Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa
File:                     02650ceb-0044-3d70-b562-731c5b82412a.roa (raw, json)
Hash identifier:          weysM5Cw1ntbzh6gf75stWCOA0M0EIb0wuafpjSTmvs=
Subject key identifier:   BF:94:F4:13:D5:37:AA:CF:7B:5D:91:FB:3D:7F:CC:16:C0:6C:06:CB
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584AB220DF3B7F89CFBCC524F380
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     16839
IP address blocks:        149.96.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:df:3b:7f:89:cf:bc:c5:24:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=354e79d8-36ed-4d61-8d41-80df86790909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8e:71:f4:ad:ed:98:81:9d:c4:5c:47:9c:c0:
                    ae:64:3a:ba:df:2b:1d:7e:b0:62:42:e9:f5:e4:3f:
                    03:a7:04:d9:6c:c6:0e:24:36:ca:e8:6e:43:94:72:
                    b6:57:2d:19:8f:b0:d3:d6:71:3a:ae:91:09:26:86:
                    4a:0f:6f:fd:af:11:7f:6c:88:b4:41:27:06:d5:56:
                    12:46:7a:4a:9a:8c:f3:c2:46:8d:f5:b0:0b:dc:27:
                    a2:4c:c5:e1:5a:3b:50:5c:7f:d2:10:65:47:c0:52:
                    88:21:15:77:d5:70:14:d0:d5:bc:bd:25:fd:4a:fd:
                    68:f5:55:18:35:ad:ca:37:c9:84:28:0c:57:2b:b9:
                    87:a3:2d:98:49:f5:71:30:a1:68:34:a1:9a:70:09:
                    22:87:15:98:6a:f0:08:f7:03:89:25:ce:da:11:fa:
                    4f:c2:37:48:77:b5:bc:d2:85:b1:ee:e4:51:a4:dd:
                    7a:fd:34:2e:68:0b:1f:ea:29:64:6d:f0:1a:82:95:
                    12:35:64:2e:87:b8:05:ca:0b:3e:6b:ea:59:7f:c0:
                    a8:02:03:c2:85:bb:08:02:ca:d0:39:03:c8:6b:4c:
                    5b:6f:e2:09:cf:03:37:61:cd:41:33:8a:79:3a:76:
                    d9:83:19:62:41:c7:ad:25:56:2e:3a:7b:08:b0:13:
                    69:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:94:F4:13:D5:37:AA:CF:7B:5D:91:FB:3D:7F:CC:16:C0:6C:06:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/02650ceb-0044-3d70-b562-731c5b82412a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ff:55:97:98:04:ec:a7:ad:06:9a:66:51:1e:67:26:d8:63:
         fa:eb:10:36:08:38:34:ab:30:0f:85:8d:52:16:03:1b:b4:36:
         b3:34:f8:2c:99:d7:b8:3d:5b:ae:93:c8:61:95:71:61:a0:0e:
         17:80:75:13:22:f4:e4:c0:30:fc:1c:da:54:28:5a:ea:fe:bd:
         07:59:5a:51:42:bd:0d:e5:8b:b3:8a:6d:db:e8:48:3e:be:3c:
         55:28:97:02:f9:f4:09:f2:8d:95:fa:17:17:9c:a4:f9:40:64:
         0b:c0:c2:8a:e6:38:c3:ee:0b:c5:fd:15:43:2b:3c:f2:90:82:
         91:64:88:1f:dc:f1:fb:fd:3f:a8:0c:55:22:fa:02:05:27:cd:
         3b:42:35:e9:f6:bd:a9:db:43:47:d4:8f:ac:c6:5e:fe:44:3e:
         5f:6e:7c:c5:58:71:0c:95:b9:fb:d1:fa:5b:07:8a:b7:a1:dd:
         6f:b1:d1:d5:85:39:df:a7:b1:98:c9:bd:ac:91:6f:e8:15:53:
         f0:10:56:56:c9:f5:3c:a9:94:85:9c:d7:ce:16:a3:d8:d4:8d:
         7c:5c:c0:56:12:cf:2a:02:2b:d4:92:e7:6d:03:db:40:f6:5e:
         97:a1:65:02:f2:e7:6c:05:07:cc:42:a4:46:6c:1c:cf:26:ea:
         db:f5:00:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIN87f4nPvMUk84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MzU0ZTc5ZDgtMzZlZC00ZDYxLThkNDEtODBkZjg2NzkwOTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI5x9K3tmIGdxFxHnMCuZDq63ysdfrBiQun1
5D8DpwTZbMYOJDbK6G5DlHK2Vy0Zj7DT1nE6rpEJJoZKD2/9rxF/bIi0QScG1VYS
RnpKmozzwkaN9bAL3CeiTMXhWjtQXH/SEGVHwFKIIRV31XAU0NW8vSX9Sv1o9VUY
Na3KN8mEKAxXK7mHoy2YSfVxMKFoNKGacAkihxWYavAI9wOJJc7aEfpPwjdId7W8
0oWx7uRRpN16/TQuaAsf6ilkbfAagpUSNWQuh7gFygs+a+pZf8CoAgPChbsIAsrQ
OQPIa0xbb+IJzwM3Yc1BM4p5OnbZgxliQcetJVYuOnsIsBNpSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL+U9BPVN6rPe12R+z1/zBbAbAbLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDI2NTBjZWItMDA0NC0z
ZDcwLWI1NjItNzMxYzViODI0MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKH/VZeYBOynrQaaZlEeZybYY/rrEDYIODSrMA+FjVIWAxu0NrM0+CyZ
17g9W66TyGGVcWGgDheAdRMi9OTAMPwc2lQoWur+vQdZWlFCvQ3li7OKbdvoSD6+
PFUolwL59AnyjZX6FxecpPlAZAvAwormOMPuC8X9FUMrPPKQgpFkiB/c8fv9P6gM
VSL6AgUnzTtCNen2vanbQ0fUj6zGXv5EPl9ufMVYcQyVufvR+lsHireh3W+x0dWF
Od+nsZjJvayRb+gVU/AQVlbJ9TyplIWc184Wo9jUjXxcwFYSzyoCK9SS520D20D2
XpehZQLy52wFB8xCpEZsHM8m6tv1AI8=
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:47:37 2025 by rpki-client