Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/964be708-8db0-3109-a3f0-00b2143ad58f.roa
File:                     964be708-8db0-3109-a3f0-00b2143ad58f.roa (raw, json)
Hash identifier:          Y8n3w2Z7vroQGrAC7WJ3gaoJGrJ9GcX3aJfc6C7S6is=
Subject key identifier:   41:19:3D:92:21:99:A6:54:15:72:F0:3F:4A:E2:9A:A1:B7:28:ED:8C
Certificate issuer:       /CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
Certificate serial:       010D0C9F4328584AB220DC6CA8F6E5CC355E8A40
Authority key identifier: 78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/964be708-8db0-3109-a3f0-00b2143ad58f.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     53316
IP address blocks:        207.251.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:dc:6c:a8:f6:e5:cc:35:5e:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=41333d03-8ee3-4303-b014-14cdba9e65b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:74:8b:26:ae:22:dc:28:8b:00:e6:10:d4:
                    f9:af:b5:30:84:39:f2:32:8a:93:04:56:22:c8:e9:
                    ee:3d:be:bd:d6:5d:1d:ff:bd:b0:af:e3:e7:ac:72:
                    0e:09:9f:2b:f5:2c:3b:78:18:07:7f:85:3c:60:42:
                    8f:90:ce:4f:f0:8f:b6:30:c5:da:82:d6:5a:9b:2c:
                    f0:ab:58:d6:d0:b5:9c:5b:a3:b5:32:07:b6:6c:1d:
                    3c:f5:2d:d8:f0:b3:2c:08:c5:40:e4:27:78:f6:d8:
                    3b:c4:b9:f1:d9:cc:ff:95:85:1c:f8:45:34:c8:93:
                    29:df:64:9d:8b:b4:fb:7b:2b:b8:2e:68:6c:30:a9:
                    ef:fb:de:8c:32:3a:ef:a2:aa:a6:f8:ba:8f:11:f7:
                    98:dd:65:db:83:bc:d1:2e:44:71:6d:1e:6e:0a:5a:
                    c5:ef:d0:0e:ce:02:72:09:45:67:c1:e3:6a:53:9b:
                    cf:28:43:95:b1:43:b4:41:59:5f:d4:61:e1:62:b8:
                    2c:d1:36:12:76:ce:6c:22:6b:f3:01:c8:4b:82:17:
                    f7:82:af:0c:79:74:12:20:8b:e7:0b:68:b7:c1:34:
                    81:72:d7:82:77:7a:8d:f7:93:37:f1:03:f2:cd:32:
                    71:a6:3b:0e:61:e4:84:b7:6c:e9:8c:e8:5c:cb:1e:
                    04:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:19:3D:92:21:99:A6:54:15:72:F0:3F:4A:E2:9A:A1:B7:28:ED:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/964be708-8db0-3109-a3f0-00b2143ad58f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl

            X509v3 Authority Key Identifier:
                keyid:78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.251.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:21:11:60:54:71:8a:94:6c:f1:d6:80:8e:83:ae:54:16:c2:
         21:96:d9:33:fd:56:c8:82:9b:ae:1e:96:f0:49:d0:ba:8b:fd:
         49:91:04:69:36:e6:48:96:64:d5:4d:95:e3:8d:f8:91:f9:8d:
         99:7a:84:ac:ab:73:35:1b:20:73:04:0d:f1:88:fe:7d:96:e0:
         75:78:19:96:e3:4b:10:9f:c0:5f:82:49:43:6d:7d:38:45:66:
         aa:f4:c5:33:f5:a2:96:68:7b:84:31:d1:ec:3a:4a:04:b3:90:
         44:96:2b:5e:c2:ee:c0:c2:74:77:3c:0c:3b:12:fc:0a:3d:52:
         96:e0:21:05:83:60:d7:22:5e:b7:c4:7e:44:fb:81:0e:7e:52:
         82:07:aa:3b:2a:60:f1:a9:58:bd:b1:bf:3d:ae:75:ac:c0:c8:
         d7:ef:d3:b8:41:4f:92:15:86:fa:9b:f4:e0:3a:85:02:10:50:
         28:98:2b:b3:29:cc:e8:0f:6f:50:0b:01:f6:cf:b5:c0:c1:6f:
         62:be:9a:a7:21:14:0a:cc:41:2f:8c:ba:ca:10:41:36:1e:f9:
         24:63:cf:3e:b0:fa:15:79:99:c1:f9:68:b5:6b:4c:04:c1:8a:
         88:cf:31:5e:4c:6c:be:4e:50:13:ff:10:f5:da:16:e0:8c:e6:
         45:a2:bb:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyINxsqPblzDVeikAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGNiNTNmMDEtYjlhNC00YTAxLWIzODQtMWQ0MGY1NTY4
N2I0MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NDEzMzNkMDMtOGVlMy00MzAzLWIwMTQtMTRjZGJhOWU2NWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XF0iyauItwoiwDmENT5r7UwhDnyMoqTBFYi
yOnuPb691l0d/72wr+PnrHIOCZ8r9Sw7eBgHf4U8YEKPkM5P8I+2MMXagtZamyzw
q1jW0LWcW6O1Mge2bB089S3Y8LMsCMVA5Cd49tg7xLnx2cz/lYUc+EU0yJMp32Sd
i7T7eyu4LmhsMKnv+96MMjrvoqqm+LqPEfeY3WXbg7zRLkRxbR5uClrF79AOzgJy
CUVnweNqU5vPKEOVsUO0QVlf1GHhYrgs0TYSds5sImvzAchLghf3gq8MeXQSIIvn
C2i3wTSBcteCd3qN95M38QPyzTJxpjsOYeSEt2zpjOhcyx4EbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEEZPZIhmaZUFXLwP0rimqG3KO2MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wY2I1
M2YwMS1iOWE0LTRhMDEtYjM4NC0xZDQwZjU1Njg3YjQvOTY0YmU3MDgtOGRiMC0z
MTA5LWEzZjAtMDBiMjE0M2FkNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGNiNTNmMDEtYjlhNC00YTAxLWIz
ODQtMWQ0MGY1NTY4N2I0LzBjYjUzZjAxLWI5YTQtNGEwMS1iMzg0LTFkNDBmNTU2
ODdiNC5jcmwwHwYDVR0jBBgwFoAUeOpfajg4lXtIKaCxSzWYB/kQbOowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wY2I1M2YwMS1iOWE0LTRhMDEtYjM4NC0xZDQw
ZjU1Njg3YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz/tgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEchEWBUcYqUbPHWgI6DrlQWwiGW2TP9VsiCm64elvBJ0LqL/UmRBGk2
5kiWZNVNleON+JH5jZl6hKyrczUbIHMEDfGI/n2W4HV4GZbjSxCfwF+CSUNtfThF
Zqr0xTP1opZoe4Qx0ew6SgSzkESWK17C7sDCdHc8DDsS/Ao9UpbgIQWDYNciXrfE
fkT7gQ5+UoIHqjsqYPGpWL2xvz2udazAyNfv07hBT5IVhvqb9OA6hQIQUCiYK7Mp
zOgPb1ALAfbPtcDBb2K+mqchFArMQS+MusoQQTYe+SRjzz6w+hV5mcH5aLVrTATB
iojPMV5MbL5OUBP/EPXaFuCM5kWiu30=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:47 2025 by rpki-client