Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/785cfc03-649d-355d-9203-8d59836186e2.roa
File:                     785cfc03-649d-355d-9203-8d59836186e2.roa (raw, json)
Hash identifier:          qf72vA8CRoa9mL91YoCcSvpOEbWXsdDuVEbQBtnYlDE=
Subject key identifier:   10:5E:67:9B:18:4C:73:A9:7C:D2:E6:68:61:85:86:BA:39:E2:97:6C
Certificate issuer:       /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
Certificate serial:       010D0C9F4328584AF5214442271486B49EBFF180
Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/785cfc03-649d-355d-9203-8d59836186e2.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     31799
IP address blocks:        216.39.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:44:42:27:14:86:b4:9e:bf:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=3658ea25-66e2-4d32-b71c-58d0866bf01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:32:7e:d6:e1:e2:fd:3e:6e:f6:c8:ba:11:18:
                    19:ef:d8:db:62:18:15:4d:14:31:cc:52:af:be:d5:
                    cb:ec:a9:7f:f3:3f:40:46:9f:41:fe:a0:59:da:84:
                    14:2e:d9:b5:bf:94:52:d2:04:a0:2e:2d:b3:42:fc:
                    58:02:d2:d4:00:9a:04:c8:d7:32:00:f4:d0:85:37:
                    cc:ea:fd:43:8c:31:d0:6a:8a:30:fe:45:13:c4:72:
                    01:92:ea:5c:81:8a:a1:19:03:ec:0b:eb:26:d2:ca:
                    b0:10:91:c0:ef:cf:31:1c:5e:3e:14:80:72:49:27:
                    32:15:e7:5e:83:9a:2d:a2:21:b0:a0:21:37:06:b9:
                    9c:af:c7:e9:d9:10:6b:46:33:87:7c:cd:be:37:08:
                    93:f2:d1:0e:d6:58:b3:f1:e6:c4:5b:c6:2b:3f:4a:
                    fa:5d:d6:77:da:6f:b9:fd:0b:7c:cc:75:08:37:65:
                    02:87:5b:8c:16:0b:0d:db:db:4c:be:c8:af:69:32:
                    40:8a:b6:eb:bf:13:75:d9:52:0e:09:a2:51:cd:d6:
                    c7:4e:14:9a:78:f0:10:ac:23:3f:46:22:e9:e6:e6:
                    70:83:ec:c3:db:36:9d:39:21:be:4f:6f:24:84:44:
                    d4:4d:4b:fd:c7:80:92:f2:8c:da:b3:a9:5e:0f:31:
                    db:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5E:67:9B:18:4C:73:A9:7C:D2:E6:68:61:85:86:BA:39:E2:97:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/785cfc03-649d-355d-9203-8d59836186e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl

            X509v3 Authority Key Identifier:
                keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f7:96:28:bb:8d:a4:19:69:4b:58:f8:43:6e:a7:49:16:34:
         a1:3d:44:bf:9d:aa:f6:d3:9f:35:e8:a3:32:64:af:16:a8:55:
         df:28:bb:c4:3c:d2:2b:72:1b:03:e0:c1:13:e9:e1:5a:39:81:
         9b:ce:3d:9c:24:9d:ec:f6:a2:0b:47:a3:58:94:17:b8:ec:7e:
         d4:4e:4f:bd:60:42:13:56:d3:cc:c7:d8:68:a6:39:75:48:02:
         e8:67:f9:ca:ce:80:64:ed:7f:7b:ed:8a:e5:19:1c:b4:96:ea:
         45:da:9d:37:81:f1:9d:ee:19:1b:3e:6b:49:8a:e4:c5:63:be:
         cf:dc:2a:1b:b7:c9:4e:90:e1:e3:bc:a7:c9:52:d5:9f:0c:e1:
         bb:d5:5f:3b:7e:37:0a:62:3e:35:44:2a:04:82:9c:de:af:c4:
         53:56:c6:78:db:9b:49:b6:3e:ea:f7:44:97:8c:17:44:65:cb:
         e4:c8:9b:2f:a6:49:d3:dc:1d:31:2c:a9:8d:63:8b:ab:f5:24:
         3b:0f:05:b4:a6:9b:f7:f4:25:b7:cb:e7:c9:d8:12:b4:b5:b5:
         b9:28:b4:5a:8a:c5:4f:7d:36:48:81:ab:e9:87:41:c1:01:78:
         96:92:44:3b:eb:b3:f1:99:cb:c5:45:59:e4:06:06:ff:cc:ee:
         b1:1c:e9:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IURCJxSGtJ6/8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTdlNjBiNzctMTdlMy00MjUwLTliYzgtYjVlNzY2NGEz
MjBhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk
MzY1OGVhMjUtNjZlMi00ZDMyLWI3MWMtNThkMDg2NmJmMDFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzJ+1uHi/T5u9si6ERgZ79jbYhgVTRQxzFKv
vtXL7Kl/8z9ARp9B/qBZ2oQULtm1v5RS0gSgLi2zQvxYAtLUAJoEyNcyAPTQhTfM
6v1DjDHQaoow/kUTxHIBkupcgYqhGQPsC+sm0sqwEJHA788xHF4+FIBySScyFede
g5otoiGwoCE3Brmcr8fp2RBrRjOHfM2+NwiT8tEO1liz8ebEW8YrP0r6XdZ32m+5
/Qt8zHUIN2UCh1uMFgsN29tMvsivaTJAirbrvxN12VIOCaJRzdbHThSaePAQrCM/
RiLp5uZwg+zD2zadOSG+T28khETUTUv9x4CS8ozas6leDzHbqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBBeZ5sYTHOpfNLmaGGFhro54pdsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85N2U2
MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3NjY0YTMyMGEvNzg1Y2ZjMDMtNjQ5ZC0z
NTVkLTkyMDMtOGQ1OTgzNjE4NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTdlNjBiNzctMTdlMy00MjUwLTli
YzgtYjVlNzY2NGEzMjBhLzk3ZTYwYjc3LTE3ZTMtNDI1MC05YmM4LWI1ZTc2NjRh
MzIwYS5jcmwwHwYDVR0jBBgwFoAUuDyKvqqk837fXRUqBDrtbKGEtlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85N2U2MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3
NjY0YTMyMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Cf0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIf3lii7jaQZaUtY+ENup0kWNKE9RL+dqvbTnzXoozJkrxaoVd8ou8Q8
0ityGwPgwRPp4Vo5gZvOPZwknez2ogtHo1iUF7jsftROT71gQhNW08zH2GimOXVI
Auhn+crOgGTtf3vtiuUZHLSW6kXanTeB8Z3uGRs+a0mK5MVjvs/cKhu3yU6Q4eO8
p8lS1Z8M4bvVXzt+NwpiPjVEKgSCnN6vxFNWxnjbm0m2Pur3RJeMF0Rly+TImy+m
SdPcHTEsqY1ji6v1JDsPBbSmm/f0JbfL58nYErS1tbkotFqKxU99NkiBq+mHQcEB
eJaSRDvrs/GZy8VFWeQGBv/M7rEc6Xc=
-----END CERTIFICATE-----
Generated at Sun Aug 24 06:24:57 2025 by rpki-client