Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/87faaf51-8e34-3e17-8b05-a9548988a29c.roa
File:                     87faaf51-8e34-3e17-8b05-a9548988a29c.roa (raw, json)
Hash identifier:          PITJUUhYGLou5rOOFjyoSGxMulaQkxi2CLlQWYQqZEM=
Subject key identifier:   0A:8C:D8:55:43:0C:7A:58:34:F1:2E:24:78:34:F7:A1:EB:F5:7F:A7
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E96249855A0B8BC9FE08C00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/87faaf51-8e34-3e17-8b05-a9548988a29c.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        174.85.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:24:98:55:a0:b8:bc:9f:e0:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=86cc34c8-e145-421d-8fd8-6c29a9de7a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c9:bb:18:e8:ae:9a:d2:0c:7b:a7:65:18:f4:
                    e1:20:7e:1f:ea:90:db:ab:cc:68:0c:f8:65:92:21:
                    c0:c5:34:b8:66:d6:0e:4c:02:30:75:74:64:96:bf:
                    de:d4:47:a2:ff:f7:ee:f4:1b:aa:68:20:cb:6b:a5:
                    68:fc:4f:ec:c6:22:04:7b:a4:9f:3b:f9:0a:7b:52:
                    b8:70:0d:6b:50:95:cf:5e:c7:32:7a:94:5e:f6:18:
                    69:07:d6:7f:5d:f8:9e:04:62:4a:15:d3:b0:b3:65:
                    2e:34:6b:83:c2:9a:06:e4:33:2b:64:23:df:eb:ca:
                    60:aa:e1:54:ba:f9:d4:4f:68:88:c1:ec:f6:4e:7f:
                    af:d6:39:0c:b2:54:00:6c:01:73:bf:3e:9b:54:00:
                    95:ae:db:77:37:5d:d2:2d:e3:2b:f1:ae:23:4f:f0:
                    2a:19:c3:2e:1b:d8:dc:18:5c:ab:d2:9d:b2:50:c0:
                    ab:09:9c:c4:2b:3c:6f:65:d7:dc:95:2f:73:d6:74:
                    fc:a1:a0:f2:c3:a5:c5:a8:2f:9d:20:c6:36:03:90:
                    49:94:a6:2b:3b:70:d3:8a:5d:0c:2f:97:d7:8b:a8:
                    8d:d2:16:42:8f:41:2e:10:18:1c:85:9b:90:8c:87:
                    c9:d9:48:44:db:71:29:90:bc:a3:0a:30:85:f4:ac:
                    84:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8C:D8:55:43:0C:7A:58:34:F1:2E:24:78:34:F7:A1:EB:F5:7F:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/87faaf51-8e34-3e17-8b05-a9548988a29c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.85.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:df:0c:b4:9a:10:66:1c:38:3b:11:06:fa:5f:dc:a6:b5:86:
         86:dd:2b:2f:e8:eb:87:20:81:9d:ab:73:44:e7:60:1e:1c:cb:
         4a:79:d7:c4:22:c9:87:a3:af:71:4d:a0:4f:eb:dc:1c:4e:7d:
         04:c1:62:ee:1e:6a:e1:be:e1:13:95:fb:bf:33:fe:c2:d0:68:
         c0:aa:bd:ec:a6:0b:ff:f1:fa:10:e1:f0:89:d2:a1:dc:88:2a:
         20:f4:0a:23:1d:41:ed:c3:e8:d6:05:a5:67:a3:d8:60:04:72:
         90:c5:9f:e2:ac:39:cb:f7:fa:4f:9c:a6:97:ac:3a:78:ba:c8:
         71:9d:a7:13:b4:83:91:36:16:79:ac:e5:2e:ac:9c:c5:62:b5:
         58:28:95:b8:88:de:2f:1c:c3:99:ef:6b:49:dc:7a:91:88:3b:
         31:ec:c7:4a:3b:30:ec:24:f8:38:72:74:a5:f1:5a:24:5b:e8:
         2a:9d:2d:82:de:2d:17:a2:c2:40:59:85:5f:75:1f:66:70:a1:
         c9:76:74:fb:08:f2:cc:ee:17:16:2a:fa:83:db:cf:bf:6e:cb:
         f4:5f:a1:19:48:80:da:8d:46:e0:e3:75:de:cb:53:44:be:e0:
         32:e3:16:e6:fa:4c:77:71:47:83:e4:bb:ea:38:fe:82:e2:b6:
         47:66:c4:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeliSYVaC4vJ/gjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
ODZjYzM0YzgtZTE0NS00MjFkLThmZDgtNmMyOWE5ZGU3YTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcm7GOiumtIMe6dlGPThIH4f6pDbq8xoDPhl
kiHAxTS4ZtYOTAIwdXRklr/e1Eei//fu9BuqaCDLa6Vo/E/sxiIEe6SfO/kKe1K4
cA1rUJXPXscyepRe9hhpB9Z/XfieBGJKFdOws2UuNGuDwpoG5DMrZCPf68pgquFU
uvnUT2iIwez2Tn+v1jkMslQAbAFzvz6bVACVrtt3N13SLeMr8a4jT/AqGcMuG9jc
GFyr0p2yUMCrCZzEKzxvZdfclS9z1nT8oaDyw6XFqC+dIMY2A5BJlKYrO3DTil0M
L5fXi6iN0hZCj0EuEBgchZuQjIfJ2UhE23EpkLyjCjCF9KyEGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAqM2FVDDHpYNPEuJHg096Hr9X+nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODdmYWFmNTEtOGUzNC0z
ZTE3LThiMDUtYTk1NDg5ODhhMjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrlVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjfDLSaEGYcODsRBvpf3Ka1hobdKy/o64cggZ2rc0TnYB4cy0p518Qi
yYejr3FNoE/r3BxOfQTBYu4eauG+4ROV+78z/sLQaMCqveymC//x+hDh8InSodyI
KiD0CiMdQe3D6NYFpWej2GAEcpDFn+KsOcv3+k+cppesOni6yHGdpxO0g5E2Fnms
5S6snMVitVgolbiI3i8cw5nva0ncepGIOzHsx0o7MOwk+DhydKXxWiRb6CqdLYLe
LReiwkBZhV91H2Zwocl2dPsI8szuFxYq+oPbz79uy/RfoRlIgNqNRuDjdd7LU0S+
4DLjFub6THdxR4Pku+o4/oLitkdmxKc=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:48:16 2025 by rpki-client