Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/94b63554-10f5-3368-a9cc-4d31e3421b4f.roa
File:                     94b63554-10f5-3368-a9cc-4d31e3421b4f.roa (raw, json)
Hash identifier:          usGvO7sSKTxvnYtTakiOcxHKha91SbHqjlqGN5Gn1yA=
Subject key identifier:   20:68:F1:67:5A:8C:C2:A1:51:91:B8:E6:83:DB:07:45:E2:73:F4:E9
Certificate issuer:       /CN=a58da523-4991-493a-95ce-ff1c2b97244a
Certificate serial:       010D0C9F4328584AB3862BC6F342932DE531CA00
Authority key identifier: 70:CC:62:B2:53:11:5C:EA:17:63:4C:D6:47:E7:40:5B:F3:5C:02:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/94b63554-10f5-3368-a9cc-4d31e3421b4f.roa
Signing time:             Thu 31 Jul 2025 13:00:39 +0000
ROA not before:           Thu 31 Jul 2025 13:00:39 +0000
ROA not after:            Wed 29 Oct 2025 13:00:39 +0000
asID:                     8070
IP address blocks:        199.34.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:86:2b:c6:f3:42:93:2d:e5:31:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a58da523-4991-493a-95ce-ff1c2b97244a
        Validity
            Not Before: Jul 31 13:00:39 2025 GMT
            Not After : Oct 29 13:00:39 2025 GMT
        Subject: CN=88d87a61-182d-4404-bfbf-4f45c411e4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:ec:32:e8:a4:41:fd:63:b2:91:dc:71:bd:
                    34:f4:04:45:a3:21:b0:ce:0a:c8:4c:c7:bd:f4:1a:
                    4e:67:36:0e:4d:79:56:4b:46:1b:a5:93:f3:5d:64:
                    5a:77:cb:16:9c:13:82:df:98:39:d1:a6:3a:14:2a:
                    d0:e2:e1:15:cb:3d:71:ca:d5:c7:0d:b3:b2:b0:5e:
                    d7:25:99:f6:d7:c3:05:23:b1:6d:94:5b:b5:60:f6:
                    aa:64:a2:1d:86:99:e2:72:37:c0:28:47:12:32:f8:
                    46:d5:f4:92:8f:60:c7:68:4f:0e:bb:00:7b:42:ef:
                    53:aa:69:1d:d2:f0:16:67:f7:82:a1:a4:b2:2c:1b:
                    da:c4:9a:51:3c:45:92:35:21:dc:d4:31:71:60:a8:
                    b7:73:1d:45:ea:68:f1:4b:4c:1b:38:c9:17:2a:9e:
                    5b:96:1a:1a:58:12:3e:1f:e6:f6:9b:6e:0b:43:75:
                    5b:a5:81:64:67:5a:b7:56:fb:3b:64:69:40:46:f0:
                    72:36:56:6b:85:10:b1:59:8a:39:a8:30:a6:ad:23:
                    9f:3e:7b:0b:be:47:d4:9e:84:65:15:18:c4:d6:67:
                    f1:10:ed:47:c0:46:46:7d:56:02:1e:2c:e8:c2:63:
                    8b:3b:26:83:63:bc:7c:d2:5c:ef:2c:20:c4:42:82:
                    5e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:68:F1:67:5A:8C:C2:A1:51:91:B8:E6:83:DB:07:45:E2:73:F4:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/94b63554-10f5-3368-a9cc-4d31e3421b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.crl

            X509v3 Authority Key Identifier:
