Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/724dc0f1-bd37-3d30-9266-695afd24f575.roa
File:                     724dc0f1-bd37-3d30-9266-695afd24f575.roa (raw, json)
Hash identifier:          HNzCAnuKmZLzOffkGEZQm2bZCYt94OEMJEkXUnHqMDA=
Subject key identifier:   75:3D:0E:49:5F:F0:2E:8B:2B:4B:FF:26:BC:E9:BB:0C:14:4D:88:3E
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584BAD624341F76E60ABFE9CBBC8
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/724dc0f1-bd37-3d30-9266-695afd24f575.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        13.111.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:43:41:f7:6e:60:ab:fe:9c:bb:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=01c50ccd-ef48-4b57-9138-cf97300bc7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:17:00:92:5c:8a:28:c9:cb:9f:05:94:c1:
                    d0:20:a6:5a:97:ac:c1:d4:3a:bd:ef:a0:0e:98:51:
                    fa:ab:70:52:d2:d6:0b:7b:b6:6b:dd:bb:1b:1b:bc:
                    68:47:05:00:3b:1a:93:55:9f:33:7c:a7:21:ee:cf:
                    ce:f9:f5:74:51:75:e9:b2:51:b5:2f:59:d0:d4:e3:
                    b1:9e:d9:5e:d3:0c:7b:8f:20:3c:3c:4e:57:52:4c:
                    e2:74:85:36:26:bd:33:d0:dd:3e:2c:d9:ff:f0:74:
                    27:d0:52:6b:59:2b:b5:3f:fa:04:02:3f:01:a5:a9:
                    af:31:60:86:9f:a5:0d:b7:ac:30:49:91:fd:f5:2f:
                    10:2d:c9:f3:6a:2b:08:70:be:ff:0a:29:f0:a3:c5:
                    ee:e2:90:fa:49:2d:79:93:df:ce:c4:9a:8e:7a:ca:
                    ee:0c:2e:71:b7:a8:f2:5e:83:dd:76:ea:fd:1c:2e:
                    09:73:94:3a:04:f2:84:2e:0f:f2:86:4f:79:ab:ec:
                    a3:f6:ea:78:c6:c6:04:54:19:2f:e1:31:3b:f8:ca:
                    76:c8:9a:97:2f:1c:f8:58:1b:ca:3d:03:5c:35:4b:
                    3a:67:c6:b2:79:31:37:52:f0:48:fe:a5:a9:bb:af:
                    5e:db:ce:54:c6:b4:bf:8d:34:0c:0a:01:bc:37:90:
                    e5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3D:0E:49:5F:F0:2E:8B:2B:4B:FF:26:BC:E9:BB:0C:14:4D:88:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/724dc0f1-bd37-3d30-9266-695afd24f575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.111.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b0:9d:ad:53:c5:df:d9:19:13:22:e6:55:1c:7d:1d:a9:60:
         fb:9e:bd:dd:e2:4c:1c:3d:6e:0c:c1:d4:82:9a:8b:79:87:b3:
         b8:0a:e0:ea:12:83:7b:f3:94:18:9b:b1:4c:4c:9f:ee:20:c1:
         17:c5:34:3f:0e:37:3f:05:68:16:ed:bc:d4:b8:8d:c2:7f:12:
         40:64:96:6d:e3:6e:cd:26:c1:6b:6e:09:8f:94:95:ce:99:d5:
         3e:85:4a:82:88:c3:4f:d4:a1:be:93:21:0c:ad:7f:92:f8:3c:
         b4:e3:d0:31:b6:77:31:01:61:42:94:47:27:6c:cb:a7:a7:d9:
         42:c4:c5:cb:2d:36:c0:ff:76:50:9d:c5:50:b1:82:1a:7a:19:
         1d:d7:49:f7:c3:bc:7e:15:cd:6e:b5:41:77:fd:76:21:8f:7a:
         20:e5:8e:c6:80:b0:6a:44:a7:55:41:49:50:d2:0a:d6:ba:d9:
         c9:69:38:8b:cb:c2:f2:24:88:f8:de:83:05:76:2c:89:d1:4c:
         66:ce:cf:55:f4:f9:53:3c:5a:0f:c9:f4:cf:46:5a:88:7a:21:
         0c:12:9a:e1:66:7b:3e:52:e5:fc:64:d4:5b:d5:3d:0b:22:ec:
         bd:3b:55:f9:23:bd:68:7a:30:2e:d8:fe:ad:8e:c6:ff:14:af:
         d4:3f:a4:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYkNB925gq/6cu8gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl
NTRmMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
MDFjNTBjY2QtZWY0OC00YjU3LTkxMzgtY2Y5NzMwMGJjN2ZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK0XAJJciijJy58FlMHQIKZal6zB1Dq976AO
mFH6q3BS0tYLe7Zr3bsbG7xoRwUAOxqTVZ8zfKch7s/O+fV0UXXpslG1L1nQ1OOx
ntle0wx7jyA8PE5XUkzidIU2Jr0z0N0+LNn/8HQn0FJrWSu1P/oEAj8BpamvMWCG
n6UNt6wwSZH99S8QLcnzaisIcL7/Cinwo8Xu4pD6SS15k9/OxJqOesruDC5xt6jy
XoPddur9HC4Jc5Q6BPKELg/yhk95q+yj9up4xsYEVBkv4TE7+Mp2yJqXLxz4WBvK
PQNcNUs6Z8ayeTE3UvBI/qWpu69e285UxrS/jTQMCgG8N5DlowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHU9Dklf8C6LK0v/JrzpuwwUTYg+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj
MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvNzI0ZGMwZjEtYmQzNy0z
ZDMwLTkyNjYtNjk1YWZkMjRmNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1
NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm
ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz
MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADW/BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHOwna1Txd/ZGRMi5lUcfR2pYPuevd3iTBw9bgzB1IKai3mHs7gK4OoS
g3vzlBibsUxMn+4gwRfFND8ONz8FaBbtvNS4jcJ/EkBklm3jbs0mwWtuCY+Ulc6Z
1T6FSoKIw0/Uob6TIQytf5L4PLTj0DG2dzEBYUKURydsy6en2ULExcstNsD/dlCd
xVCxghp6GR3XSffDvH4VzW61QXf9diGPeiDljsaAsGpEp1VBSVDSCta62clpOIvL
wvIkiPjegwV2LInRTGbOz1X0+VM8Wg/J9M9GWoh6IQwSmuFmez5S5fxk1FvVPQsi
7L07VfkjvWh6MC7Y/q2Oxv8Ur9Q/pKc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:00:36 2025 by rpki-client