Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/ecb53943-4766-3d3a-9698-a672eace45db.roa
File:                     ecb53943-4766-3d3a-9698-a672eace45db.roa (raw, json)
Hash identifier:          70F9ci6Bg7uwUQ0rBHcnYY32dmahiZNBmGjILNxUMP4=
Subject key identifier:   0A:E4:FD:1D:33:DD:AD:4B:17:21:AD:91:90:66:D8:FB:0C:0A:57:99
Certificate issuer:       /CN=750854da-6a6d-4f9f-a9f0-b7000e95cc91
Certificate serial:       010D0C9F4328584B89175FEC694F5DEB47BB3100
Authority key identifier: 7F:C4:FA:69:BC:F6:B3:38:57:46:2A:07:83:94:A8:3C:EC:40:80:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/ecb53943-4766-3d3a-9698-a672eace45db.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        69.2.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/750854da-6a6d-4f9f-a9f0-b7000e95cc91.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/750854da-6a6d-4f9f-a9f0-b7000e95cc91.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:5f:ec:69:4f:5d:eb:47:bb:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750854da-6a6d-4f9f-a9f0-b7000e95cc91
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=e969df99-7b3a-4ee4-bcf8-a5e3c47668f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7a:4c:47:70:6f:97:f9:ae:eb:47:81:4b:3f:
                    e0:81:3a:aa:5e:09:81:45:77:4e:b5:7a:c0:79:51:
                    4f:0e:06:fc:0b:2b:e2:2d:de:f2:ec:26:8f:70:13:
                    a9:c7:d3:f3:31:91:70:00:30:a5:6a:47:c5:67:0e:
                    47:bc:92:7c:89:52:d5:ac:ed:d9:74:1b:98:81:42:
                    b0:1d:4b:ba:7e:b5:ec:25:36:33:bf:b9:f4:a9:3a:
                    09:61:8e:2c:1d:6a:4c:53:bd:a0:9d:ef:51:af:f6:
                    89:6b:2f:22:0c:72:a1:87:5f:34:56:55:dc:73:d3:
                    77:34:9d:78:7a:97:aa:73:10:6e:59:31:78:5f:4c:
                    6b:08:90:dc:b8:3d:76:72:b4:d0:d3:a5:b2:cb:4b:
                    c1:fb:ba:a5:29:8b:74:f5:56:f2:f0:53:2a:f2:ba:
                    c0:9a:44:dc:c1:aa:39:31:95:b4:95:2a:2e:92:af:
                    a2:58:53:a0:8c:4b:a0:b6:59:b7:e7:e2:71:8f:87:
                    a4:9d:df:63:26:d2:bb:5a:a6:e6:01:02:05:f4:49:
                    c2:41:1a:a6:1f:da:bc:44:6a:ad:83:69:ca:0e:01:
                    9c:0e:13:05:ac:44:39:5e:ae:62:e6:10:38:55:b9:
                    3f:8c:df:d8:29:42:42:06:77:c2:97:4a:bd:74:90:
                    ce:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E4:FD:1D:33:DD:AD:4B:17:21:AD:91:90:66:D8:FB:0C:0A:57:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/ecb53943-4766-3d3a-9698-a672eace45db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/750854da-6a6d-4f9f-a9f0-b7000e95cc91.crl

            X509v3 Authority Key Identifier:
