Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0dc82d5f-043c-3088-8e71-04e2e22fb080.roa
File:                     0dc82d5f-043c-3088-8e71-04e2e22fb080.roa (raw, json)
Hash identifier:          SvENXsVh+X/gwqtRspUtxbiRqE2Om/zUoARu+oUKF4g=
Subject key identifier:   DC:42:2D:7C:BE:3F:5C:96:53:18:8F:CE:BF:40:ED:AD:CB:E1:58:DC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ACB4110A6ED448F92775E8D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0dc82d5f-043c-3088-8e71-04e2e22fb080.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        96.17.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:10:a6:ed:44:8f:92:77:5e:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=946c3fd9-75b7-42c9-81d4-839075bc8ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:23:6f:2e:70:2d:34:f6:76:a4:fa:c1:7f:93:
                    74:da:fa:80:8b:6a:a1:ec:65:c4:13:3d:33:ae:8a:
                    37:d1:64:36:c4:f0:90:a7:18:ba:db:fe:c2:84:bd:
                    be:fd:ab:44:89:b3:90:44:a1:b3:7c:d6:c8:03:c4:
                    84:f5:6c:c3:8b:4b:d1:be:68:9c:0c:74:5a:c7:1c:
                    bd:b7:65:cb:f3:11:19:cf:a8:8a:e4:2e:37:d1:d3:
                    78:56:22:1b:5b:d2:9f:b1:c7:48:e3:48:4b:4d:dd:
                    8d:39:6c:24:d8:34:92:18:70:37:bb:45:be:47:8f:
                    22:73:2b:a1:b9:cd:57:fd:96:14:c8:f5:ea:76:12:
                    fd:6c:49:0b:d0:5f:c7:7c:36:aa:1d:47:5b:d9:e8:
                    da:92:3a:f3:40:32:7e:a6:5d:e0:aa:20:d5:71:86:
                    a9:73:d2:ff:f8:30:44:2b:97:95:06:70:7a:38:00:
                    63:c6:1d:45:de:ef:8c:1a:f1:c3:2c:c1:e4:3b:48:
                    cd:25:a5:f9:a8:45:6b:50:20:5e:af:e6:bb:39:64:
                    df:99:cb:83:15:d3:bf:ae:e7:3a:3b:52:a7:bb:16:
                    19:34:6e:52:94:5e:6c:33:97:ce:c6:7e:3b:70:f5:
                    f6:43:8c:6b:1f:91:13:c6:b8:99:ac:ed:89:3f:b4:
                    73:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:42:2D:7C:BE:3F:5C:96:53:18:8F:CE:BF:40:ED:AD:CB:E1:58:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0dc82d5f-043c-3088-8e71-04e2e22fb080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.17.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:38:40:5b:54:1a:8e:4f:ab:1b:2e:81:53:47:a4:17:a7:9e:
         67:8a:0f:ea:d0:05:df:a2:53:d1:25:ce:ea:2f:b1:0f:9f:b5:
         54:52:93:84:0e:76:5c:af:05:9c:1c:01:e5:33:f2:af:db:8f:
         9a:48:a8:84:ca:f1:5d:26:29:52:cf:79:5d:ff:86:6c:ba:13:
         f5:4b:d7:ec:24:d9:4b:31:f1:e6:18:1a:72:b2:0e:cf:95:1c:
         9e:11:e6:08:aa:93:13:93:3a:44:36:71:87:6f:50:16:77:6e:
         ae:c7:36:a1:70:05:2e:d4:a1:db:2a:94:81:16:d4:5b:01:30:
         31:7b:ee:d6:7d:7b:1d:da:cc:09:df:1f:5b:fa:d9:c3:b5:53:
         bd:26:45:16:e1:f2:07:8a:d7:48:44:09:e0:2b:19:de:bf:90:
         61:ad:7d:0e:bf:66:3c:b1:74:3a:d0:9e:c5:e3:df:6b:1b:c6:
         bb:93:fb:a7:fb:9c:f9:08:73:36:ef:71:19:8b:ff:c8:76:a2:
         34:c9:4b:f6:d1:99:b3:ce:9a:96:71:cd:59:6a:c4:c7:46:2c:
         0e:0f:ad:da:d8:d4:5f:3e:1c:21:1f:72:00:3f:3f:bf:56:b4:
         b6:e6:95:51:fa:8a:36:53:c6:5f:d4:99:3f:21:2b:9d:9c:bb:
         0d:e4:70:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRCm7USPkndejQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
OTQ2YzNmZDktNzViNy00MmM5LTgxZDQtODM5MDc1YmM4Y2U3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSNvLnAtNPZ2pPrBf5N02vqAi2qh7GXEEz0z
roo30WQ2xPCQpxi62/7ChL2+/atEibOQRKGzfNbIA8SE9WzDi0vRvmicDHRaxxy9
t2XL8xEZz6iK5C430dN4ViIbW9KfscdI40hLTd2NOWwk2DSSGHA3u0W+R48icyuh
uc1X/ZYUyPXqdhL9bEkL0F/HfDaqHUdb2ejakjrzQDJ+pl3gqiDVcYapc9L/+DBE
K5eVBnB6OABjxh1F3u+MGvHDLMHkO0jNJaX5qEVrUCBer+a7OWTfmcuDFdO/ruc6
O1KnuxYZNG5SlF5sM5fOxn47cPX2Q4xrH5ETxriZrO2JP7RzxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNxCLXy+P1yWUxiPzr9A7a3L4VjcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGRjODJkNWYtMDQzYy0z
MDg4LThlNzEtMDRlMmUyMmZiMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYBE2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGA4QFtUGo5PqxsugVNHpBennmeKD+rQBd+iU9ElzuovsQ+ftVRSk4QO
dlyvBZwcAeUz8q/bj5pIqITK8V0mKVLPeV3/hmy6E/VL1+wk2Usx8eYYGnKyDs+V
HJ4R5giqkxOTOkQ2cYdvUBZ3bq7HNqFwBS7UodsqlIEW1FsBMDF77tZ9ex3azAnf
H1v62cO1U70mRRbh8geK10hECeArGd6/kGGtfQ6/ZjyxdDrQnsXj32sbxruT+6f7
nPkIczbvcRmL/8h2ojTJS/bRmbPOmpZxzVlqxMdGLA4PrdrY1F8+HCEfcgA/P79W
tLbmlVH6ijZTxl/UmT8hK52cuw3kcOI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:02:55 2025 by rpki-client