Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa
File:                     520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa (raw, json)
Hash identifier:          lKHzwKLsbVslKx0qz51pOaraF/UKE03R3gx0340+TLE=
Subject key identifier:   52:51:44:20:4D:6B:3F:E6:87:40:F6:C3:62:C5:1E:39:79:05:CB:FD
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584B9E079E94FE5F009791EF1570
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     53720
IP address blocks:        24.246.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:9e:94:fe:5f:00:97:91:ef:15:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=daaa5426-8796-464a-8c39-a222dbab3aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:4b:d4:3a:b9:83:da:47:ff:0f:e4:38:0c:
                    3c:c0:38:37:37:6a:84:cc:81:aa:5f:05:fc:e3:4b:
                    52:d3:ba:0f:a2:c7:4a:f6:4b:e3:a9:b4:e3:a9:dc:
                    73:67:64:2a:ad:a8:f3:15:ff:d1:71:30:91:2f:b8:
                    10:44:eb:c4:0c:52:4f:a1:9b:23:cf:a0:32:e3:b1:
                    ea:0c:45:14:c7:b2:ff:ab:49:38:2c:19:9f:4c:42:
                    9a:30:4a:59:1c:2c:9f:92:ee:a0:c1:c3:4a:cb:02:
                    e7:d5:bc:98:2a:4f:35:e4:d6:4c:c3:75:07:f0:4c:
                    5c:18:77:95:65:27:00:14:c0:ff:00:8c:d3:26:74:
                    61:21:66:4d:09:a3:99:7a:a5:45:d0:31:2e:19:fe:
                    e6:08:9a:b0:b8:98:9d:43:16:1b:77:8c:a5:7d:b0:
                    dd:1b:b3:3b:e2:13:f7:ea:e5:a1:ce:76:e9:43:ce:
                    38:9f:98:c1:58:bf:d0:3a:a0:54:03:89:a8:94:55:
                    4e:5b:ac:89:0b:e8:3b:da:c9:92:5b:60:af:6e:41:
                    e9:cf:ea:d1:02:70:73:2b:20:23:98:9e:fe:19:98:
                    77:58:46:cb:d8:1c:d1:08:a9:e6:7b:f8:7c:e1:23:
                    67:11:86:0b:87:e2:2f:c2:a0:83:2d:a1:a2:55:9d:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:51:44:20:4D:6B:3F:E6:87:40:F6:C3:62:C5:1E:39:79:05:CB:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.246.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:fa:a7:b2:5a:39:13:54:b5:26:34:69:21:70:7f:b5:16:66:
         32:d4:17:e1:c5:41:6a:b4:2d:a1:e3:fb:3c:68:ae:c6:1d:83:
         0f:b0:db:fe:f8:e2:c3:fd:ac:ab:04:43:57:d0:b4:cb:5a:09:
         17:e2:de:50:e5:55:3e:61:8d:61:4f:3f:79:cf:3b:87:11:b2:
         22:df:40:09:8c:ce:75:a7:05:99:46:07:c4:f8:e0:84:04:59:
         34:ff:1e:45:c2:c1:8a:3b:e3:b8:ab:c5:3a:e5:8a:74:0e:0a:
         7a:d9:79:59:ae:a9:7e:5b:6b:f0:a9:fe:09:e0:6a:c6:c5:ef:
         30:93:a0:15:66:46:f9:48:43:d7:53:60:a7:da:2c:c7:13:35:
         ab:fd:9d:08:82:42:1d:4d:34:66:77:a8:02:4b:12:eb:3d:33:
         85:4b:02:77:ca:2f:91:17:aa:56:67:3c:03:75:08:5a:60:9a:
         82:68:d1:40:1c:2a:b4:f4:b8:10:c5:65:32:ec:ab:69:f1:a1:
         15:04:59:6d:1e:98:b0:70:e9:fb:3b:66:49:60:9e:18:44:ef:
         0e:38:eb:a7:a0:cc:5d:3e:5d:46:97:18:b0:35:48:ab:21:77:
         04:df:18:98:26:18:3d:29:47:01:cf:3c:19:b1:0a:3a:dc:73:
         dd:07:f1:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB56U/l8Al5HvFXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk
ZGFhYTU0MjYtODc5Ni00NjRhLThjMzktYTIyMmRiYWIzYWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmFL1Dq5g9pH/w/kOAw8wDg3N2qEzIGqXwX8
40tS07oPosdK9kvjqbTjqdxzZ2QqrajzFf/RcTCRL7gQROvEDFJPoZsjz6Ay47Hq
DEUUx7L/q0k4LBmfTEKaMEpZHCyfku6gwcNKywLn1byYKk815NZMw3UH8ExcGHeV
ZScAFMD/AIzTJnRhIWZNCaOZeqVF0DEuGf7mCJqwuJidQxYbd4ylfbDdG7M74hP3
6uWhznbpQ844n5jBWL/QOqBUA4molFVOW6yJC+g72smSW2CvbkHpz+rRAnBzKyAj
mJ7+GZh3WEbL2BzRCKnme/h84SNnEYYLh+IvwqCDLaGiVZ3c4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJRRCBNaz/mh0D2w2LFHjl5Bcv9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvNTIwYWNhNjEtY2I4Zi0z
Y2ZjLTk1MzYtNzFiYjI0MjRiM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPZpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABb6p7JaORNUtSY0aSFwf7UWZjLUF+HFQWq0LaHj+zxorsYdgw+w2/74
4sP9rKsEQ1fQtMtaCRfi3lDlVT5hjWFPP3nPO4cRsiLfQAmMznWnBZlGB8T44IQE
WTT/HkXCwYo747irxTrlinQOCnrZeVmuqX5ba/Cp/gngasbF7zCToBVmRvlIQ9dT
YKfaLMcTNav9nQiCQh1NNGZ3qAJLEus9M4VLAnfKL5EXqlZnPAN1CFpgmoJo0UAc
KrT0uBDFZTLsq2nxoRUEWW0emLBw6fs7ZklgnhhE7w4466egzF0+XUaXGLA1SKsh
dwTfGJgmGD0pRwHPPBmxCjrcc90H8Qo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:19:29 2025 by rpki-client