Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/e9fa680d-54b9-376f-8fcc-f902a3be72a1.roa
File:                     e9fa680d-54b9-376f-8fcc-f902a3be72a1.roa (raw, json)
Hash identifier:          t8eviXXGAm/+FMynTT3+681Vlxedvu0cYsNKsn18NEw=
Subject key identifier:   CE:30:A9:26:39:F1:AE:0C:65:90:79:14:7D:81:01:6E:D1:8E:E4:F2
Certificate issuer:       /CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
Certificate serial:       010D0C9F4328584B970CE888406C7FC2A50C2800
Authority key identifier: 12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/e9fa680d-54b9-376f-8fcc-f902a3be72a1.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        72.13.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:e8:88:40:6c:7f:c2:a5:0c:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=a55abb7a-43bf-45cd-b2e7-e89ef3aceb77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f3:72:0b:da:31:2e:56:bd:1c:78:bd:57:19:
                    13:f6:78:fc:45:9c:de:92:23:25:60:09:a3:e8:e1:
                    e0:c1:47:22:03:21:4c:d6:96:90:7e:fe:a4:87:bf:
                    81:1c:54:ad:1a:5f:ac:74:63:f4:4c:a2:56:43:cb:
                    2b:0b:03:24:38:2c:9c:e7:cf:48:7c:af:5f:51:13:
                    59:92:e6:08:f4:24:d7:16:a1:f5:87:ba:0e:f7:64:
                    69:c5:a1:b8:64:1e:ec:c8:fe:ae:5f:2d:ce:ba:04:
                    9a:ff:01:34:a2:8f:70:e1:e4:20:f0:a8:5b:2e:9e:
                    3e:72:f1:94:82:98:d3:93:95:f8:d5:d3:5e:fe:e4:
                    f0:56:9f:a1:c6:ff:8b:6b:c2:99:8f:de:f8:54:d4:
                    49:1c:a3:d5:b5:4c:e7:b5:bf:3a:53:00:d2:d5:f0:
                    81:4a:6c:89:08:a0:0e:9e:4e:8b:a8:63:5f:84:19:
                    60:d7:78:9e:41:ae:9b:87:4e:20:8c:b1:0c:06:44:
                    1b:53:a8:af:94:b6:56:4a:be:3e:96:c4:dd:ba:e8:
                    81:07:1e:13:9a:00:b9:18:5b:5e:9f:18:f3:e8:5d:
                    f2:56:41:34:73:00:8a:91:c7:cc:a9:b9:ea:8f:c0:
                    59:ab:f2:f6:96:a5:f5:de:21:1e:47:c8:67:5a:b7:
                    82:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:30:A9:26:39:F1:AE:0C:65:90:79:14:7D:81:01:6E:D1:8E:E4:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/e9fa680d-54b9-376f-8fcc-f902a3be72a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl

            X509v3 Authority Key Identifier:
                keyid:12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:72:60:0c:d6:66:6f:3b:e6:30:90:26:19:13:a4:b9:97:3f:
         33:3d:a3:34:a9:fd:d1:a7:b3:8b:08:c5:28:50:95:28:2e:ca:
         49:8c:6d:8b:a5:b2:bd:ef:42:cc:af:ce:5b:3d:2d:ea:7b:53:
         41:09:21:56:93:ae:50:02:c7:55:35:38:38:a9:de:8f:9b:28:
         be:23:04:8a:af:f0:83:12:1d:d2:14:72:a3:8f:d3:fe:4a:b1:
         c0:48:4f:05:99:31:5f:80:98:14:57:d8:33:81:b3:7c:05:b9:
         d0:51:c7:9e:11:67:5d:49:2a:a2:95:b2:ce:90:80:a0:b5:c0:
         61:60:af:06:a9:90:41:fc:54:cb:bc:46:77:eb:6b:32:3e:2f:
         e3:02:f2:17:b7:58:1c:ef:4e:99:8a:7e:61:36:89:39:d7:c7:
         62:a7:ac:0a:bb:fe:a4:b6:22:41:02:b4:38:0e:20:67:48:a3:
         2e:7c:06:24:ea:9f:a3:ac:ee:f5:25:91:94:c7:1b:9b:70:29:
         91:21:a7:4a:66:ce:ed:02:b3:1f:bd:12:9b:48:90:32:54:cb:
         bd:77:3d:b4:13:0d:d2:92:b5:ef:6a:d2:87:1a:a7:71:88:4f:
         bd:ac:c0:51:7e:18:5b:31:08:2f:fc:4b:7a:86:cd:dc:5e:57:
         8e:dd:57:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOiIQGx/wqUMKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE5OGY1ZmEtZjYyMS00MmQ0LWE2ZDAtOTNmMDJlZWE3
YmI0MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
YTU1YWJiN2EtNDNiZi00NWNkLWIyZTctZTg5ZWYzYWNlYjc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/NyC9oxLla9HHi9VxkT9nj8RZzekiMlYAmj
6OHgwUciAyFM1paQfv6kh7+BHFStGl+sdGP0TKJWQ8srCwMkOCyc589IfK9fURNZ
kuYI9CTXFqH1h7oO92RpxaG4ZB7syP6uXy3OugSa/wE0oo9w4eQg8KhbLp4+cvGU
gpjTk5X41dNe/uTwVp+hxv+La8KZj974VNRJHKPVtUzntb86UwDS1fCBSmyJCKAO
nk6LqGNfhBlg13ieQa6bh04gjLEMBkQbU6ivlLZWSr4+lsTduuiBBx4TmgC5GFte
nxjz6F3yVkE0cwCKkcfMqbnqj8BZq/L2lqX13iEeR8hnWreCuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM4wqSY58a4MZZB5FH2BAW7RjuTyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iMTk4
ZjVmYS1mNjIxLTQyZDQtYTZkMC05M2YwMmVlYTdiYjQvZTlmYTY4MGQtNTRiOS0z
NzZmLThmY2MtZjkwMmEzYmU3MmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjE5OGY1ZmEtZjYyMS00MmQ0LWE2
ZDAtOTNmMDJlZWE3YmI0L2IxOThmNWZhLWY2MjEtNDJkNC1hNmQwLTkzZjAyZWVh
N2JiNC5jcmwwHwYDVR0jBBgwFoAUElVLnYtZrObYVR5QV7DcLoo1VOswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iMTk4ZjVmYS1mNjIxLTQyZDQtYTZkMC05M2Yw
MmVlYTdiYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA1OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIZyYAzWZm875jCQJhkTpLmXPzM9ozSp/dGns4sIxShQlSguykmMbYul
sr3vQsyvzls9Lep7U0EJIVaTrlACx1U1ODip3o+bKL4jBIqv8IMSHdIUcqOP0/5K
scBITwWZMV+AmBRX2DOBs3wFudBRx54RZ11JKqKVss6QgKC1wGFgrwapkEH8VMu8
RnfrazI+L+MC8he3WBzvTpmKfmE2iTnXx2KnrAq7/qS2IkECtDgOIGdIoy58BiTq
n6Os7vUlkZTHG5twKZEhp0pmzu0Csx+9EptIkDJUy713PbQTDdKSte9q0ocap3GI
T72swFF+GFsxCC/8S3qGzdxeV47dVwY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:37:15 2025 by rpki-client