Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa
File:                     86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa (raw, json)
Hash identifier:          tyWD3K0tC6J+bKsfB0ninpGMmf/l8kArnn9bevKqnzw=
Subject key identifier:   8D:8F:A5:B7:FF:64:33:C7:E7:BC:04:DE:A8:39:22:8E:40:11:BC:27
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584A9FFB9E1805DF228170AD5FC0
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     1403
IP address blocks:        104.163.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:9e:18:05:df:22:81:70:ad:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=3d71add2-abce-47a6-b5cd-ec299a0a01f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:99:e9:c0:5b:7c:ec:2b:89:d5:cf:00:e0:a4:
                    19:31:7c:a0:1f:78:0b:76:1f:43:21:28:de:69:ba:
                    f9:e8:ee:0e:98:cb:f1:d1:ae:02:e1:7a:1a:bd:f5:
                    91:08:cb:88:58:49:df:e0:26:8e:44:b3:e3:1c:47:
                    42:d4:64:3b:a9:ab:0e:e2:5f:2f:eb:6f:16:e5:5e:
                    da:9b:44:8b:a1:42:f0:1c:d0:7f:60:8e:e5:70:bb:
                    32:92:c9:39:21:90:29:5f:3b:38:ac:3e:29:ba:42:
                    42:a7:52:a4:b5:08:50:4b:43:29:3f:de:8f:84:dd:
                    88:35:f4:c6:9d:c0:c7:d3:37:7d:89:bb:2b:e0:23:
                    02:b7:6b:36:1e:89:c7:06:75:6e:92:15:53:03:66:
                    06:7d:e5:1a:e7:5d:73:57:25:d9:3d:dc:6a:ff:ce:
                    8e:9f:16:a3:a2:3e:27:d0:c0:8d:bf:57:93:98:f8:
                    d7:b2:b0:56:c0:e3:81:76:70:cb:ee:41:90:fa:ed:
                    b5:77:fd:39:40:76:d8:50:2d:7a:ec:40:0c:a0:2b:
                    c2:bc:b9:c9:9e:78:3d:53:f9:ff:0b:e8:d0:64:cf:
                    74:23:6e:3a:ac:90:42:ac:e3:0a:c5:3a:a5:4a:71:
                    69:c7:42:3a:b2:cd:75:71:8f:78:86:18:a4:a7:ba:
                    cd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8F:A5:B7:FF:64:33:C7:E7:BC:04:DE:A8:39:22:8E:40:11:BC:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/86d1aa82-ca30-364b-9964-c0fddb5b0af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.163.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:75:6f:5b:a3:96:65:1a:22:2b:85:e7:3d:51:63:a7:fc:80:
         ee:e2:d2:c1:9b:e6:f1:bb:1c:02:40:f7:f6:8d:ac:79:f5:d1:
         04:46:93:78:d9:c2:74:45:54:30:d6:cf:8d:7d:dc:30:9f:53:
         be:68:70:2b:8a:f3:b1:d2:15:cc:b0:6d:bc:f7:d3:71:5b:6a:
         d5:8c:83:20:a0:72:04:e0:c2:c3:ff:d9:df:ad:c9:39:48:c8:
         dd:57:e5:7d:e0:5e:32:7c:c4:c1:99:24:c6:57:08:6e:80:39:
         1d:fc:74:2f:db:36:c2:dc:47:80:76:a0:19:30:7f:f6:36:d5:
         72:ec:b4:3c:c8:ba:fb:2b:97:7e:01:38:3b:31:bd:d8:6c:a4:
         bb:bb:fd:27:13:15:4a:93:41:53:74:0f:f3:7b:3e:a8:75:a1:
         ec:bd:90:bf:8b:3c:87:2e:59:77:8e:bb:49:da:c6:18:4c:d9:
         2b:a9:7d:35:59:86:48:1c:a6:ca:b2:d5:03:43:a4:0d:42:ba:
         82:32:d4:ba:9e:e7:0f:c6:15:0d:27:bf:9a:ae:6d:fc:8c:84:
         b8:b7:b3:d7:30:32:05:df:92:fd:d9:2d:b4:e4:55:9d:6b:53:
         87:b8:90:11:d1:7e:9f:a2:7b:92:8a:c0:01:a2:98:16:f8:d0:
         6c:17:bb:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+54YBd8igXCtX8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2
Nzk4MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk
M2Q3MWFkZDItYWJjZS00N2E2LWI1Y2QtZWMyOTlhMGEwMWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZnpwFt87CuJ1c8A4KQZMXygH3gLdh9DISje
abr56O4OmMvx0a4C4XoavfWRCMuIWEnf4CaORLPjHEdC1GQ7qasO4l8v628W5V7a
m0SLoULwHNB/YI7lcLsyksk5IZApXzs4rD4pukJCp1KktQhQS0MpP96PhN2INfTG
ncDH0zd9ibsr4CMCt2s2HonHBnVukhVTA2YGfeUa511zVyXZPdxq/86Onxajoj4n
0MCNv1eTmPjXsrBWwOOBdnDL7kGQ+u21d/05QHbYUC167EAMoCvCvLnJnng9U/n/
C+jQZM90I246rJBCrOMKxTqlSnFpx0I6ss11cY94hhikp7rNCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI2Ppbf/ZDPH57wE3qg5Io5AEbwnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh
YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvODZkMWFhODItY2EzMC0z
NjRiLTk5NjQtYzBmZGRiNWIwYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz
N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj
Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl
YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHaKOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABd1b1ujlmUaIiuF5z1RY6f8gO7i0sGb5vG7HAJA9/aNrHn10QRGk3jZ
wnRFVDDWz4193DCfU75ocCuK87HSFcywbbz303FbatWMgyCgcgTgwsP/2d+tyTlI
yN1X5X3gXjJ8xMGZJMZXCG6AOR38dC/bNsLcR4B2oBkwf/Y21XLstDzIuvsrl34B
ODsxvdhspLu7/ScTFUqTQVN0D/N7Pqh1oey9kL+LPIcuWXeOu0naxhhM2SupfTVZ
hkgcpsqy1QNDpA1CuoIy1Lqe5w/GFQ0nv5qubfyMhLi3s9cwMgXfkv3ZLbTkVZ1r
U4e4kBHRfp+ie5KKwAGimBb40GwXuwA=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:32 2025 by rpki-client