Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87e79c77-5f7e-3167-897b-be051a809707.roa
File:                     87e79c77-5f7e-3167-897b-be051a809707.roa (raw, json)
Hash identifier:          Y6pf7nA+2FEBQbO2Ye1M3H0RfxvcLaa1+oWziEwL3H4=
Subject key identifier:   92:B5:C8:89:E6:01:B6:53:95:F1:5B:6D:CC:93:2E:41:79:54:10:73
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC197F0392A30125D882880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87e79c77-5f7e-3167-897b-be051a809707.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        73.160.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:97:f0:39:2a:30:12:5d:88:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=f74a1371-e3a6-42ea-ac74-511e09fb6210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:17:5d:6a:83:a8:a6:ea:0b:d9:a2:0c:94:
                    6c:2d:cf:59:7c:6b:f3:2e:a6:74:d6:56:cb:4e:75:
                    16:2f:e8:79:61:bc:0c:9c:96:e9:a3:33:96:56:d9:
                    06:c2:cb:bf:e3:39:e5:81:d3:20:49:ce:ee:8a:9f:
                    9d:36:be:2c:af:48:15:a0:77:d6:d0:ec:ea:1f:2b:
                    cd:3e:28:ed:2b:bb:0d:66:c9:47:a3:33:57:11:ad:
                    9f:a9:d9:57:85:ce:22:10:1b:44:62:f1:5e:37:fe:
                    f9:73:be:fe:32:45:00:dc:19:aa:c5:41:20:05:c8:
                    0c:40:b3:bb:6f:ca:8c:85:11:75:f1:8f:74:14:8a:
                    f5:11:da:fa:d6:ce:b0:39:71:72:17:1f:4f:78:ca:
                    00:0d:9b:ef:da:26:47:77:95:2c:c6:87:e1:24:08:
                    8b:fb:6f:c9:7c:9e:61:e7:a1:df:00:8b:ea:cf:b1:
                    39:5a:47:54:de:4e:b8:0b:76:91:72:62:4f:09:7a:
                    9a:b0:d9:04:06:0b:f6:9b:5f:9e:9f:b3:5e:05:6f:
                    fd:10:6c:93:68:40:a8:59:fb:c0:69:13:7e:19:95:
                    68:8b:8b:21:59:47:eb:fe:15:3f:42:87:60:77:26:
                    af:8b:a6:68:3c:81:d9:d0:9c:db:e3:33:0b:a5:a3:
                    69:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B5:C8:89:E6:01:B6:53:95:F1:5B:6D:CC:93:2E:41:79:54:10:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87e79c77-5f7e-3167-897b-be051a809707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.160.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d4:c5:7f:29:be:fb:75:c5:5a:d1:77:e2:6e:b0:eb:9e:32:
         49:b3:15:63:c9:a9:5a:b5:4e:9a:99:fa:19:18:42:7f:31:e0:
         88:9e:f5:56:2d:20:24:04:c0:5f:ff:e1:f3:62:04:75:68:bd:
         73:90:38:61:1c:63:d7:1b:e0:1a:67:4c:ab:fc:75:26:fc:ef:
         5a:71:5d:53:76:5c:02:af:7a:75:de:de:83:57:9c:2f:cb:2b:
         c0:b2:8a:bd:20:df:d2:ee:72:75:b9:1d:75:f7:d7:9f:81:fa:
         e4:09:59:24:6a:33:e5:f1:90:e3:fe:f5:fb:c2:c1:6f:96:24:
         29:71:08:55:b1:10:42:f4:02:0e:28:6b:57:38:49:53:ce:3e:
         66:2c:6d:25:97:33:e2:5e:df:7b:b5:07:0d:80:c5:2a:ab:8c:
         4e:36:a4:94:37:67:80:16:c2:9e:b3:03:03:05:70:1e:b9:7d:
         02:ae:e7:f0:df:3d:84:98:a6:ed:ae:cd:63:2e:26:d4:4b:47:
         2c:86:08:a0:49:43:65:1c:9d:37:bc:3d:77:1f:ea:09:7e:bb:
         93:18:ca:a8:6e:d1:5e:35:c0:40:f0:8a:dc:f2:0e:c0:8d:3c:
         14:c7:34:7e:d9:b9:05:93:1d:d7:37:57:e7:2b:9c:82:d6:80:
         5c:37:d0:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswZfwOSowEl2IKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
Zjc0YTEzNzEtZTNhNi00MmVhLWFjNzQtNTExZTA5ZmI2MjEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wwXXWqDqKbqC9miDJRsLc9ZfGvzLqZ01lbL
TnUWL+h5YbwMnJbpozOWVtkGwsu/4znlgdMgSc7uip+dNr4sr0gVoHfW0OzqHyvN
PijtK7sNZslHozNXEa2fqdlXhc4iEBtEYvFeN/75c77+MkUA3BmqxUEgBcgMQLO7
b8qMhRF18Y90FIr1Edr61s6wOXFyFx9PeMoADZvv2iZHd5UsxofhJAiL+2/JfJ5h
56HfAIvqz7E5WkdU3k64C3aRcmJPCXqasNkEBgv2m1+en7NeBW/9EGyTaECoWfvA
aRN+GZVoi4shWUfr/hU/Qodgdyavi6ZoPIHZ0Jzb4zMLpaNp6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJK1yInmAbZTlfFbbcyTLkF5VBBzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODdlNzljNzctNWY3ZS0z
MTY3LTg5N2ItYmUwNTFhODA5NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASaBYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC7UxX8pvvt1xVrRd+JusOueMkmzFWPJqVq1TpqZ+hkYQn8x4Iie9VYt
ICQEwF//4fNiBHVovXOQOGEcY9cb4BpnTKv8dSb871pxXVN2XAKvenXe3oNXnC/L
K8Cyir0g39LucnW5HXX315+B+uQJWSRqM+XxkOP+9fvCwW+WJClxCFWxEEL0Ag4o
a1c4SVPOPmYsbSWXM+Je33u1Bw2AxSqrjE42pJQ3Z4AWwp6zAwMFcB65fQKu5/Df
PYSYpu2uzWMuJtRLRyyGCKBJQ2UcnTe8PXcf6gl+u5MYyqhu0V41wEDwitzyDsCN
PBTHNH7ZuQWTHdc3V+crnILWgFw30M0=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:29:20 2025 by rpki-client