Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/efa9f211-8876-3bab-ba2e-fdbfc52db498.roa
File:                     efa9f211-8876-3bab-ba2e-fdbfc52db498.roa (raw, json)
Hash identifier:          tYlAtGw2XKGqOcFl0q5yXzo77g748ki4oZ/aD+xNDq8=
Subject key identifier:   38:FC:3A:71:E9:14:23:3D:C5:A4:AB:E0:64:D6:F8:6F:06:A0:CF:61
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584BB524AD99DDC43F5541BF00B0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/efa9f211-8876-3bab-ba2e-fdbfc52db498.roa
Signing time:             Fri 31 Oct 2025 19:42:55 +0000
ROA not before:           Fri 31 Oct 2025 19:42:55 +0000
ROA not after:            Thu 29 Jan 2026 20:42:55 +0000
asID:                     394432
IP address blocks:        104.233.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b5:24:ad:99:dd:c4:3f:55:41:bf:00:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct 31 19:42:55 2025 GMT
            Not After : Jan 29 20:42:55 2026 GMT
        Subject: CN=8e787712-71e1-4060-9d48-c1b0c7f3dfdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:3d:f7:10:53:8b:df:ca:00:0c:92:fc:52:
                    31:26:dd:89:3e:09:4b:ae:61:aa:5d:bf:4a:64:a2:
                    05:a2:ea:1f:2a:15:0c:53:ed:40:ce:98:6b:e6:36:
                    65:c3:39:ce:b6:74:74:71:c6:9c:d9:33:ef:ac:12:
                    01:a8:25:49:e3:c5:54:3f:32:c0:c7:c2:78:16:50:
                    69:f0:98:06:5a:4e:da:8d:c3:dd:7e:18:96:c7:eb:
                    5b:2a:36:f3:d2:a1:f6:1d:af:96:8c:16:af:b3:7f:
                    cf:82:19:89:76:0c:e6:8a:86:f9:e4:67:8f:d0:01:
                    73:95:22:19:86:71:25:1c:20:3a:e7:95:4e:fa:1b:
                    96:63:63:d7:f8:fd:28:43:ed:11:5c:38:1d:0f:83:
                    9b:85:68:f3:5b:d4:29:9f:8c:02:5b:b0:cb:c1:84:
                    d2:1b:fb:a7:86:85:31:3d:94:9a:fd:3a:ed:82:81:
                    b4:51:b9:cb:b0:07:e0:8c:c7:6b:08:f7:e3:44:e4:
                    02:74:8a:37:46:d6:46:97:7f:96:09:7e:d6:37:55:
                    8b:9b:ae:33:62:1a:26:32:67:d8:96:a1:52:54:64:
                    fa:75:2e:80:c1:9c:48:11:3d:ca:7a:be:e7:20:14:
                    10:17:b1:a5:4e:dc:dc:69:c7:b1:b0:e6:dc:b6:85:
                    02:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FC:3A:71:E9:14:23:3D:C5:A4:AB:E0:64:D6:F8:6F:06:A0:CF:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/efa9f211-8876-3bab-ba2e-fdbfc52db498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.233.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e0:d3:eb:45:f7:ca:60:ec:77:51:58:7d:2d:07:a6:0b:b4:
         89:f9:44:37:db:f3:92:26:23:5c:d1:ee:6b:6d:94:f6:86:6e:
         a6:86:8f:38:f0:4e:bd:50:3e:fc:99:d5:fa:c9:c7:d3:46:d6:
         ad:8b:ba:14:87:a6:6f:51:8b:b8:76:ab:1b:68:59:86:48:d7:
         55:3f:21:02:cb:6b:d1:1d:bb:94:97:e3:c0:ae:25:59:b4:62:
         52:74:2f:51:c1:0e:6a:23:43:a5:3f:b2:20:85:d5:bc:46:63:
         bd:34:7f:ce:1f:7a:bf:20:8d:ac:d4:30:66:bd:30:f3:56:70:
         7c:71:b9:cf:3f:12:a7:bf:1e:d9:e0:4c:2b:71:a8:50:51:ef:
         77:34:ef:5f:1a:b9:71:ed:ae:2b:d3:af:19:6f:49:63:a3:23:
         fb:54:81:9b:44:88:fa:76:9a:09:fd:a0:46:5d:f3:af:55:50:
         d7:b1:12:47:a5:48:fa:cb:e5:dd:30:89:f9:09:40:89:0a:52:
         41:1b:35:7c:8b:39:31:53:86:fb:7e:9b:88:75:8c:73:ca:32:
         fd:e8:08:e7:67:10:9c:23:c3:f9:aa:90:2f:37:87:02:f1:f7:
         ae:cf:d8:ba:6c:b7:8a:4a:ee:20:09:bf:4d:0e:b5:41:be:0a:
         65:19:18:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1JK2Z3cQ/VUG/ALAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI1MTAzMTE5NDI1NVoXDTI2MDEyOTIwNDI1NVowLzEtMCsGA1UEAxMk
OGU3ODc3MTItNzFlMS00MDYwLTlkNDgtYzFiMGM3ZjNkZmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhA99xBTi9/KAAyS/FIxJt2JPglLrmGqXb9K
ZKIFouofKhUMU+1Azphr5jZlwznOtnR0ccac2TPvrBIBqCVJ48VUPzLAx8J4FlBp
8JgGWk7ajcPdfhiWx+tbKjbz0qH2Ha+WjBavs3/PghmJdgzmiob55GeP0AFzlSIZ
hnElHCA655VO+huWY2PX+P0oQ+0RXDgdD4ObhWjzW9Qpn4wCW7DLwYTSG/unhoUx
PZSa/TrtgoG0UbnLsAfgjMdrCPfjROQCdIo3RtZGl3+WCX7WN1WLm64zYhomMmfY
lqFSVGT6dS6AwZxIET3Ker7nIBQQF7GlTtzcacexsObctoUCAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDj8OnHpFCM9xaSr4GTW+G8GoM9hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZWZhOWYyMTEtODg3Ni0z
YmFiLWJhMmUtZmRiZmM1MmRiNDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOniMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHzg0+tF98pg7HdRWH0tB6YLtIn5RDfb85ImI1zR7mttlPaGbqaGjzjw
Tr1QPvyZ1frJx9NG1q2LuhSHpm9Ri7h2qxtoWYZI11U/IQLLa9Edu5SX48CuJVm0
YlJ0L1HBDmojQ6U/siCF1bxGY700f84fer8gjazUMGa9MPNWcHxxuc8/Eqe/Htng
TCtxqFBR73c0718auXHtrivTrxlvSWOjI/tUgZtEiPp2mgn9oEZd869VUNexEkel
SPrL5d0wifkJQIkKUkEbNXyLOTFThvt+m4h1jHPKMv3oCOdnEJwjw/mqkC83hwLx
967P2Lpst4pK7iAJv00OtUG+CmUZGNM=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:07:04 2025 by rpki-client