Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa
File:                     fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa (raw, json)
Hash identifier:          R0InUldEBlqXFI1rnX3kYeQkcsY+gaOxDSq2p4Rwpg4=
Subject key identifier:   5A:8E:B1:5B:9B:6C:A6:32:ED:51:11:20:44:9E:C7:CB:67:0A:CA:23
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584AC2E0ED3FEE87A76F48ECFBA0
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     11260
IP address blocks:        173.237.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:ed:3f:ee:87:a7:6f:48:ec:fb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=8d9aa3f3-c121-430e-995e-ae65f249af39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8a:8c:1f:75:2d:d1:eb:3e:42:ec:37:46:e2:
                    4a:31:86:19:8a:4e:be:06:89:10:b2:98:9e:df:68:
                    c3:68:a0:dc:67:4e:3f:1e:9d:48:6a:65:89:4a:b4:
                    96:1b:28:37:aa:6f:01:aa:41:d1:eb:62:b6:39:c3:
                    2e:77:3b:39:8d:11:23:8e:84:e7:6a:4c:c5:8b:69:
                    70:92:cd:2d:67:6a:f3:b6:e7:80:a8:42:68:98:db:
                    1c:dc:b3:17:b9:e7:52:56:75:39:0f:98:9a:61:ae:
                    49:c5:c0:94:f0:00:3e:71:3f:5f:4e:8c:6b:41:0d:
                    47:6e:56:72:cf:48:a7:d0:63:12:ee:76:d9:92:f9:
                    cb:38:79:ef:a0:65:24:75:39:8b:fe:d6:80:98:47:
                    63:80:82:90:2d:46:c1:3b:63:0d:a6:0b:3e:e1:04:
                    37:14:60:38:81:5d:2b:b4:98:86:cf:04:c6:8d:b8:
                    98:2d:38:cf:60:99:ae:b7:27:df:b9:f7:71:53:eb:
                    cd:77:e4:d7:0f:61:8f:20:d9:5b:a8:f7:c7:36:ff:
                    f0:b1:db:f3:72:51:3a:af:97:39:ed:b5:29:b1:89:
                    87:28:45:38:52:1a:96:58:15:8d:98:79:4a:31:27:
                    e7:20:f2:0a:7d:e7:7c:05:3f:25:f6:eb:1b:97:12:
                    e5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8E:B1:5B:9B:6C:A6:32:ED:51:11:20:44:9E:C7:CB:67:0A:CA:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.237.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ba:c0:45:fc:cd:48:ed:91:53:1e:c4:96:74:22:2a:27:8a:
         a4:1f:d4:16:0e:bf:0a:e6:c4:ec:d6:e0:11:55:c2:2f:4e:a0:
         9a:33:a8:54:b8:c4:86:8b:11:14:80:23:07:54:40:3c:33:03:
         d9:4c:ab:12:46:94:8a:7b:24:9a:00:56:95:ae:c7:c0:57:cf:
         ac:6e:69:f3:cc:65:ee:4d:7b:00:f6:e8:a7:27:37:db:27:e6:
         f3:fe:82:1e:7b:3a:3b:54:cc:14:e5:38:47:9d:c0:2d:dd:63:
         31:f5:fa:36:8c:cd:06:01:3e:24:63:42:85:ae:8e:7f:d0:c8:
         2b:66:ca:02:a7:48:c7:0e:fd:22:8b:17:ac:08:18:97:d8:e5:
         60:5c:dc:50:6d:47:18:62:c3:dc:ad:d3:ab:5c:e9:fa:c4:0b:
         4f:62:3e:74:f8:48:11:c1:15:33:c3:86:f9:01:d1:dd:f0:43:
         93:56:fd:e7:e4:44:7f:9a:d7:9d:ee:a4:f1:fb:bf:d8:25:72:
         67:ae:a1:79:e0:ee:45:20:2a:5f:76:ea:73:d4:11:2b:e5:4f:
         f8:84:0d:17:2e:54:f6:60:8a:6b:e8:d9:a2:42:f3:4f:8b:2a:
         f4:fe:07:25:e6:c6:5d:b2:32:23:d3:83:11:a0:ac:63:00:57:
         27:94:ee:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4O0/7oenb0js+6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4
OTViMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
OGQ5YWEzZjMtYzEyMS00MzBlLTk5NWUtYWU2NWYyNDlhZjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIqMH3Ut0es+Quw3RuJKMYYZik6+BokQspie
32jDaKDcZ04/Hp1IamWJSrSWGyg3qm8BqkHR62K2OcMudzs5jREjjoTnakzFi2lw
ks0tZ2rztueAqEJomNsc3LMXuedSVnU5D5iaYa5JxcCU8AA+cT9fToxrQQ1HblZy
z0in0GMS7nbZkvnLOHnvoGUkdTmL/taAmEdjgIKQLUbBO2MNpgs+4QQ3FGA4gV0r
tJiGzwTGjbiYLTjPYJmutyffufdxU+vNd+TXD2GPINlbqPfHNv/wsdvzclE6r5c5
7bUpsYmHKEU4UhqWWBWNmHlKMSfnIPIKfed8BT8l9usblxLlKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFqOsVubbKYy7VERIESex8tnCsojMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4
MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvZmQ3NWIzZDgtM2U1ZS0z
YTAyLTk3Y2UtM2ExYTljNDExNzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi
NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh
ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy
M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFre1gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJq6wEX8zUjtkVMexJZ0IioniqQf1BYOvwrmxOzW4BFVwi9OoJozqFS4
xIaLERSAIwdUQDwzA9lMqxJGlIp7JJoAVpWux8BXz6xuafPMZe5NewD26KcnN9sn
5vP+gh57OjtUzBTlOEedwC3dYzH1+jaMzQYBPiRjQoWujn/QyCtmygKnSMcO/SKL
F6wIGJfY5WBc3FBtRxhiw9yt06tc6frEC09iPnT4SBHBFTPDhvkB0d3wQ5NW/efk
RH+a153upPH7v9glcmeuoXng7kUgKl926nPUESvlT/iEDRcuVPZgimvo2aJC80+L
KvT+ByXmxl2yMiPTgxGgrGMAVyeU7iY=
-----END CERTIFICATE-----
Generated at Sun Aug 24 06:02:30 2025 by rpki-client