Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/872fbb83-6cb0-31ec-9b42-727e3654b4d6.roa
File:                     872fbb83-6cb0-31ec-9b42-727e3654b4d6.roa (raw, json)
Hash identifier:          ZhLaO7ezsvORXBhjj8L9g+W69aXYsLT2UY7CkGShBEE=
Subject key identifier:   18:5B:2E:3F:A2:91:39:9A:85:76:45:20:76:F4:FC:D2:7A:5A:28:98
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1967A10269D081D2FC02140
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/872fbb83-6cb0-31ec-9b42-727e3654b4d6.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        174.88.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:7a:10:26:9d:08:1d:2f:c0:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=69f3dece-e361-4589-ae94-18e4499558a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f4:2e:52:bc:f0:4a:fb:e9:52:e9:03:17:5d:
                    30:ba:57:8c:27:53:a0:fd:f8:e3:81:28:05:a2:d2:
                    47:8b:6f:1a:f2:8a:fb:32:43:a5:4d:06:38:c1:13:
                    dd:74:01:20:f5:fa:1c:55:43:22:ef:bf:31:c4:ef:
                    8a:91:78:92:18:e1:ee:1d:3a:68:07:ef:b6:1e:34:
                    ac:fe:b3:6c:8b:19:1e:ea:7f:26:20:a0:7a:b4:35:
                    c6:32:ed:15:f9:6a:0f:62:4e:d5:9f:a3:aa:e9:db:
                    08:51:c4:82:ec:17:e2:22:f8:f0:0d:72:a5:40:25:
                    68:b2:fc:84:8b:83:df:b7:19:38:0e:d2:43:28:bc:
                    75:b0:d5:23:19:65:f8:44:65:23:bc:34:d7:d9:c8:
                    54:56:bd:56:0e:44:bf:db:6a:38:99:9f:9d:77:f9:
                    21:36:b7:92:b3:66:3d:97:1c:1d:ee:60:db:9b:7a:
                    a4:2a:e7:ea:1d:41:bb:60:67:4d:72:92:7b:ed:05:
                    fc:52:1f:76:10:f0:02:41:ce:95:da:fd:dc:f9:2c:
                    68:58:12:99:17:2c:12:d4:38:c1:c7:b8:6c:1f:e0:
                    1d:2d:12:be:60:ad:fe:9b:7c:fc:ff:a4:47:65:fa:
                    09:b3:c6:f7:e7:6b:29:ae:25:95:31:f4:92:2a:3e:
                    b8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5B:2E:3F:A2:91:39:9A:85:76:45:20:76:F4:FC:D2:7A:5A:28:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/872fbb83-6cb0-31ec-9b42-727e3654b4d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.88.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:98:1d:da:9a:c8:b8:0c:6d:01:7c:a7:7e:22:b6:42:65:2c:
         2b:7b:e1:ff:56:ae:40:fc:63:03:69:b8:60:29:eb:2e:8e:81:
         c8:77:4d:ba:b2:20:f6:a7:97:10:64:61:71:7c:4a:1e:7e:cd:
         74:c0:5d:50:d5:13:44:d8:0f:ac:c6:05:88:55:18:43:f1:3e:
         52:ac:81:10:5e:45:99:45:49:d8:f4:24:37:ed:fb:50:3e:4d:
         12:de:9c:a1:50:ad:43:4a:9e:98:16:e1:50:dd:f8:b2:1c:8a:
         98:33:ec:14:0a:a8:2b:61:ea:4c:30:7c:ba:96:8f:c4:12:39:
         f2:2d:aa:c3:3c:b2:89:ad:f7:d5:ce:04:67:1a:62:77:de:ca:
         91:16:fe:23:d7:3b:60:dd:75:84:be:f6:68:0d:d4:98:6e:ab:
         3a:ae:b9:b3:4c:7a:60:d9:97:92:b5:d3:d0:04:27:c3:75:61:
         85:ec:dd:e6:58:b7:94:52:b2:8a:6d:f4:4a:60:a6:d3:13:3b:
         af:f7:9e:7a:79:4c:cd:45:6f:fc:2c:18:ac:39:84:ae:75:93:
         90:db:76:b2:64:60:b9:7e:2b:2f:53:ab:3c:7a:cf:f5:00:11:
         e8:4d:67:d9:3c:33:70:52:e9:9d:1a:75:33:fb:45:53:a6:e2:
         20:37:03:25
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErhlnoQJp0IHS/AIUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
NjlmM2RlY2UtZTM2MS00NTg5LWFlOTQtMThlNDQ5OTU1OGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfQuUrzwSvvpUukDF10wuleMJ1Og/fjjgSgF
otJHi28a8or7MkOlTQY4wRPddAEg9focVUMi778xxO+KkXiSGOHuHTpoB++2HjSs
/rNsixke6n8mIKB6tDXGMu0V+WoPYk7Vn6Oq6dsIUcSC7BfiIvjwDXKlQCVosvyE
i4Pftxk4DtJDKLx1sNUjGWX4RGUjvDTX2chUVr1WDkS/22o4mZ+dd/khNreSs2Y9
lxwd7mDbm3qkKufqHUG7YGdNcpJ77QX8Uh92EPACQc6V2v3c+SxoWBKZFywS1DjB
x7hsH+AdLRK+YK3+m3z8/6RHZfoJs8b352spriWVMfSSKj64ZwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBhbLj+ikTmahXZFIHb0/NJ6WiiYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvODcyZmJiODMtNmNiMC0z
MWVjLTliNDItNzI3ZTM2NTRiNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArlgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeZgd2prIuAxtAXynfiK2QmUsK3vh/1auQPxjA2m4YCnrLo6ByHdNurIg
9qeXEGRhcXxKHn7NdMBdUNUTRNgPrMYFiFUYQ/E+UqyBEF5FmUVJ2PQkN+37UD5N
Et6coVCtQ0qemBbhUN34shyKmDPsFAqoK2HqTDB8upaPxBI58i2qwzyyia331c4E
Zxpid97KkRb+I9c7YN11hL72aA3UmG6rOq65s0x6YNmXkrXT0AQnw3Vhhezd5li3
lFKyim30SmCm0xM7r/eeenlMzUVv/CwYrDmErnWTkNt2smRguX4rL1OrPHrP9QAR
6E1n2TwzcFLpnRp1M/tFU6biIDcDJQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:51:49 2025 by rpki-client