Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/16ae4c60-d4fd-3f64-99a0-859eb6099c14.roa
File:                     16ae4c60-d4fd-3f64-99a0-859eb6099c14.roa (raw, json)
Hash identifier:          yC0yijeFN8sEkaZAREW5uNQ54R3NMOQaVP6BFTPzhnc=
Subject key identifier:   8C:84:9B:FD:1B:B0:17:96:03:5A:DA:0E:4E:6E:69:3C:A6:FF:5D:2D
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328584AA85BB6820D66305B0DEDBB00
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/16ae4c60-d4fd-3f64-99a0-859eb6099c14.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     397032
IP address blocks:        208.87.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:b6:82:0d:66:30:5b:0d:ed:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=13747e10-7238-4e7f-bc56-aa53839170f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:47:4b:e6:27:3e:ea:86:c4:cd:97:f0:cb:d9:
                    b6:14:d0:3c:cd:8a:e4:fb:a5:83:af:16:80:d0:f2:
                    6d:a5:4a:69:89:fd:ab:8d:92:c7:9b:47:86:3d:aa:
                    f7:21:e3:fd:ac:01:28:4e:83:4d:29:9b:49:68:ec:
                    92:45:c7:a9:81:7a:4b:9f:c7:88:15:ac:f0:02:c6:
                    7e:97:a4:05:7a:67:76:28:46:72:c7:25:82:48:aa:
                    35:1b:75:1b:1b:03:e1:6a:d0:4e:bf:24:25:ca:7e:
                    69:db:1e:c6:3d:ac:ed:c1:45:d1:8a:dc:ae:a4:03:
                    58:eb:c3:8f:a5:d7:d6:03:2c:07:de:34:72:28:e8:
                    d9:d8:0c:92:bd:e1:52:90:e3:0b:ef:58:1a:34:af:
                    a4:b5:0d:7a:55:70:e3:18:89:48:41:1f:66:b1:aa:
                    62:d1:f0:89:3b:b2:5a:f5:60:fa:59:9f:56:51:68:
                    71:b6:38:3f:9f:95:a4:16:2f:25:f7:fe:e7:c4:2a:
                    81:4d:80:d8:d1:7c:ea:72:38:05:35:b0:c5:ae:37:
                    c8:ea:a8:eb:bd:9e:8c:d5:1e:4a:50:1c:43:5e:43:
                    72:88:6d:89:a1:e9:fc:ab:f6:b6:a9:c6:1a:0b:f0:
                    8a:27:e2:88:5f:ef:10:98:97:34:23:6f:ed:6b:8b:
                    38:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:84:9B:FD:1B:B0:17:96:03:5A:DA:0E:4E:6E:69:3C:A6:FF:5D:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/16ae4c60-d4fd-3f64-99a0-859eb6099c14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.87.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:dd:6d:ee:16:68:94:45:a0:41:82:8d:ac:fa:ce:18:2c:f8:
         f5:a7:2c:38:fb:1e:c5:df:fb:1f:6c:d4:56:1f:b3:34:c1:cf:
         2f:aa:67:04:ec:12:b2:f7:11:d8:b1:bf:00:31:a2:ef:c1:e6:
         6c:ca:15:f0:e4:0d:6b:12:40:17:98:62:26:60:75:8d:6d:e0:
         66:55:93:7f:75:ac:d0:4f:16:cf:91:83:97:c2:cc:a9:54:3e:
         45:96:39:40:6a:24:da:08:30:70:35:9d:ef:43:eb:af:4c:62:
         52:b6:46:11:dc:1e:ca:06:ff:e8:fa:9f:73:28:8a:45:a2:4b:
         de:40:41:45:06:72:68:25:e5:de:b7:0d:1b:84:16:1e:5e:fa:
         5e:64:7d:63:a4:92:d5:db:2f:6c:fc:17:46:b3:e9:4a:b5:ee:
         42:e8:86:e3:3f:d6:d7:ca:ce:f5:8d:d2:1b:73:da:58:e5:c3:
         e9:59:b7:eb:11:36:f2:9e:90:07:d9:07:fe:35:86:b8:0f:a4:
         b3:2b:c4:2f:de:fc:b6:d9:16:79:7d:22:05:49:84:ee:26:b6:
         b1:6d:32:c0:65:da:07:44:43:30:33:fa:9b:89:1b:22:d2:46:
         58:68:ff:37:b7:8d:1f:64:d3:92:f4:54:e5:b2:42:7c:5f:44:
         aa:a3:0d:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7aCDWYwWw3tuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3
NGJjMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk
MTM3NDdlMTAtNzIzOC00ZTdmLWJjNTYtYWE1MzgzOTE3MGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUdL5ic+6obEzZfwy9m2FNA8zYrk+6WDrxaA
0PJtpUppif2rjZLHm0eGPar3IeP9rAEoToNNKZtJaOySRcepgXpLn8eIFazwAsZ+
l6QFemd2KEZyxyWCSKo1G3UbGwPhatBOvyQlyn5p2x7GPaztwUXRityupANY68OP
pdfWAywH3jRyKOjZ2AySveFSkOML71gaNK+ktQ16VXDjGIlIQR9msapi0fCJO7Ja
9WD6WZ9WUWhxtjg/n5WkFi8l9/7nxCqBTYDY0XzqcjgFNbDFrjfI6qjrvZ6M1R5K
UBxDXkNyiG2Joen8q/a2qcYaC/CKJ+KIX+8QmJc0I2/ta4s4BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIyEm/0bsBeWA1raDk5uaTym/10tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2
NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvMTZhZTRjNjAtZDRmZC0z
ZjY0LTk5YTAtODU5ZWI2MDk5YzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm
MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl
NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5
NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FdlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFndbe4WaJRFoEGCjaz6zhgs+PWnLDj7HsXf+x9s1FYfszTBzy+qZwTs
ErL3EdixvwAxou/B5mzKFfDkDWsSQBeYYiZgdY1t4GZVk391rNBPFs+Rg5fCzKlU
PkWWOUBqJNoIMHA1ne9D669MYlK2RhHcHsoG/+j6n3MoikWiS95AQUUGcmgl5d63
DRuEFh5e+l5kfWOkktXbL2z8F0az6Uq17kLohuM/1tfKzvWN0htz2ljlw+lZt+sR
NvKekAfZB/41hrgPpLMrxC/e/LbZFnl9IgVJhO4mtrFtMsBl2gdEQzAz+puJGyLS
Rlho/ze3jR9k05L0VOWyQnxfRKqjDXo=
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:05:29 2025 by rpki-client