Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/5b93e980-32ed-38bb-99b8-e4418c3b0d4f.roa
File:                     5b93e980-32ed-38bb-99b8-e4418c3b0d4f.roa (raw, json)
Hash identifier:          IXDRu4LEt/UoHmv4x/oifKZ8OEry8ZncMV187Dlmc90=
Subject key identifier:   1A:66:D7:16:B5:CE:C4:AE:A5:97:72:C5:CC:EF:CA:57:ED:4E:CB:62
Certificate issuer:       /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial:       010D0C9F4328584AB91C06A63136C50982E76C80
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/5b93e980-32ed-38bb-99b8-e4418c3b0d4f.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     26658
IP address blocks:        172.87.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1c:06:a6:31:36:c5:09:82:e7:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=63238f4e-54e8-4f99-9091-be342c846824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:c7:24:09:86:ba:aa:39:14:5f:68:5a:9e:
                    dc:6a:e0:05:f1:45:a7:23:bf:c7:67:6c:92:c2:06:
                    cb:75:8b:a9:56:eb:8c:62:a0:df:47:2e:c2:05:09:
                    e6:7d:b6:eb:11:e2:76:69:71:82:e9:92:41:a4:55:
                    e5:30:32:b4:c8:db:e0:b7:61:2b:c9:bf:7f:e4:e8:
                    99:e3:74:cd:69:53:d4:f7:8f:60:6c:b8:e5:1c:14:
                    c6:8c:a0:74:60:7d:2f:b0:fe:14:9d:86:21:59:8c:
                    62:ff:46:9b:ea:87:f8:62:14:47:37:2c:c9:58:7f:
                    a8:92:8b:dd:3c:db:db:1c:f5:12:8a:c8:c8:91:40:
                    98:21:0e:bc:b4:bb:44:2d:7a:56:de:69:68:10:0c:
                    35:69:26:0f:d5:cb:98:30:33:dd:b2:d6:d9:3d:87:
                    b0:e7:98:fc:b7:33:c3:1f:b4:88:76:ed:b1:68:65:
                    cf:e2:b3:3f:3a:2d:46:88:56:dc:f9:a9:f9:d4:cc:
                    fe:5e:ba:9a:fd:62:7f:d9:f9:87:95:1a:65:bc:82:
                    69:48:4e:9c:8f:14:d9:30:03:2b:07:93:1c:0c:fe:
                    b7:78:68:56:77:8d:18:31:0f:57:d0:ca:97:9f:bb:
                    2f:da:5e:2d:41:7e:a9:24:43:55:14:d8:c0:75:cb:
                    80:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:66:D7:16:B5:CE:C4:AE:A5:97:72:C5:CC:EF:CA:57:ED:4E:CB:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/5b93e980-32ed-38bb-99b8-e4418c3b0d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl

            X509v3 Authority Key Identifier:
                keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.87.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:fe:a9:53:f4:7c:f1:de:6d:ff:0c:5e:35:4c:19:52:8e:f5:
         7d:c9:f7:2d:b1:d0:58:8d:e8:bd:14:e1:be:3c:b4:c1:67:1c:
         2f:c9:1c:80:fb:43:c3:dc:7c:22:3f:4c:d3:80:3f:71:e5:cb:
         b6:27:20:95:8f:23:1f:c1:2e:0e:43:24:96:66:b1:41:93:fc:
         d2:b7:f4:68:7a:c8:e9:a7:35:e1:6f:90:a4:4e:ff:b6:57:bd:
         8f:e1:8c:e8:9d:ec:81:b3:4b:db:8a:0c:5d:8e:26:67:92:12:
         55:93:da:11:a8:06:fd:0e:ee:42:33:9a:30:e6:1e:87:e9:eb:
         05:74:8d:ab:4f:20:69:dd:cf:6d:8b:a4:b5:5c:8c:d3:3f:50:
         a3:46:fe:15:a6:0a:7e:b7:d8:b2:51:51:f0:14:8b:8e:28:cd:
         8f:bb:44:d0:80:11:fd:c4:48:3f:e7:50:cd:b7:60:6d:1d:2e:
         f1:3e:b6:d9:91:61:07:60:ea:11:34:97:51:4f:47:58:5c:7f:
         e6:08:c9:94:e8:8c:d7:c6:0e:87:00:7d:5e:59:7e:8b:e2:35:
         8f:14:20:ac:06:d9:86:e7:ba:c4:5b:33:9a:09:14:fb:32:12:
         ae:c1:72:8c:9b:a1:0a:75:56:0b:31:0b:ea:98:d6:d0:90:4e:
         2a:7f:b4:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5HAamMTbFCYLnbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0
YTZkMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
NjMyMzhmNGUtNTRlOC00Zjk5LTkwOTEtYmUzNDJjODQ2ODI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSbHJAmGuqo5FF9oWp7cauAF8UWnI7/HZ2yS
wgbLdYupVuuMYqDfRy7CBQnmfbbrEeJ2aXGC6ZJBpFXlMDK0yNvgt2Eryb9/5OiZ
43TNaVPU949gbLjlHBTGjKB0YH0vsP4UnYYhWYxi/0ab6of4YhRHNyzJWH+okovd
PNvbHPUSisjIkUCYIQ68tLtELXpW3mloEAw1aSYP1cuYMDPdstbZPYew55j8tzPD
H7SIdu2xaGXP4rM/Oi1GiFbc+an51Mz+Xrqa/WJ/2fmHlRplvIJpSE6cjxTZMAMr
B5McDP63eGhWd40YMQ9X0MqXn7sv2l4tQX6pJENVFNjAdcuA7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBpm1xa1zsSupZdyxczvylftTstiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5
YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNWI5M2U5ODAtMzJlZC0z
OGJiLTk5YjgtZTQ0MThjM2IwZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj
ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2
NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3
MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFfAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7+qVP0fPHebf8MXjVMGVKO9X3J9y2x0FiN6L0U4b48tMFnHC/JHID7
Q8PcfCI/TNOAP3Hly7YnIJWPIx/BLg5DJJZmsUGT/NK39Gh6yOmnNeFvkKRO/7ZX
vY/hjOid7IGzS9uKDF2OJmeSElWT2hGoBv0O7kIzmjDmHofp6wV0jatPIGndz22L
pLVcjNM/UKNG/hWmCn632LJRUfAUi44ozY+7RNCAEf3ESD/nUM23YG0dLvE+ttmR
YQdg6hE0l1FPR1hcf+YIyZTojNfGDocAfV5ZfoviNY8UIKwG2YbnusRbM5oJFPsy
Eq7BcoyboQp1VgsxC+qY1tCQTip/tGU=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:53:24 2025 by rpki-client