Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/87b88781-c5f2-3a54-ad1e-e14ac84ff1e5.roa
File:                     87b88781-c5f2-3a54-ad1e-e14ac84ff1e5.roa (raw, json)
Hash identifier:          GkKU6ofGrQNlkD1Vd3a/ArLjgeoV6kEGtcS43numBmI=
Subject key identifier:   B4:4F:EC:33:88:ED:2C:D0:92:C0:28:68:C9:FC:C1:47:F6:A7:1F:8D
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584AC5AB92EDAD4644CD1D5ED680
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/87b88781-c5f2-3a54-ad1e-e14ac84ff1e5.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     16696
IP address blocks:        216.247.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:92:ed:ad:46:44:cd:1d:5e:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=b64b2a84-f336-45b3-ae3a-56a7c8fad6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ab:32:52:e9:1b:a0:4b:3a:7d:b6:db:df:b3:
                    7f:76:65:8d:58:b0:b7:d1:e9:cc:a3:84:fa:d3:f6:
                    37:0e:13:a4:da:3e:40:40:d4:2d:42:53:d5:80:91:
                    77:16:18:08:53:53:91:66:48:7b:86:11:f0:30:cd:
                    19:c2:e0:37:67:df:a0:d8:69:9b:3b:f3:02:44:0e:
                    55:e6:e1:22:72:58:b7:86:5f:16:81:8b:59:85:20:
                    45:12:e4:0b:bc:d3:5d:db:ff:de:41:1e:ab:4c:5b:
                    92:7d:3e:91:52:a2:9a:c2:5c:a8:36:1f:c1:4b:7d:
                    a5:04:32:aa:68:49:21:21:3d:c8:21:11:a4:48:57:
                    75:d7:cd:49:f2:fa:90:95:d9:a5:71:18:7a:e3:0a:
                    76:2b:4e:a4:b6:af:e4:54:8c:d4:19:46:4c:6f:b7:
                    9a:7d:91:25:e5:6c:64:cb:e4:b7:a1:85:d8:67:19:
                    6e:ed:2e:42:c5:b2:75:01:2d:f5:d5:36:03:3d:9b:
                    ac:fa:ac:05:b2:96:fa:36:be:04:39:fd:f7:c9:33:
                    e9:50:7a:d3:12:34:0a:24:ea:e5:d8:16:03:da:c0:
                    1b:25:fd:5b:8c:b4:0e:3e:29:49:c5:00:9a:13:1d:
                    3a:d3:87:7d:db:fb:3b:60:00:51:94:ae:81:5a:cd:
                    66:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4F:EC:33:88:ED:2C:D0:92:C0:28:68:C9:FC:C1:47:F6:A7:1F:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/87b88781-c5f2-3a54-ad1e-e14ac84ff1e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e4:27:1d:f7:14:6c:11:af:f6:36:91:1f:bb:41:e4:cd:76:
         f1:1e:95:e4:9a:2b:dd:a9:61:bc:7a:5d:d4:5c:35:61:1c:1e:
         b4:77:d6:a0:c2:3b:38:8c:e0:2c:cf:fb:e9:cd:27:71:9e:b6:
         67:74:e1:fb:0d:d6:cf:a7:fb:ba:d0:bb:0a:d3:7a:fb:fd:36:
         67:7f:14:cc:62:0f:33:db:0a:30:b9:6b:8d:3d:f6:ef:82:5d:
         a3:bf:01:c4:3e:04:fc:2f:08:75:ca:55:2e:1e:eb:47:44:31:
         96:3e:d4:1c:86:03:0d:7f:ed:23:57:b2:4b:c4:9b:17:c9:4f:
         45:85:c5:c9:55:b8:68:d6:f2:2d:ef:4b:95:57:65:4a:e5:7f:
         88:b8:b0:c9:99:bd:5a:22:e5:eb:ed:5e:9b:aa:ac:30:3a:c3:
         77:e4:e2:8c:aa:c6:89:6e:0a:52:14:c1:08:9d:87:1f:b2:47:
         09:8b:55:57:73:64:ba:9a:48:0b:4f:3e:b4:6e:3d:f0:8e:10:
         c4:47:86:ad:9c:d7:ad:83:58:62:2d:71:ae:94:ad:55:80:89:
         f1:b9:fe:db:ea:67:3e:35:5d:64:83:4b:12:12:91:04:b6:66:
         37:65:7f:70:a6:c7:53:a2:16:77:1a:0f:fc:02:37:14:65:97:
         9f:7a:1a:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5LtrUZEzR1e1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk
YjY0YjJhODQtZjMzNi00NWIzLWFlM2EtNTZhN2M4ZmFkNmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKsyUukboEs6fbbb37N/dmWNWLC30enMo4T6
0/Y3DhOk2j5AQNQtQlPVgJF3FhgIU1ORZkh7hhHwMM0ZwuA3Z9+g2GmbO/MCRA5V
5uEicli3hl8WgYtZhSBFEuQLvNNd2//eQR6rTFuSfT6RUqKawlyoNh/BS32lBDKq
aEkhIT3IIRGkSFd1181J8vqQldmlcRh64wp2K06ktq/kVIzUGUZMb7eafZEl5Wxk
y+S3oYXYZxlu7S5CxbJ1AS311TYDPZus+qwFspb6Nr4EOf33yTPpUHrTEjQKJOrl
2BYD2sAbJf1bjLQOPilJxQCaEx0604d92/s7YABRlK6BWs1msQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLRP7DOI7SzQksAoaMn8wUf2px+NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvODdiODg3ODEtYzVmMi0z
YTU0LWFkMWUtZTE0YWM4NGZmMWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PdFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErkJx33FGwRr/Y2kR+7QeTNdvEeleSaK92pYbx6XdRcNWEcHrR31qDC
OziM4CzP++nNJ3Getmd04fsN1s+n+7rQuwrTevv9Nmd/FMxiDzPbCjC5a4099u+C
XaO/AcQ+BPwvCHXKVS4e60dEMZY+1ByGAw1/7SNXskvEmxfJT0WFxclVuGjW8i3v
S5VXZUrlf4i4sMmZvVoi5evtXpuqrDA6w3fk4oyqxoluClIUwQidhx+yRwmLVVdz
ZLqaSAtPPrRuPfCOEMRHhq2c162DWGItca6UrVWAifG5/tvqZz41XWSDSxISkQS2
Zjdlf3Cmx1OiFncaD/wCNxRll596Gs0=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:52:25 2025 by rpki-client