a2:
                    3a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6C:69:6D:21:59:56:85:F6:5B:15:A1:BA:46:48:72:64:93:14:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/ecbf30c8-7329-3304-805e-346857b377f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/12e1088c-ebe4-47cb-a051-5344b3551a83.crl

            X509v3 Authority Key Identifier:
                keyid:8A:03:C2:F9:CF:26:95:00:81:79:BC:0B:85:CC:44:9F:BB:C5:B5:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.78.0/23
                  198.190.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c6:be:fd:4a:91:a7:a6:d6:fe:66:89:c7:a4:25:14:b6:0e:
         71:17:49:1d:91:fc:28:4c:9d:1e:f0:44:ec:60:de:39:aa:9d:
         d6:60:58:4b:db:26:4a:ab:6c:eb:8a:6f:94:e8:40:12:e4:9f:
         7b:8d:c5:f3:02:0e:8a:5b:14:74:33:e5:d1:73:61:7f:b1:49:
         af:2a:c9:c1:60:e1:93:57:74:ad:95:b3:45:86:ba:24:13:dc:
         c4:0c:51:58:62:05:81:c7:92:e6:fc:5c:f4:1f:87:af:92:32:
         a1:96:dd:3f:65:54:8e:03:16:ab:e5:cd:5c:40:d0:eb:17:87:
         1d:f9:a3:5b:97:ac:14:a2:2e:17:2e:e1:29:cf:15:62:b3:41:
         dc:57:6e:34:e6:58:5c:69:af:e3:9c:ec:15:3e:9d:16:42:81:
         5a:87:59:91:75:5f:f4:9f:79:9e:0d:40:7b:2d:4f:74:92:59:
         2a:b3:2a:8f:32:17:07:29:74:cf:c6:da:f4:2e:da:43:cc:49:
         06:f0:cc:91:49:6a:78:14:b1:7a:80:b1:ba:50:8c:6c:69:7f:
         44:92:4c:50:c4:18:6a:f6:78:02:c9:64:7b:26:b7:be:c6:ab:
         d9:ad:70:47:77:f4:ae:4d:07:de:f2:ce:0a:8b:be:00:93:5b:
         f1:e0:c0:1a
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErMplEwrIdIygmVlLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTJlMTA4OGMtZWJlNC00N2NiLWEwNTEtNTM0NGIzNTUx
YTgzMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk
NjVkNWUzZTMtZWMxMS00MWIwLTk5NjEtYTAxMjk5NjIyMGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtezOU/2+dSay0fP95mfsfLvBDyQ3RyDw+hu9
R0vC8eeguWZ/PE5wag4aWymvwVG7Tc3HorSocyfBsM6CoUkkrlzBf91tXYIinBNk
bbT7+vdWETTPAtLE8Ut0QQdmyGx4OamYudu4wFUIYPqKlCwEgqmT+mfP3eWaQK9B
ODd4ZbDOZf0hUgCls8ZpymNevuIxPHochJQutlvU/amfTo2j5UPNSSgad07qXW/x
9ViEUGfgI4FAR/Srwf7qqxYVkhc5tl5jVNYJAurqZ7MKXJV6JiewSYvHfD86PsMD
h3i+t/X5K80KnDLcSs5e6tm8CMGJ5f6qGLziJfHPJlHjGaI63wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFK1saW0hWVaF9lsVobpGSHJkkxRJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMmUx
MDg4Yy1lYmU0LTQ3Y2ItYTA1MS01MzQ0YjM1NTFhODMvZWNiZjMwYzgtNzMyOS0z
MzA0LTgwNWUtMzQ2ODU3YjM3N2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTJlMTA4OGMtZWJlNC00N2NiLWEw
NTEtNTM0NGIzNTUxYTgzLzEyZTEwODhjLWViZTQtNDdjYi1hMDUxLTUzNDRiMzU1
MWE4My5jcmwwHwYDVR0jBBgwFoAUigPC+c8mlQCBebwLhcxEn7vFtc4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xMmUxMDg4Yy1lYmU0LTQ3Y2ItYTA1MS01MzQ0
YjM1NTFhODMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBaIBOAwQA
xr6rMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFnGvv1Kkaem1v5micekJRS2DnEXSR2R/ChMnR7wROxg3jmq
ndZgWEvbJkqrbOuKb5ToQBLkn3uNxfMCDopbFHQz5dFzYX+xSa8qycFg4ZNXdK2V
s0WGuiQT3MQMUVhiBYHHkub8XPQfh6+SMqGW3T9lVI4DFqvlzVxA0OsXhx35o1uX
rBSiLhcu4SnPFWKzQdxXbjTmWFxpr+Oc7BU+nRZCgVqHWZF1X/SfeZ4NQHstT3SS
WSqzKo8yFwcpdM/G2vQu2kPMSQbwzJFJangUsXqAsbpQjGxpf0SSTFDEGGr2eALJ
ZHsmt77Gq9mtcEd39K5NB97yzgqLvgCTW/HgwBo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:55:34 2025 by rpki-client