Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/98fca7ba-2033-3ce6-8a92-4bb1c5e0cf9c.roa
File:                     98fca7ba-2033-3ce6-8a92-4bb1c5e0cf9c.roa (raw, json)
Hash identifier:          UIjb3lvbF78QTrnie/XK9aw1IG3mO+NN2fz1sPpaaA0=
Subject key identifier:   CD:4A:F3:60:D4:C9:54:26:40:16:E9:53:87:A6:35:EA:BE:73:EF:DE
Certificate issuer:       /CN=5ff2cbdb-2720-448b-951d-699a8e60cb7d
Certificate serial:       010D0C9F4328584A90A0C3FA9231E090BEC5D750
Authority key identifier: A2:46:63:F9:01:FB:63:EC:13:17:31:16:54:0C:A8:01:5C:7D:10:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/98fca7ba-2033-3ce6-8a92-4bb1c5e0cf9c.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     30679
IP address blocks:        134.71.0.0/16 maxlen: 24
                          2620:df:8000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/5ff2cbdb-2720-448b-951d-699a8e60cb7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/5ff2cbdb-2720-448b-951d-699a8e60cb7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c3:fa:92:31:e0:90:be:c5:d7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff2cbdb-2720-448b-951d-699a8e60cb7d
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=f26306c8-8b67-44b6-b1f8-21cea9cbc0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:13:82:3e:49:14:72:70:64:3b:29:a9:6a:
                    67:0a:a8:8e:80:56:ef:51:00:7c:2c:41:a9:99:55:
                    28:57:dd:54:bc:4b:c5:18:4f:e3:73:0b:1e:83:f9:
                    19:02:72:31:43:5a:74:98:9b:89:46:df:b9:51:67:
                    dd:f3:cc:4d:3c:89:58:7f:73:c3:de:24:91:00:c4:
                    26:e9:54:05:3a:0e:48:4c:8f:e1:84:ff:66:d8:28:
                    ce:9b:c9:ba:a0:60:15:e8:f8:fa:e4:02:0c:0d:f5:
                    44:2b:ac:d4:8b:61:ca:12:55:5e:3a:ad:95:10:6e:
                    7b:84:1e:21:70:cc:3f:cd:ac:a4:d5:5f:37:bc:c6:
                    30:67:bf:50:7b:e7:c3:06:33:11:03:ab:72:32:f0:
                    26:c3:83:a6:a2:e5:a2:34:22:10:da:d7:d7:c2:38:
                    01:4c:f1:7d:09:76:01:0c:7e:f9:a6:4d:7f:45:eb:
                    ed:0a:7c:c7:b2:4f:46:2e:31:ef:7a:a0:f7:05:a4:
                    6e:68:45:dd:16:28:80:4d:f4:08:13:fd:39:dc:0b:
                    7e:eb:4f:09:86:09:3a:22:ed:7d:51:c6:cc:70:45:
                    2a:b8:76:b0:6d:fc:ad:03:2c:55:e3:08:1c:76:fc:
                    30:ad:ef:22:e8:e6:fc:69:40:5b:96:cc:3d:b2:11:
                    ee:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4A:F3:60:D4:C9:54:26:40:16:E9:53:87:A6:35:EA:BE:73:EF:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/98fca7ba-2033-3ce6-8a92-4bb1c5e0cf9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/5ff2cbdb-2720-448b-951d-699a8e60cb7d.crl

            X509v3 Authority Key Identifier:
                keyid:A2:46:63:F9:01:FB:63:EC:13:17:31:16:54:0C:A8:01:5C:7D:10:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.71.0.0/16
