Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15765c76-6498-3158-9680-d0349bfa1474.roa
File:                     15765c76-6498-3158-9680-d0349bfa1474.roa (raw, json)
Hash identifier:          I0+OGEx/yf73J+Vm/MCOE1QB+Hj13oPYNL6ndxVgZDY=
Subject key identifier:   1B:78:60:18:9D:F2:BA:E2:25:D6:04:37:3D:4A:81:8E:55:DB:22:0E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC2E1139D2C919089AF7621A4
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15765c76-6498-3158-9680-d0349bfa1474.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        96.7.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:13:9d:2c:91:90:89:af:76:21:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=8fb89d08-fdb2-4232-9e5a-edaaa29c0ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:2c:76:66:c6:43:2a:8e:48:75:5a:73:6f:
                    ce:7a:9f:ab:b4:a0:39:8a:78:07:4c:a7:cc:f4:74:
                    87:a2:3b:c1:b5:bc:5c:c2:6c:79:52:7e:0b:e8:28:
                    50:22:0a:6c:d0:6b:fc:02:e2:c4:19:d2:70:57:75:
                    00:65:91:65:5f:d2:82:c5:3a:e6:2d:d8:38:ae:9c:
                    bf:ec:7f:45:bc:43:00:c1:e4:ad:e6:93:96:fe:0a:
                    f5:30:9d:02:6b:ad:a3:60:1a:5b:aa:10:4f:90:4c:
                    48:cb:ba:0c:fb:b3:d9:42:b4:a6:e8:c9:2e:23:62:
                    a1:a2:1d:68:f7:98:38:5a:b0:70:d4:bf:43:5c:09:
                    f9:64:4d:9a:98:f9:c2:22:55:5a:11:24:f1:0d:8c:
                    35:06:28:4e:52:ff:0e:76:fa:dc:55:4f:cb:f8:62:
                    02:65:6b:9b:4c:05:54:ab:de:2a:ad:24:cc:31:67:
                    fa:c2:1e:ea:52:9e:08:16:55:22:cd:55:db:29:1e:
                    5e:53:ec:5d:d5:37:9c:2c:3b:3f:fc:22:18:6d:53:
                    85:e8:b4:1b:72:25:21:6e:e0:ea:36:ab:a8:ad:d1:
                    49:29:e2:ec:4a:86:a1:7d:2d:7b:86:f1:ae:4e:20:
                    b0:6b:b1:36:2a:da:ca:6a:53:9f:21:07:20:85:79:
                    98:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:78:60:18:9D:F2:BA:E2:25:D6:04:37:3D:4A:81:8E:55:DB:22:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15765c76-6498-3158-9680-d0349bfa1474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:39:c0:7f:35:ca:9f:fa:69:93:96:2d:c9:99:64:3a:b2:ab:
         eb:46:72:e3:e0:3d:ab:fa:66:b0:67:60:07:2a:0f:fe:16:e1:
         86:b3:3c:28:07:99:1b:bd:13:7d:af:f4:32:1f:df:e7:4b:0a:
         9c:43:d3:f8:4c:83:4d:d4:4c:a1:32:80:ae:7f:66:80:29:0e:
         9f:2e:39:6a:f6:20:91:8c:e6:d1:95:40:70:36:af:66:72:d1:
         be:8c:6a:5d:20:78:03:79:ad:c2:c2:34:70:1d:b9:0c:0d:c5:
         9b:99:37:3d:f0:95:32:b4:84:26:f4:e8:85:6e:8f:4b:04:64:
         b8:7d:94:61:14:ee:8b:ef:34:b6:e0:f9:5c:e8:af:35:f5:f0:
         0b:00:d5:7a:be:70:d3:a0:90:36:53:51:0f:7a:12:a0:62:d4:
         1b:6f:5a:4a:0d:2f:47:82:47:32:aa:84:8c:e8:3c:d6:45:08:
         4b:cf:7e:db:5a:c3:0d:c8:02:6e:53:2b:fc:89:6e:9f:2f:e5:
         6a:d6:95:53:83:9e:b0:ee:19:f9:0e:2f:c0:b4:20:ad:22:88:
         af:cc:ad:ec:99:2f:f3:d9:71:c6:fd:d9:28:53:ab:1e:32:85:
         1e:a0:ab:19:18:3c:26:43:a5:48:51:fc:83:2c:f1:98:e9:54:
         2a:53:71:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4ROdLJGQia92IaQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
OGZiODlkMDgtZmRiMi00MjMyLTllNWEtZWRhYWEyOWMwYWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl24sdmbGQyqOSHVac2/Oep+rtKA5ingHTKfM
9HSHojvBtbxcwmx5Un4L6ChQIgps0Gv8AuLEGdJwV3UAZZFlX9KCxTrmLdg4rpy/
7H9FvEMAweSt5pOW/gr1MJ0Ca62jYBpbqhBPkExIy7oM+7PZQrSm6MkuI2Khoh1o
95g4WrBw1L9DXAn5ZE2amPnCIlVaESTxDYw1BihOUv8OdvrcVU/L+GICZWubTAVU
q94qrSTMMWf6wh7qUp4IFlUizVXbKR5eU+xd1TecLDs//CIYbVOF6LQbciUhbuDq
NquordFJKeLsSoahfS17hvGuTiCwa7E2KtrKalOfIQcghXmYDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBt4YBid8rriJdYENz1KgY5V2yIOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTU3NjVjNzYtNjQ5OC0z
MTU4LTk2ODAtZDAzNDliZmExNDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYAfAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAk5wH81yp/6aZOWLcmZZDqyq+tGcuPgPav6ZrBnYAcqD/4W4YazPCgH
mRu9E32v9DIf3+dLCpxD0/hMg03UTKEygK5/ZoApDp8uOWr2IJGM5tGVQHA2r2Zy
0b6Mal0geAN5rcLCNHAduQwNxZuZNz3wlTK0hCb06IVuj0sEZLh9lGEU7ovvNLbg
+VzorzX18AsA1Xq+cNOgkDZTUQ96EqBi1BtvWkoNL0eCRzKqhIzoPNZFCEvPftta
ww3IAm5TK/yJbp8v5WrWlVODnrDuGfkOL8C0IK0iiK/MreyZL/PZccb92ShTqx4y
hR6gqxkYPCZDpUhR/IMs8ZjpVCpTccA=
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:40:27 2025 by rpki-client