Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/eacecb68-5cde-3ce5-8b25-6b94e45fac7f.roa
File:                     eacecb68-5cde-3ce5-8b25-6b94e45fac7f.roa (raw, json)
Hash identifier:          1IlPJpE7eLjyQg8+0rAMDWtLVQr4ju23OQLeY8NDitc=
Subject key identifier:   8B:10:B1:35:8C:D5:FD:F5:12:E3:0D:D8:C0:8B:44:42:19:42:4F:31
Certificate issuer:       /CN=88d13a4f-a038-4d71-9494-9d48fef32c35
Certificate serial:       010D0C9F4328584AF3BBDEE889D22C5685E4A500
Authority key identifier: 59:E2:B0:53:21:17:65:02:8F:55:06:74:F4:76:F6:06:FB:8F:72:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/eacecb68-5cde-3ce5-8b25-6b94e45fac7f.roa
Signing time:             Sat 23 Aug 2025 13:00:41 +0000
ROA not before:           Sat 23 Aug 2025 13:00:41 +0000
ROA not after:            Fri 21 Nov 2025 14:00:41 +0000
asID:                     23041
IP address blocks:        198.137.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f3:bb:de:e8:89:d2:2c:56:85:e4:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d13a4f-a038-4d71-9494-9d48fef32c35
        Validity
            Not Before: Aug 23 13:00:41 2025 GMT
            Not After : Nov 21 14:00:41 2025 GMT
        Subject: CN=4bfac4f8-7b9e-48fd-b2e2-efc916964a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bc:56:5b:d5:c0:0e:44:2e:77:21:8b:00:12:
                    5d:35:f5:06:98:6e:25:5d:ac:88:b1:66:66:a2:90:
                    78:2a:12:3f:37:e6:4d:90:e6:47:fa:d0:80:dd:de:
                    2e:f7:d5:9c:fc:3d:7f:33:7b:6c:f5:a7:67:0b:41:
                    47:76:99:7e:f0:b6:1f:e8:78:59:17:3f:6a:c6:2a:
                    04:36:34:0b:73:81:ab:d6:e3:48:69:fd:a6:3b:43:
                    b3:46:39:31:6d:68:4e:c7:de:4c:42:02:c3:09:93:
                    e3:a5:e3:1c:99:60:a6:af:ed:f6:93:67:cc:96:83:
                    39:cb:1b:21:df:2a:3e:d2:23:f6:4c:e7:0c:e5:5e:
                    45:64:2d:99:3d:89:c0:2e:7a:b0:ba:98:52:2b:70:
                    6d:59:dd:9b:22:59:39:d8:0a:bd:d5:f1:ed:e6:0f:
                    77:e2:1c:f1:96:99:8c:d7:88:1c:a9:b8:34:e5:d7:
                    41:82:68:28:66:5a:ef:a6:ce:15:fb:f8:ee:0b:f2:
                    0c:ce:2c:fe:7e:26:a3:43:f3:9a:f1:4e:f4:0e:6b:
                    2e:c4:8c:2b:65:42:d3:d0:23:32:f3:52:29:27:d7:
                    69:6d:9c:3e:f8:12:70:d8:a7:49:36:10:32:2c:12:
                    d7:ad:e2:cd:b5:10:3a:28:ec:bf:f7:f6:d1:23:a4:
                    e8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:10:B1:35:8C:D5:FD:F5:12:E3:0D:D8:C0:8B:44:42:19:42:4F:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/eacecb68-5cde-3ce5-8b25-6b94e45fac7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.crl

            X509v3 Authority Key Identifier:
