Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/c38a9254-bd55-334d-8825-624e13ddc8fa.roa
File:                     c38a9254-bd55-334d-8825-624e13ddc8fa.roa (raw, json)
Hash identifier:          rhlsYiyiSpS4bxHYP7DzPqgDAlss9WgYdjN8gMxvYvA=
Subject key identifier:   DC:EC:FB:06:60:42:2C:99:04:54:8C:78:17:D8:8C:96:FE:E3:6C:C2
Certificate issuer:       /CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d
Certificate serial:       010D0C9F4328584AE1967494A9CAA595C30BCD40
Authority key identifier: 1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/c38a9254-bd55-334d-8825-624e13ddc8fa.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     26155
IP address blocks:        67.223.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:74:94:a9:ca:a5:95:c3:0b:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=a0cbad30-f7c2-49fc-8c5b-a6a4594c829a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c6:84:2c:76:d6:1e:6c:76:20:62:b7:d4:0c:
                    8f:94:ff:8a:cf:b6:7c:15:49:80:d4:14:7d:8e:d1:
                    fd:f9:76:d6:cc:92:bd:91:95:f7:b8:23:6c:92:91:
                    24:c2:8a:94:01:a7:fe:a1:4b:2b:f4:a2:90:0b:5e:
                    f3:85:e7:11:0d:8c:d4:41:1e:24:e9:bb:bd:33:92:
                    6b:84:8a:88:97:b0:ab:6f:5d:6b:04:db:18:2a:f7:
                    c4:bb:26:29:d9:45:90:a8:98:bf:c6:fa:f9:04:be:
                    36:f6:b3:d2:2e:c7:e0:c6:39:42:e9:e0:97:84:87:
                    d6:31:ad:4b:5d:8a:a8:4b:5d:39:28:fd:a4:4b:84:
                    ef:ff:bc:7f:27:56:21:17:ab:9a:eb:6d:fe:3e:13:
                    e7:0b:32:08:5c:4f:1a:21:86:3f:93:b3:5d:ed:9f:
                    f1:20:a4:a8:af:49:f8:ba:a1:43:ad:e2:9d:1d:76:
                    a8:f2:70:a2:03:b4:07:82:9c:fd:b8:0a:68:ec:b5:
                    33:82:73:b8:57:5a:fe:c0:2a:bc:88:66:3f:d0:a2:
                    d2:a5:7e:f1:30:ce:fe:28:87:a4:f1:5b:75:02:0f:
                    ce:25:2c:a8:83:15:5e:b7:18:12:c2:fa:77:b2:64:
                    8f:9d:fc:49:1f:51:d6:b6:15:28:de:49:cb:2f:cd:
                    77:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EC:FB:06:60:42:2C:99:04:54:8C:78:17:D8:8C:96:FE:E3:6C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/c38a9254-bd55-334d-8825-624e13ddc8fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl

            X509v3 Authority Key Identifier:
                keyid:1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.223.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:79:a0:cc:f8:3c:d7:f7:e7:84:ed:b3:17:1d:00:47:2a:fb:
         1b:92:1c:d5:84:21:e1:7b:01:a8:9d:22:3d:e6:56:13:2f:e4:
         20:02:c4:b5:40:4b:83:0f:0a:b9:51:c0:c2:82:9a:af:ee:bc:
         dc:d2:14:8f:07:75:cf:b2:db:73:0e:aa:d0:c2:3e:da:a2:ce:
         03:65:84:55:c3:68:c1:34:05:57:32:31:83:f6:a7:4d:39:8b:
         d0:85:b5:17:7d:14:9d:80:88:f6:8b:b1:2a:f7:e4:a2:a6:55:
         94:76:a2:f8:b5:86:b7:67:1e:b5:7d:7f:47:01:f5:3d:6f:cf:
         32:3f:67:6d:f0:1f:01:a7:ec:0d:b7:83:14:25:eb:35:9a:e9:
         9b:9e:ff:75:5a:9d:3e:c0:56:88:44:09:dd:4d:16:bb:7a:c8:
         07:8d:24:55:94:76:7d:0e:30:9b:e7:04:b8:0a:80:80:42:01:
         2d:b2:8b:c5:d9:11:16:92:66:cc:82:fd:20:b9:fe:72:3e:75:
         f8:97:c5:d0:2b:aa:d9:7f:86:70:49:24:a6:6c:8c:dc:df:95:
         06:df:db:bd:4b:d4:1b:bb:f9:36:df:bf:26:2f:2b:ab:4e:08:
         87:88:99:3f:3b:2b:42:e5:20:3e:d1:ad:09:66:05:a1:6e:65:
         63:d8:f9:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlnSUqcqllcMLzUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgyOTU4MjAtMDNiYy00YTRlLTgwNzItN2NiZjc0OGY0
YzZkMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
YTBjYmFkMzAtZjdjMi00OWZjLThjNWItYTZhNDU5NGM4MjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8aELHbWHmx2IGK31AyPlP+Kz7Z8FUmA1BR9
jtH9+XbWzJK9kZX3uCNskpEkwoqUAaf+oUsr9KKQC17zhecRDYzUQR4k6bu9M5Jr
hIqIl7Crb11rBNsYKvfEuyYp2UWQqJi/xvr5BL429rPSLsfgxjlC6eCXhIfWMa1L
XYqoS105KP2kS4Tv/7x/J1YhF6ua623+PhPnCzIIXE8aIYY/k7Nd7Z/xIKSor0n4
uqFDreKdHXao8nCiA7QHgpz9uApo7LUzgnO4V1r+wCq8iGY/0KLSpX7xMM7+KIek
8Vt1Ag/OJSyogxVetxgSwvp3smSPnfxJH1HWthUo3knLL813+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNzs+wZgQiyZBFSMeBfYjJb+42zCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5
NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2JmNzQ4ZjRjNmQvYzM4YTkyNTQtYmQ1NS0z
MzRkLTg4MjUtNjI0ZTEzZGRjOGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTgyOTU4MjAtMDNiYy00YTRlLTgw
NzItN2NiZjc0OGY0YzZkL2U4Mjk1ODIwLTAzYmMtNGE0ZS04MDcyLTdjYmY3NDhm
NGM2ZC5jcmwwHwYDVR0jBBgwFoAUGt9TWH5SbG/MuhYDvE0QNRjo5qQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2Jm
NzQ4ZjRjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ99tMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKR5oMz4PNf354TtsxcdAEcq+xuSHNWEIeF7AaidIj3mVhMv5CACxLVA
S4MPCrlRwMKCmq/uvNzSFI8Hdc+y23MOqtDCPtqizgNlhFXDaME0BVcyMYP2p005
i9CFtRd9FJ2AiPaLsSr35KKmVZR2ovi1hrdnHrV9f0cB9T1vzzI/Z23wHwGn7A23
gxQl6zWa6Zue/3VanT7AVohECd1NFrt6yAeNJFWUdn0OMJvnBLgKgIBCAS2yi8XZ
ERaSZsyC/SC5/nI+dfiXxdArqtl/hnBJJKZsjNzflQbf271L1Bu7+TbfvyYvK6tO
CIeImT87K0LlID7RrQlmBaFuZWPY+eE=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:23:16 2025 by rpki-client