                keyid:70:CC:62:B2:53:11:5C:EA:17:63:4C:D6:47:E7:40:5B:F3:5C:02:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a5:24:83:91:dc:ed:e0:4d:41:d2:36:ed:96:a6:78:28:07:
         ec:50:67:44:ae:e5:94:7e:55:87:ea:3c:f5:f8:c8:f5:98:2b:
         95:82:8a:2a:af:61:e1:02:e8:aa:bf:d7:7b:54:d7:e1:0f:7d:
         29:b3:7d:8a:7d:e1:ed:bc:6c:ca:ac:66:df:c4:c7:48:71:0b:
         de:e4:37:92:cd:87:1d:16:8c:e8:1f:a6:b5:50:27:16:e7:d2:
         44:77:6b:91:97:ca:87:90:1d:6b:e4:47:98:b2:97:5a:dd:9e:
         1e:32:7c:7a:ef:cd:52:65:e3:6e:1f:56:f5:f4:61:d6:c6:8b:
         6e:f8:5a:59:84:e8:c7:95:92:b0:d2:00:6f:8d:cd:5d:9c:45:
         6b:3a:31:bd:ae:5f:1e:6e:be:3b:93:5d:54:e9:0f:57:d2:c5:
         8d:4a:ca:67:70:90:90:45:dd:e8:ed:44:c2:27:cb:48:c5:1b:
         dc:db:4e:60:58:9a:09:c8:8d:9b:5e:5c:14:fd:ef:b2:1c:4e:
         23:ff:e5:5b:0b:4d:4b:c0:1c:3e:62:1d:a7:b2:14:a0:5e:1d:
         b3:7b:cd:fa:4d:33:87:91:22:87:b5:69:39:5d:08:5c:60:6f:
         cf:09:25:fc:e2:e4:ed:17:20:29:09:99:1c:66:46:6d:96:19:
         5a:ab:52:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhivG80KTLeUxygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTU4ZGE1MjMtNDk5MS00OTNhLTk1Y2UtZmYxYzJiOTcy
NDRhMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk
ODhkODdhNjEtMTgyZC00NDA0LWJmYmYtNGY0NWM0MTFlNGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXbsMuikQf1jspHccb009ARFoyGwzgrITMe9
9BpOZzYOTXlWS0YbpZPzXWRad8sWnBOC35g50aY6FCrQ4uEVyz1xytXHDbOysF7X
JZn218MFI7FtlFu1YPaqZKIdhpnicjfAKEcSMvhG1fSSj2DHaE8OuwB7Qu9Tqmkd
0vAWZ/eCoaSyLBvaxJpRPEWSNSHc1DFxYKi3cx1F6mjxS0wbOMkXKp5blhoaWBI+
H+b2m24LQ3VbpYFkZ1q3Vvs7ZGlARvByNlZrhRCxWYo5qDCmrSOfPnsLvkfUnoRl
FRjE1mfxEO1HwEZGfVYCHizowmOLOyaDY7x80lzvLCDEQoJeHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCBo8WdajMKhUZG45oPbB0Xic/TpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNThk
YTUyMy00OTkxLTQ5M2EtOTVjZS1mZjFjMmI5NzI0NGEvOTRiNjM1NTQtMTBmNS0z
MzY4LWE5Y2MtNGQzMWUzNDIxYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTU4ZGE1MjMtNDk5MS00OTNhLTk1
Y2UtZmYxYzJiOTcyNDRhL2E1OGRhNTIzLTQ5OTEtNDkzYS05NWNlLWZmMWMyYjk3
MjQ0YS5jcmwwHwYDVR0jBBgwFoAUcMxislMRXOoXY0zWR+dAW/NcAgowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNThkYTUyMy00OTkxLTQ5M2EtOTVjZS1mZjFj
MmI5NzI0NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyJhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFGlJIOR3O3gTUHSNu2WpngoB+xQZ0Su5ZR+VYfqPPX4yPWYK5WCiiqv
YeEC6Kq/13tU1+EPfSmzfYp94e28bMqsZt/Ex0hxC97kN5LNhx0WjOgfprVQJxbn
0kR3a5GXyoeQHWvkR5iyl1rdnh4yfHrvzVJl424fVvX0YdbGi274WlmE6MeVkrDS
AG+NzV2cRWs6Mb2uXx5uvjuTXVTpD1fSxY1KymdwkJBF3ejtRMIny0jFG9zbTmBY
mgnIjZteXBT977IcTiP/5VsLTUvAHD5iHaeyFKBeHbN7zfpNM4eRIoe1aTldCFxg
b88JJfzi5O0XICkJmRxmRm2WGVqrUtQ=
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:55:51 2025 by rpki-client