                keyid:59:E2:B0:53:21:17:65:02:8F:55:06:74:F4:76:F6:06:FB:8F:72:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.137.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:39:73:4c:20:bb:df:ca:8a:fe:34:3b:29:24:ba:c7:5c:9d:
         a4:cd:8e:fb:dc:0e:71:be:e3:2e:b9:8a:64:bf:71:c2:37:dd:
         b7:a6:b4:3d:60:b6:81:6d:d6:c0:cb:18:d7:9b:5c:3a:49:19:
         18:39:04:0d:63:33:b1:03:b3:a1:e8:08:a4:9c:38:2a:63:4f:
         d9:29:0d:86:ef:c0:44:49:38:c9:70:49:a9:32:48:f6:5f:6f:
         34:c5:74:ed:eb:c1:73:f5:a3:d2:36:30:75:04:0f:fe:0e:4f:
         27:d1:b4:ca:70:63:12:68:c5:eb:33:fb:ea:61:3c:4e:28:84:
         db:02:d6:e7:57:92:84:fe:f5:ac:c2:e9:cf:6a:de:d7:d8:33:
         59:1a:04:5e:ca:2e:2d:5c:35:55:55:fc:82:6b:1a:3f:d7:10:
         72:51:57:f8:52:58:52:88:97:0f:2c:df:b6:0e:7c:37:27:c5:
         dc:04:18:99:c9:3c:24:28:87:90:10:43:ac:1e:0e:a5:a1:f4:
         8f:f3:b9:53:c4:84:9d:01:8c:6a:ad:85:5c:4c:bd:2e:a4:ec:
         22:bf:00:fc:48:9e:83:f1:32:55:13:40:b8:73:3a:89:e4:0f:
         0a:9b:3f:b2:72:de:d9:68:03:67:69:4b:ab:f1:28:d1:9b:09:
         65:36:b9:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErzu97oidIsVoXkpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODhkMTNhNGYtYTAzOC00ZDcxLTk0OTQtOWQ0OGZlZjMy
YzM1MB4XDTI1MDgyMzEzMDA0MVoXDTI1MTEyMTE0MDA0MVowLzEtMCsGA1UEAxMk
NGJmYWM0ZjgtN2I5ZS00OGZkLWIyZTItZWZjOTE2OTY0YTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbxWW9XADkQudyGLABJdNfUGmG4lXayIsWZm
opB4KhI/N+ZNkOZH+tCA3d4u99Wc/D1/M3ts9adnC0FHdpl+8LYf6HhZFz9qxioE
NjQLc4Gr1uNIaf2mO0OzRjkxbWhOx95MQgLDCZPjpeMcmWCmr+32k2fMloM5yxsh
3yo+0iP2TOcM5V5FZC2ZPYnALnqwuphSK3BtWd2bIlk52Aq91fHt5g934hzxlpmM
14gcqbg05ddBgmgoZlrvps4V+/juC/IMziz+fiajQ/Oa8U70DmsuxIwrZULT0CMy
81IpJ9dpbZw++BJw2KdJNhAyLBLXreLNtRA6KOy/9/bRI6To1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIsQsTWM1f31EuMN2MCLREIZQk8xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84OGQx
M2E0Zi1hMDM4LTRkNzEtOTQ5NC05ZDQ4ZmVmMzJjMzUvZWFjZWNiNjgtNWNkZS0z
Y2U1LThiMjUtNmI5NGU0NWZhYzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODhkMTNhNGYtYTAzOC00ZDcxLTk0
OTQtOWQ0OGZlZjMyYzM1Lzg4ZDEzYTRmLWEwMzgtNGQ3MS05NDk0LTlkNDhmZWYz
MmMzNS5jcmwwHwYDVR0jBBgwFoAUWeKwUyEXZQKPVQZ09Hb2BvuPcoAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy84OGQxM2E0Zi1hMDM4LTRkNzEtOTQ5NC05ZDQ4
ZmVmMzJjMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxomhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK45c0wgu9/Kiv40OykkusdcnaTNjvvcDnG+4y65imS/ccI33bemtD1g
toFt1sDLGNebXDpJGRg5BA1jM7EDs6HoCKScOCpjT9kpDYbvwERJOMlwSakySPZf
bzTFdO3rwXP1o9I2MHUED/4OTyfRtMpwYxJoxesz++phPE4ohNsC1udXkoT+9azC
6c9q3tfYM1kaBF7KLi1cNVVV/IJrGj/XEHJRV/hSWFKIlw8s37YOfDcnxdwEGJnJ
PCQoh5AQQ6weDqWh9I/zuVPEhJ0BjGqthVxMvS6k7CK/APxInoPxMlUTQLhzOonk
DwqbP7Jy3tloA2dpS6vxKNGbCWU2uT4=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:26:09 2025 by rpki-client