Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/963d9b90-55a1-4768-8fab-b2dd0e0ba916/f88fb736-b0fc-3eb6-867c-27a37450f83f.roa
File:                     f88fb736-b0fc-3eb6-867c-27a37450f83f.roa (raw, json)
Hash identifier:          HjGqAaZsMynozDQ9Lk7EGgGqOX1sm5kzv6xRi3tkLpk=
Subject key identifier:   41:AA:41:3F:BB:2D:45:46:79:BF:6F:C5:F8:57:B6:E8:3C:AE:3F:B5
Certificate issuer:       /CN=963d9b90-55a1-4768-8fab-b2dd0e0ba916
Certificate serial:       010D0C9F4328584A374AD0005F7E2AEEC26C6000
Authority key identifier: 87:BE:9D:B4:5D:93:44:55:3D:5A:83:45:26:80:22:77:3B:7E:77:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/963d9b90-55a1-4768-8fab-b2dd0e0ba916.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/963d9b90-55a1-4768-8fab-b2dd0e0ba916/f88fb736-b0fc-3eb6-867c-27a37450f83f.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     46399
IP address blocks:        104.153.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/963d9b90-55a1-4768-8fab-b2dd0e0ba916/963d9b90-55a1-4768-8fab-b2dd0e0ba916.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/963d9b90-55a1-4768-8fab-b2dd0e0ba916/963d9b90-55a1-4768-8fab-b2dd0e0ba916.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/963d9b90-55a1-4768-8fab-b2dd0e0ba916.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d0:00:5f:7e:2a:ee:c2:6c:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=963d9b90-55a1-4768-8fab-b2dd0e0ba916
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=8a7549fe-945c-4f37-8bb8-19f398b86be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8d:81:46:39:18:51:5f:a0:b9:d7:cb:4d:ab:
                    a9:c9:8a:e2:e3:46:d1:f5:89:51:4b:52:13:89:c9:
                    6a:83:54:9f:39:79:e4:63:11:28:cd:9e:8d:73:7e:
                    2e:25:d4:de:aa:1b:d4:dc:03:db:bb:33:fa:75:a3:
                    17:3e:34:9b:95:65:af:c0:31:0b:be:4d:a1:27:18:
                    6c:09:02:e7:80:98:3c:3d:0c:35:e9:52:4c:ae:a6:
                    f6:39:e7:f3:c4:06:8e:ae:96:c0:70:8e:b2:40:37:
                    8d:a0:3e:db:ea:71:c8:1e:6d:7a:9c:0d:01:7f:d6:
                    69:98:8f:ad:a6:c8:c0:33:df:36:2f:95:4d:83:9d:
                    64:7d:c7:c5:24:27:c6:87:6c:7e:b2:35:83:16:65:
                    5b:f6:58:ba:10:fb:92:97:43:e3:e0:a4:fc:dc:74:
                    a3:6a:d6:32:4b:91:68:0a:39:bb:70:a5:25:77:93:
                    d5:60:01:bf:ea:6c:b3:0a:fd:6d:2f:91:db:a1:83:
                    0c:2c:93:e7:f2:05:38:96:71:a5:1d:53:b0:b1:de:
                    bd:70:8b:c0:ac:a2:d0:39:12:97:f3:52:bc:ed:00:
                    6b:d3:64:3b:91:f8:68:62:8d:b9:2e:b6:b0:54:7d:
                    db:b6:5a:59:a0:09:d0:13:74:7d:77:9a:63:ff:8b:
                    38:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AA:41:3F:BB:2D:45:46:79:BF:6F:C5:F8:57:B6:E8:3C:AE:3F:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/963d9b90-55a1-4768-8fab-b2dd0e0ba916/f88fb736-b0fc-3eb6-867c-27a37450f83f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/963d9b90-55a1-4768-8fab-b2dd0e0ba916/963d9b90-55a1-4768-8fab-b2dd0e0ba916.crl

