Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/afc599f9-cadc-3568-a1ec-95c3cd7ebc53.roa
File:                     afc599f9-cadc-3568-a1ec-95c3cd7ebc53.roa (raw, json)
Hash identifier:          uF43OxqRH42m5dOfLNdZe9lb1cxtdqTmRAyDB8A71pY=
Subject key identifier:   5F:F4:16:8A:96:B2:C7:86:35:38:7C:58:5A:E4:E8:34:2B:69:11:DF
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584AAB2651F19FF2C89DC25DAFC0
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/afc599f9-cadc-3568-a1ec-95c3cd7ebc53.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     55992
IP address blocks:        104.192.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:51:f1:9f:f2:c8:9d:c2:5d:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=60648ba5-6588-4e76-b093-77de07eac278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:30:c9:90:a8:f2:8e:fb:db:02:16:62:28:
                    63:39:f1:a5:8d:66:8e:ea:56:eb:70:e2:93:af:25:
                    59:b1:fc:9e:0e:fa:5b:3e:52:ea:88:12:22:02:58:
                    f3:26:1f:27:b0:c0:cb:32:73:c0:b2:bd:3e:44:68:
                    42:ac:20:1e:9e:b2:30:b4:1c:d6:b9:0c:42:74:94:
                    0d:a5:0c:ed:fd:3b:a6:9b:43:38:bf:2c:47:f5:4f:
                    c3:78:e6:b8:69:b5:2c:90:ba:a3:dc:79:de:b1:66:
                    35:49:34:f2:ec:88:34:60:26:67:fa:61:b2:69:d8:
                    89:a6:02:0a:b5:70:63:de:71:62:03:07:65:15:31:
                    50:a0:00:77:a3:73:d6:2d:a2:19:4e:a2:35:0c:50:
                    2b:1b:6a:b8:a2:87:94:45:04:6c:f4:b4:af:cb:e4:
                    ce:cd:44:87:7b:83:10:0a:ce:40:c4:4d:08:2d:d1:
                    9b:6d:2e:08:aa:9d:f2:f7:29:34:37:ad:a7:f2:1c:
                    98:24:d8:c0:d7:44:dc:de:6a:a3:8c:05:74:14:f1:
                    38:f6:75:a0:d5:33:41:f4:cd:fc:23:b0:3f:2a:a2:
                    6c:dc:ec:62:5f:b8:3a:b5:d9:7f:e9:e9:8b:d1:a4:
                    5a:85:e9:af:50:f2:d9:05:e7:44:69:29:64:16:76:
                    16:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F4:16:8A:96:B2:C7:86:35:38:7C:58:5A:E4:E8:34:2B:69:11:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/afc599f9-cadc-3568-a1ec-95c3cd7ebc53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:c9:44:de:fd:1e:01:cc:f9:6b:fb:90:d3:40:5e:87:87:32:
         97:31:c0:93:0e:5e:f0:3c:48:98:8a:4b:fc:c1:68:db:a8:92:
         9b:b9:63:28:08:31:ae:23:76:f1:a0:8c:90:4a:92:df:65:45:
         df:b4:dd:40:4b:2d:f6:af:e9:fd:81:e1:3b:2b:dc:58:8b:67:
         07:17:91:19:64:65:c0:ba:02:e9:3f:00:53:61:58:ae:a3:fa:
         ba:63:f9:95:56:12:f7:b9:96:6e:0c:36:9e:ab:29:11:b6:9f:
         03:c3:ae:a5:fc:10:a7:f8:fb:0b:87:ac:fb:94:54:52:04:84:
         35:a1:15:29:d1:18:39:fc:94:7e:ba:7f:76:e9:5f:e5:54:90:
         1c:68:d6:b2:cd:3d:a8:36:f2:ef:84:84:89:a0:17:57:4c:d8:
         a7:71:c8:6a:b5:71:22:3e:49:0e:99:53:0f:50:01:36:be:07:
         03:98:44:4a:62:72:d8:28:38:35:f2:98:5f:25:7a:f5:5c:83:
         c4:3c:c6:a1:f2:a9:f9:40:c4:20:74:0c:22:ad:4a:81:dc:ee:
         b1:46:22:cc:9a:be:26:24:96:59:35:01:9b:4f:2f:ec:c9:e0:
         a3:42:bf:71:b4:d2:96:3f:b0:2b:5e:3f:5e:75:59:49:6b:02:
         88:a8:36:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlHxn/LIncJdr8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl
Y2FmMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NjA2NDhiYTUtNjU4OC00ZTc2LWIwOTMtNzdkZTA3ZWFjMjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGowyZCo8o772wIWYihjOfGljWaO6lbrcOKT
ryVZsfyeDvpbPlLqiBIiAljzJh8nsMDLMnPAsr0+RGhCrCAenrIwtBzWuQxCdJQN
pQzt/Tumm0M4vyxH9U/DeOa4abUskLqj3HnesWY1STTy7Ig0YCZn+mGyadiJpgIK
tXBj3nFiAwdlFTFQoAB3o3PWLaIZTqI1DFArG2q4ooeURQRs9LSvy+TOzUSHe4MQ
Cs5AxE0ILdGbbS4Iqp3y9yk0N62n8hyYJNjA10Tc3mqjjAV0FPE49nWg1TNB9M38
I7A/KqJs3OxiX7g6tdl/6emL0aRahemvUPLZBedEaSlkFnYWnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/0FoqWsseGNTh8WFrk6DQraRHfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj
ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvYWZjNTk5ZjktY2FkYy0z
NTY4LWExZWMtOTVjM2NkN2ViYzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5
NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4
ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1
ZmY3OGVjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMBsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALzJRN79HgHM+Wv7kNNAXoeHMpcxwJMOXvA8SJiKS/zBaNuokpu5YygI
Ma4jdvGgjJBKkt9lRd+03UBLLfav6f2B4Tsr3FiLZwcXkRlkZcC6Auk/AFNhWK6j
+rpj+ZVWEve5lm4MNp6rKRG2nwPDrqX8EKf4+wuHrPuUVFIEhDWhFSnRGDn8lH66
f3bpX+VUkBxo1rLNPag28u+EhImgF1dM2KdxyGq1cSI+SQ6ZUw9QATa+BwOYREpi
ctgoODXymF8levVcg8Q8xqHyqflAxCB0DCKtSoHc7rFGIsyaviYkllk1AZtPL+zJ
4KNCv3G00pY/sCteP151WUlrAoioNqk=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:01:56 2025 by rpki-client