Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/88089700-6560-3403-a85d-651c59fddc52.roa
File:                     88089700-6560-3403-a85d-651c59fddc52.roa (raw, json)
Hash identifier:          Og5l0i84WbbE8SVfMeSm/QLw1XbIxUGKOYZXSipNat0=
Subject key identifier:   87:6A:1C:EA:A4:8A:95:BC:D6:DB:A3:34:30:70:A7:30:D7:63:0D:30
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F4328584A49705FE3FC3AA601F5150690
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/88089700-6560-3403-a85d-651c59fddc52.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     46841
IP address blocks:        162.218.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:5f:e3:fc:3a:a6:01:f5:15:06:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=4cc2eb65-c60e-47da-878c-756cc99d5b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:09:87:1d:a9:bd:f5:60:8d:62:b7:9c:a9:
                    cd:59:94:8d:0a:8f:e3:66:53:e6:b0:22:40:18:6c:
                    28:1e:0c:ed:96:81:3d:1f:1b:13:f5:3b:30:fd:ba:
                    2e:eb:c8:02:5e:e4:e9:c6:c7:79:a6:b3:fb:43:ac:
                    70:1e:6d:2d:fa:a8:bc:17:a3:8c:47:0f:d2:8b:22:
                    b0:6a:0e:4c:00:96:0c:82:0f:78:4e:4d:42:25:cf:
                    52:67:e4:4a:76:9d:9d:a5:e7:63:68:53:ca:d3:04:
                    e1:b5:ab:b5:e1:8f:49:a1:26:c9:7f:17:76:ff:75:
                    cd:f4:e1:14:81:a7:7e:01:a4:0e:d1:04:cc:ca:b1:
                    de:4e:f7:67:2c:cb:5b:b9:5e:1d:a9:68:6f:31:f4:
                    65:5b:cf:a5:d8:7b:a8:c7:02:d7:76:14:8e:35:1d:
                    44:6b:17:cd:a3:60:d9:99:0a:7f:f5:23:d1:5b:f5:
                    4d:4b:0d:a9:ff:2e:fd:ef:6f:b1:5f:6e:25:73:aa:
                    20:a0:d8:c3:4b:8a:93:28:41:eb:90:f3:39:ac:a6:
                    a6:32:ae:9c:e9:c8:14:c1:64:18:bc:20:6c:8d:b3:
                    95:4f:74:ab:13:f0:06:82:67:2a:dd:93:e1:00:92:
                    dd:63:c0:0f:82:84:01:17:54:80:20:3b:8d:e8:14:
                    34:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6A:1C:EA:A4:8A:95:BC:D6:DB:A3:34:30:70:A7:30:D7:63:0D:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/88089700-6560-3403-a85d-651c59fddc52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:22:5d:a7:1b:c8:70:07:16:ef:45:a1:e3:34:b2:f4:85:fa:
         b9:54:88:13:3b:01:14:c8:3f:19:2c:a6:68:eb:a9:56:0d:7f:
         12:e5:e9:e4:fa:a7:fd:4c:6f:a4:0c:43:e2:b5:59:27:e4:9a:
         ee:66:05:95:16:39:4e:91:df:b4:80:4e:4c:60:fe:9d:bd:9a:
         75:c4:eb:a8:11:9b:91:80:1d:94:04:2e:1b:9f:9d:4d:c7:ef:
         5b:8c:b2:06:a9:cb:78:f2:52:50:db:4a:2c:8d:2c:d5:fd:5f:
         1a:1c:be:ae:7b:f6:3b:b7:13:2b:92:69:3a:8f:b6:a9:c7:62:
         80:0c:62:d4:80:4c:b0:2a:b0:b4:27:b1:de:b7:4b:0e:3f:fa:
         72:39:fe:2f:2e:6b:01:bd:01:13:ac:07:79:3e:9a:02:35:5e:
         d2:58:ee:69:84:80:ea:b5:ae:6e:ba:49:62:01:23:dd:32:65:
         3d:61:68:21:fd:d9:75:06:3b:71:6f:b0:91:a3:67:23:0e:da:
         a5:38:5a:89:d9:e4:4a:6a:37:99:83:10:d8:ca:76:3c:3b:6d:
         9e:5b:ae:16:fc:bb:99:57:d7:46:ab:b6:03:a5:b6:af:0e:f4:
         96:2e:20:80:31:09:77:78:15:d0:e9:d1:f3:43:6a:13:0d:e5:
         9c:38:33:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:43:40 2025 by rpki-client