                keyid:7F:C4:FA:69:BC:F6:B3:38:57:46:2A:07:83:94:A8:3C:EC:40:80:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.2.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:37:2b:57:4e:ee:51:af:71:4b:87:37:fd:ca:94:b2:b7:4d:
         e2:0d:c6:89:b6:3c:24:0a:69:23:58:ec:fd:77:a3:80:80:ac:
         6c:3a:c8:f4:72:45:22:8a:02:b9:b4:35:4c:73:0e:ae:59:64:
         05:36:88:6b:90:a5:51:7c:05:ce:a4:3c:fc:6c:d8:ba:b6:69:
         55:40:a0:83:bb:db:71:94:19:9c:af:21:18:96:c1:bf:e9:c4:
         83:a0:ad:0f:0f:c4:9a:6b:f6:3e:b9:22:6b:b8:9f:08:97:43:
         6a:7d:85:c2:cd:b3:2e:2a:3b:3f:96:30:b4:2a:e8:6e:bc:1c:
         fa:6f:8c:ed:69:bd:3a:a2:fb:0b:31:af:bb:1e:d4:43:0f:50:
         8d:6c:32:77:b7:2e:4f:d6:39:a4:e9:b6:0e:fc:1b:fc:c3:25:
         d3:80:98:51:7e:c6:75:86:f0:f4:d7:37:27:15:9b:2b:bd:72:
         9b:7f:40:ea:55:7c:92:8e:26:89:eb:5f:4b:2b:2c:09:68:95:
         89:18:ac:a8:c3:f8:28:77:64:57:53:17:92:b9:04:0a:a7:c0:
         b4:d2:12:f1:b4:bd:53:11:d1:f9:dc:92:2d:b4:7c:7c:55:26:
         6b:39:9c:16:28:77:c4:99:13:49:d3:ee:b7:45:c4:06:c6:fe:
         e0:12:aa:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF1/saU9d60e7MQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzUwODU0ZGEtNmE2ZC00ZjlmLWE5ZjAtYjcwMDBlOTVj
YzkxMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk
ZTk2OWRmOTktN2IzYS00ZWU0LWJjZjgtYTVlM2M0NzY2OGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXpMR3Bvl/mu60eBSz/ggTqqXgmBRXdOtXrA
eVFPDgb8CyviLd7y7CaPcBOpx9PzMZFwADClakfFZw5HvJJ8iVLVrO3ZdBuYgUKw
HUu6frXsJTYzv7n0qToJYY4sHWpMU72gne9Rr/aJay8iDHKhh180VlXcc9N3NJ14
epeqcxBuWTF4X0xrCJDcuD12crTQ06Wyy0vB+7qlKYt09Vby8FMq8rrAmkTcwao5
MZW0lSoukq+iWFOgjEugtlm35+Jxj4eknd9jJtK7WqbmAQIF9EnCQRqmH9q8RGqt
g2nKDgGcDhMFrEQ5Xq5i5hA4Vbk/jN/YKUJCBnfCl0q9dJDObQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFArk/R0z3a1LFyGtkZBm2PsMCleZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NTA4
NTRkYS02YTZkLTRmOWYtYTlmMC1iNzAwMGU5NWNjOTEvZWNiNTM5NDMtNDc2Ni0z
ZDNhLTk2OTgtYTY3MmVhY2U0NWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzUwODU0ZGEtNmE2ZC00ZjlmLWE5
ZjAtYjcwMDBlOTVjYzkxLzc1MDg1NGRhLTZhNmQtNGY5Zi1hOWYwLWI3MDAwZTk1
Y2M5MS5jcmwwHwYDVR0jBBgwFoAUf8T6abz2szhXRioHg5SoPOxAgP8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NTA4NTRkYS02YTZkLTRmOWYtYTlmMC1iNzAw
MGU5NWNjOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQJlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGc3K1dO7lGvcUuHN/3KlLK3TeINxom2PCQKaSNY7P13o4CArGw6yPRy
RSKKArm0NUxzDq5ZZAU2iGuQpVF8Bc6kPPxs2Lq2aVVAoIO723GUGZyvIRiWwb/p
xIOgrQ8PxJpr9j65Imu4nwiXQ2p9hcLNsy4qOz+WMLQq6G68HPpvjO1pvTqi+wsx
r7se1EMPUI1sMne3Lk/WOaTptg78G/zDJdOAmFF+xnWG8PTXNycVmyu9cpt/QOpV
fJKOJonrX0srLAlolYkYrKjD+Ch3ZFdTF5K5BAqnwLTSEvG0vVMR0fncki20fHxV
Jms5nBYod8SZE0nT7rdFxAbG/uASqoU=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:05 2025 by rpki-client