            X509v3 Authority Key Identifier:
                keyid:87:BE:9D:B4:5D:93:44:55:3D:5A:83:45:26:80:22:77:3B:7E:77:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/963d9b90-55a1-4768-8fab-b2dd0e0ba916.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ed:88:00:6c:f4:ee:c9:f5:24:ea:3e:59:9b:7c:c8:08:aa:
         7b:81:2b:4d:8f:cc:12:75:b3:8d:55:0f:10:61:db:21:fa:b4:
         d0:8b:86:56:47:b8:17:ce:71:2d:c6:a3:84:9a:b8:91:d0:11:
         ad:d2:a2:6f:7f:d2:0b:aa:b1:0c:49:ab:56:5f:bf:5b:09:7b:
         86:fa:a6:16:ae:4d:d8:28:84:fb:75:2b:5c:9a:50:57:7a:4d:
         1e:73:4a:8b:7b:62:cb:9d:9d:c0:09:13:f5:c2:84:9e:44:18:
         6f:ad:cc:f9:e4:6a:9e:d2:f3:ce:7f:ef:83:59:88:b0:67:ce:
         dd:d3:d7:a4:de:17:d8:ae:21:b9:75:7d:49:28:f1:c7:a7:67:
         c0:06:0c:11:76:95:77:a6:25:40:9e:96:e7:c0:79:8a:20:60:
         18:73:e1:63:2c:ae:24:76:38:32:39:f3:34:b9:80:07:fd:4c:
         16:67:30:67:cc:59:8e:ac:b8:07:bd:f6:6a:aa:ba:3a:16:e1:
         9d:ad:07:32:ce:11:dc:87:ea:eb:a5:48:64:6f:48:ae:86:bc:
         e9:aa:17:b4:23:2d:d9:ae:cb:eb:8a:bf:89:0f:6a:af:ca:ad:
         12:19:bb:1b:07:8d:f0:c5:fb:24:58:1e:6c:3a:73:7e:49:3f:
         f2:af:04:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StAAX34q7sJsYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTYzZDliOTAtNTVhMS00NzY4LThmYWItYjJkZDBlMGJh
OTE2MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk
OGE3NTQ5ZmUtOTQ1Yy00ZjM3LThiYjgtMTlmMzk4Yjg2YmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp42BRjkYUV+gudfLTaupyYri40bR9YlRS1IT
iclqg1SfOXnkYxEozZ6Nc34uJdTeqhvU3APbuzP6daMXPjSblWWvwDELvk2hJxhs
CQLngJg8PQw16VJMrqb2OefzxAaOrpbAcI6yQDeNoD7b6nHIHm16nA0Bf9ZpmI+t
psjAM982L5VNg51kfcfFJCfGh2x+sjWDFmVb9li6EPuSl0Pj4KT83HSjatYyS5Fo
Cjm7cKUld5PVYAG/6myzCv1tL5HboYMMLJPn8gU4lnGlHVOwsd69cIvArKLQORKX
81K87QBr02Q7kfhoYo25LrawVH3btlpZoAnQE3R9d5pj/4s4+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEGqQT+7LUVGeb9vxfhXtug8rj+1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NjNk
OWI5MC01NWExLTQ3NjgtOGZhYi1iMmRkMGUwYmE5MTYvZjg4ZmI3MzYtYjBmYy0z
ZWI2LTg2N2MtMjdhMzc0NTBmODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTYzZDliOTAtNTVhMS00NzY4LThm
YWItYjJkZDBlMGJhOTE2Lzk2M2Q5YjkwLTU1YTEtNDc2OC04ZmFiLWIyZGQwZTBi
YTkxNi5jcmwwHwYDVR0jBBgwFoAUh76dtF2TRFU9WoNFJoAidzt+d24wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NjNkOWI5MC01NWExLTQ3NjgtOGZhYi1iMmRk
MGUwYmE5MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJlEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEztiABs9O7J9STqPlmbfMgIqnuBK02PzBJ1s41VDxBh2yH6tNCLhlZH
uBfOcS3Go4SauJHQEa3Som9/0guqsQxJq1Zfv1sJe4b6phauTdgohPt1K1yaUFd6
TR5zSot7YsudncAJE/XChJ5EGG+tzPnkap7S885/74NZiLBnzt3T16TeF9iuIbl1
fUko8cenZ8AGDBF2lXemJUCelufAeYogYBhz4WMsriR2ODI58zS5gAf9TBZnMGfM
WY6suAe99mqqujoW4Z2tBzLOEdyH6uulSGRvSK6GvOmqF7QjLdmuy+uKv4kPaq/K
rRIZuxsHjfDF+yRYHmw6c35JP/KvBMg=
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:42:31 2025 by rpki-client