                IPv6:
                  2620:df:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:72:bc:a4:53:ed:96:22:15:d9:4a:db:99:c3:db:00:75:4b:
         b5:32:14:46:1a:a0:c0:22:bb:1c:c2:47:fd:aa:92:ae:09:f7:
         32:ff:a8:7f:b1:e1:ed:1b:d5:90:55:87:06:00:55:c8:0e:cb:
         c2:d3:18:e7:26:fc:4c:4b:a7:a8:29:42:57:11:62:4e:af:8d:
         8e:ab:af:ca:ca:2d:17:d3:30:c1:2d:48:d6:a2:70:87:96:d9:
         76:98:5a:3b:38:bc:7f:7c:bc:47:70:49:13:2d:e5:fc:6e:04:
         c9:af:e1:dd:84:a5:d8:b7:80:30:10:48:91:62:09:3b:f8:94:
         e1:57:08:33:6d:b8:9d:4a:87:9f:cc:0e:01:49:31:26:ba:9f:
         c5:7a:5f:ac:3d:b5:7d:d8:cf:7d:2b:bb:56:61:30:c4:8a:9a:
         f0:4e:11:c5:0b:ea:b0:ba:42:9c:1e:3a:0b:3a:06:93:70:8b:
         f7:73:e5:f2:97:b5:a2:53:18:43:e1:d4:20:9c:b5:ea:0a:39:
         0b:0f:9a:b4:61:93:3b:b9:f4:86:a3:c3:8b:0b:c3:79:ac:c6:
         4d:d0:11:61:b9:4d:87:b9:84:8a:eb:b4:8e:4e:8f:49:79:58:
         9b:fd:64:dd:e6:3a:56:dd:b6:09:fb:4e:03:77:77:00:f0:38:
         e9:1f:54:3a
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEqQoMP6kjHgkL7F11AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWZmMmNiZGItMjcyMC00NDhiLTk1MWQtNjk5YThlNjBj
YjdkMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
ZjI2MzA2YzgtOGI2Ny00NGI2LWIxZjgtMjFjZWE5Y2JjMGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs4Tgj5JFHJwZDspqWpnCqiOgFbvUQB8LEGp
mVUoV91UvEvFGE/jcwseg/kZAnIxQ1p0mJuJRt+5UWfd88xNPIlYf3PD3iSRAMQm
6VQFOg5ITI/hhP9m2CjOm8m6oGAV6Pj65AIMDfVEK6zUi2HKElVeOq2VEG57hB4h
cMw/zayk1V83vMYwZ79Qe+fDBjMRA6tyMvAmw4OmouWiNCIQ2tfXwjgBTPF9CXYB
DH75pk1/RevtCnzHsk9GLjHveqD3BaRuaEXdFiiATfQIE/053At+608Jhgk6Iu19
UcbMcEUquHawbfytAyxV4wgcdvwwre8i6Ob8aUBblsw9shHuiQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFM1K82DUyVQmQBbpU4emNeq+c+/eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmYy
Y2JkYi0yNzIwLTQ0OGItOTUxZC02OTlhOGU2MGNiN2QvOThmY2E3YmEtMjAzMy0z
Y2U2LThhOTItNGJiMWM1ZTBjZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWZmMmNiZGItMjcyMC00NDhiLTk1
MWQtNjk5YThlNjBjYjdkLzVmZjJjYmRiLTI3MjAtNDQ4Yi05NTFkLTY5OWE4ZTYw
Y2I3ZC5jcmwwHwYDVR0jBBgwFoAUokZj+QH7Y+wTFzEWVAyoAVx9EGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmYyY2JkYi0yNzIwLTQ0OGItOTUxZC02OTlh
OGU2MGNiN2QuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjALBAIAATAFAwMAhkcwDwQC
AAIwCQMHBCYgAN+AADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCycrykU+2WIhXZStuZw9sAdUu1MhRGGqDA
Irscwkf9qpKuCfcy/6h/seHtG9WQVYcGAFXIDsvC0xjnJvxMS6eoKUJXEWJOr42O
q6/Kyi0X0zDBLUjWonCHltl2mFo7OLx/fLxHcEkTLeX8bgTJr+HdhKXYt4AwEEiR
Ygk7+JThVwgzbbidSoefzA4BSTEmup/Fel+sPbV92M99K7tWYTDEiprwThHFC+qw
ukKcHjoLOgaTcIv3c+Xyl7WiUxhD4dQgnLXqCjkLD5q0YZM7ufSGo8OLC8N5rMZN
0BFhuU2HuYSK67SOTo9JeVib/WTd5jpW3bYJ+04Dd3cA8DjpH1Q6
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:35 2025 by rpki-client