Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/e1c95166-e3fe-3fac-9109-56a8e4b9f490.roa
File:                     e1c95166-e3fe-3fac-9109-56a8e4b9f490.roa (raw, json)
Hash identifier:          nBtf9SrcxilM2lQlwUdi+97wPK6Mshr0rOKuqWX/3ZA=
Subject key identifier:   94:C3:F9:C7:3C:47:53:14:B5:9B:D7:93:F4:05:09:05:29:03:FF:F6
Certificate issuer:       /CN=4298b6ff-8a6d-4135-b127-80a55c0919df
Certificate serial:       010D0C9F4328584AEE33308EAB9491FBC737AB80
Authority key identifier: 4A:FC:61:2F:3B:D7:32:8B:65:D2:0A:6E:34:9B:3F:09:6B:84:6F:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/e1c95166-e3fe-3fac-9109-56a8e4b9f490.roa
Signing time:             Thu 21 Aug 2025 13:26:17 +0000
ROA not before:           Thu 21 Aug 2025 13:26:17 +0000
ROA not after:            Wed 19 Nov 2025 14:26:17 +0000
asID:                     30241
IP address blocks:        69.194.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:33:30:8e:ab:94:91:fb:c7:37:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4298b6ff-8a6d-4135-b127-80a55c0919df
        Validity
            Not Before: Aug 21 13:26:17 2025 GMT
            Not After : Nov 19 14:26:17 2025 GMT
        Subject: CN=4f01da03-bdcc-4a12-bbf9-3db875b6988c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:50:39:b0:82:73:58:11:c6:eb:63:ea:24:
                    37:7f:af:a7:f4:0f:09:fe:eb:be:1c:78:aa:ce:45:
                    c6:15:bf:46:d4:1d:3a:3d:e0:59:52:3b:2e:e7:e4:
                    b8:de:0a:ef:e8:57:ca:c5:31:af:56:e6:2b:6f:eb:
                    78:fa:96:2a:e4:da:10:01:b6:6c:8a:b4:5c:68:cd:
                    cf:8b:dc:13:67:66:9f:2f:af:d4:5a:78:6b:0e:f7:
                    eb:c5:34:d0:9a:8f:c1:cb:79:77:24:d7:69:4e:3b:
                    d7:c8:79:e0:0f:2a:83:f4:77:48:e1:db:a8:5a:bb:
                    a0:ea:3c:20:6f:a5:88:88:7a:10:c5:79:5c:d0:70:
                    60:33:2f:8f:8f:d0:0f:df:ff:8a:70:6c:5f:e5:2b:
                    32:01:a0:c0:ef:0f:54:8e:ac:0e:e0:8a:90:16:aa:
                    2b:99:b5:fc:19:99:07:6d:ba:7b:a6:21:43:77:33:
                    c9:59:5e:f7:15:06:8c:f2:28:ee:a4:3c:76:29:1f:
                    59:d3:ad:80:06:51:ed:bd:5a:3a:d6:81:bc:a8:b1:
                    63:5d:99:2c:59:cb:29:8c:83:bc:0d:ab:0d:29:8b:
                    0a:31:42:b6:cc:c8:42:2f:fb:3a:a7:af:c6:d2:8a:
                    46:c3:35:f0:50:68:dd:1a:1e:2d:8f:7f:77:90:38:
                    21:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C3:F9:C7:3C:47:53:14:B5:9B:D7:93:F4:05:09:05:29:03:FF:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/e1c95166-e3fe-3fac-9109-56a8e4b9f490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.crl

            X509v3 Authority Key Identifier:
                keyid:4A:FC:61:2F:3B:D7:32:8B:65:D2:0A:6E:34:9B:3F:09:6B:84:6F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.194.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:5d:0b:c0:71:ba:e5:86:d4:30:83:da:91:22:37:cc:08:91:
         f5:a1:7c:73:53:ea:8d:59:63:f4:6f:f1:93:cc:0b:82:c2:ed:
         5e:98:39:e2:c0:43:98:d1:d2:6a:19:22:ea:55:66:80:c4:93:
         49:34:2e:5f:31:fe:d2:65:3f:fb:45:50:d4:fc:ea:dd:b9:b3:
         19:a6:60:13:d8:0f:8e:d3:e8:5d:39:5d:37:00:9e:2f:44:c9:
         48:93:56:e6:d5:f5:ab:46:b2:05:d6:88:73:ab:39:51:c6:18:
         1c:18:f4:ae:7f:f7:c7:f1:0a:9e:71:48:57:77:d3:d1:48:cb:
         23:1e:84:6f:e4:ae:13:3d:5f:dc:2a:18:d2:be:f3:21:c5:a4:
         3e:e4:84:fd:d0:9b:35:ab:f8:2a:70:0f:2c:11:80:cf:dd:2a:
         b7:f2:01:21:e8:30:db:4e:4b:fd:b8:b9:03:84:3a:d6:db:2f:
         fc:5b:5c:38:2a:fb:7d:17:30:2a:9e:7c:92:33:25:be:8a:14:
         26:83:a0:81:c5:e0:f9:ed:fa:a3:33:63:70:47:eb:32:02:f8:
         59:3d:c6:a0:ed:fc:29:79:e6:be:fa:d0:69:7f:54:4c:53:75:
         d5:9b:b7:c8:2c:8e:99:6a:2e:14:16:9e:83:27:af:df:b9:ca:
         bf:05:5c:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruMzCOq5SR+8c3q4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDI5OGI2ZmYtOGE2ZC00MTM1LWIxMjctODBhNTVjMDkx
OWRmMB4XDTI1MDgyMTEzMjYxN1oXDTI1MTExOTE0MjYxN1owLzEtMCsGA1UEAxMk
NGYwMWRhMDMtYmRjYy00YTEyLWJiZjktM2RiODc1YjY5ODhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8BQObCCc1gRxutj6iQ3f6+n9A8J/uu+HHiq
zkXGFb9G1B06PeBZUjsu5+S43grv6FfKxTGvVuYrb+t4+pYq5NoQAbZsirRcaM3P
i9wTZ2afL6/UWnhrDvfrxTTQmo/By3l3JNdpTjvXyHngDyqD9HdI4duoWrug6jwg
b6WIiHoQxXlc0HBgMy+Pj9AP3/+KcGxf5SsyAaDA7w9UjqwO4IqQFqormbX8GZkH
bbp7piFDdzPJWV73FQaM8ijupDx2KR9Z062ABlHtvVo61oG8qLFjXZksWcspjIO8
DasNKYsKMUK2zMhCL/s6p6/G0opGwzXwUGjdGh4tj393kDgh7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJTD+cc8R1MUtZvXk/QFCQUpA//2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80Mjk4
YjZmZi04YTZkLTQxMzUtYjEyNy04MGE1NWMwOTE5ZGYvZTFjOTUxNjYtZTNmZS0z
ZmFjLTkxMDktNTZhOGU0YjlmNDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDI5OGI2ZmYtOGE2ZC00MTM1LWIx
MjctODBhNTVjMDkxOWRmLzQyOThiNmZmLThhNmQtNDEzNS1iMTI3LTgwYTU1YzA5
MTlkZi5jcmwwHwYDVR0jBBgwFoAUSvxhLzvXMotl0gpuNJs/CWuEbzQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC80Mjk4YjZmZi04YTZkLTQxMzUtYjEyNy04MGE1
NWMwOTE5ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARcKdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJdC8BxuuWG1DCD2pEiN8wIkfWhfHNT6o1ZY/Rv8ZPMC4LC7V6YOeLA
Q5jR0moZIupVZoDEk0k0Ll8x/tJlP/tFUNT86t25sxmmYBPYD47T6F05XTcAni9E
yUiTVubV9atGsgXWiHOrOVHGGBwY9K5/98fxCp5xSFd309FIyyMehG/krhM9X9wq
GNK+8yHFpD7khP3QmzWr+CpwDywRgM/dKrfyASHoMNtOS/24uQOEOtbbL/xbXDgq
+30XMCqefJIzJb6KFCaDoIHF4Pnt+qMzY3BH6zIC+Fk9xqDt/Cl55r760Gl/VExT
ddWbt8gsjplqLhQWnoMnr9+5yr8FXG4=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:04:15 2025 by rpki-client