Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19be3bc2-7f2f-3829-bb70-259bdc9ba307.roa
File:                     19be3bc2-7f2f-3829-bb70-259bdc9ba307.roa (raw, json)
Hash identifier:          1L0dAlJ3To6BD1iT8YV2HPYxWNezcW1gekKWaAWd0Cc=
Subject key identifier:   FB:9C:69:F7:E3:7A:D3:57:F8:A4:A7:DB:20:4F:5C:D0:A2:2B:A4:66
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ACB40F95B45881B6EFB1CE1A8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19be3bc2-7f2f-3829-bb70-259bdc9ba307.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        96.16.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:f9:5b:45:88:1b:6e:fb:1c:e1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=afeb6dd6-8399-4c4e-a37f-f545d18ce0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e2:e1:d2:2b:8f:fd:5f:21:29:55:05:90:6f:
                    39:27:03:dc:3a:3b:1c:b8:bc:80:e2:97:e8:2b:74:
                    49:b5:6c:0e:e2:ed:ff:0f:0e:ad:44:5d:7a:6e:18:
                    42:3d:e1:28:64:69:9e:0b:a8:ca:d3:61:e7:01:28:
                    80:20:c4:3d:db:d7:41:01:c2:18:12:da:43:a0:92:
                    0d:bc:56:71:36:c0:27:f2:90:0c:8e:2a:06:55:ba:
                    84:c3:ee:81:be:fe:d1:c2:fb:cc:3b:ee:4d:f2:e1:
                    92:ca:9f:45:e2:91:e0:7a:ca:2d:c9:73:f2:55:01:
                    51:93:59:7a:02:71:8d:a9:9e:31:6d:87:15:67:23:
                    3f:97:e8:84:42:69:5f:24:fd:82:ec:37:c7:59:5e:
                    c1:8d:90:01:a9:da:3f:a8:b8:f2:25:08:31:85:93:
                    df:33:39:24:4b:6b:87:70:6c:1e:4e:19:47:b1:17:
                    0a:2f:22:fd:17:59:f5:10:da:fe:c8:20:09:f2:8b:
                    90:4b:8c:01:77:3a:cd:8b:51:c7:00:f1:f9:22:b1:
                    c1:d8:8a:7f:68:e3:ae:fb:32:fc:21:eb:4b:71:8f:
                    54:aa:cb:57:5d:04:a3:63:eb:ff:43:cc:f6:c6:5d:
                    17:65:7b:ab:40:bc:2c:87:12:50:da:a9:19:99:42:
                    13:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9C:69:F7:E3:7A:D3:57:F8:A4:A7:DB:20:4F:5C:D0:A2:2B:A4:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19be3bc2-7f2f-3829-bb70-259bdc9ba307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.16.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:64:20:7a:c4:43:bf:80:08:bd:ab:f3:c7:8e:20:ed:43:ab:
         65:32:3f:df:b7:9b:9e:d9:71:e3:98:d3:be:34:b0:64:95:1c:
         06:a2:f5:4e:10:29:ad:35:63:cc:8d:a2:4d:4e:0e:f2:95:ff:
         bd:2b:5d:03:4a:1f:e8:36:55:42:c3:9f:e5:e8:62:ed:6b:c7:
         ad:55:04:d4:c6:57:60:b1:b0:cd:68:ea:43:36:d6:58:f7:59:
         2b:72:15:e2:09:23:11:0e:20:bb:13:2d:22:31:17:eb:38:14:
         aa:89:d1:61:12:04:12:ea:0f:63:6e:30:35:f3:1c:9c:fd:88:
         de:85:b0:c1:85:2e:22:af:6d:d3:34:ce:e3:cc:fd:50:ef:b2:
         92:f1:f7:75:4c:28:90:a3:23:ed:ae:df:eb:06:72:ae:96:40:
         d5:64:f7:3f:cf:87:1d:d9:42:e9:e6:07:68:a0:3b:a7:01:06:
         67:d7:3f:42:d4:79:a2:22:a2:c2:92:8b:87:90:fc:c1:24:5f:
         cc:80:d2:01:08:86:82:8a:93:1e:d4:39:3b:39:8c:69:08:20:
         86:51:d2:5e:63:29:35:ac:81:50:40:37:cf:97:c1:7a:21:54:
         54:3d:f5:57:d3:79:bb:48:1b:2d:9f:54:ea:06:1c:9d:36:76:
         dc:32:93:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQPlbRYgbbvsc4agwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
YWZlYjZkZDYtODM5OS00YzRlLWEzN2YtZjU0NWQxOGNlMGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeLh0iuP/V8hKVUFkG85JwPcOjscuLyA4pfo
K3RJtWwO4u3/Dw6tRF16bhhCPeEoZGmeC6jK02HnASiAIMQ929dBAcIYEtpDoJIN
vFZxNsAn8pAMjioGVbqEw+6Bvv7RwvvMO+5N8uGSyp9F4pHgesotyXPyVQFRk1l6
AnGNqZ4xbYcVZyM/l+iEQmlfJP2C7DfHWV7BjZABqdo/qLjyJQgxhZPfMzkkS2uH
cGweThlHsRcKLyL9F1n1ENr+yCAJ8ouQS4wBdzrNi1HHAPH5IrHB2Ip/aOOu+zL8
IetLcY9UqstXXQSjY+v/Q8z2xl0XZXurQLwshxJQ2qkZmUITiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPucaffjetNX+KSn2yBPXNCiK6RmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTliZTNiYzItN2YyZi0z
ODI5LWJiNzAtMjU5YmRjOWJhMzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYBBMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIpkIHrEQ7+ACL2r88eOIO1Dq2UyP9+3m57ZceOY0740sGSVHAai9U4Q
Ka01Y8yNok1ODvKV/70rXQNKH+g2VULDn+XoYu1rx61VBNTGV2CxsM1o6kM21lj3
WStyFeIJIxEOILsTLSIxF+s4FKqJ0WESBBLqD2NuMDXzHJz9iN6FsMGFLiKvbdM0
zuPM/VDvspLx93VMKJCjI+2u3+sGcq6WQNVk9z/Phx3ZQunmB2igO6cBBmfXP0LU
eaIiosKSi4eQ/MEkX8yA0gEIhoKKkx7UOTs5jGkIIIZR0l5jKTWsgVBAN8+XwXoh
VFQ99VfTebtIGy2fVOoGHJ02dtwyk6g=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:01:29 2025 by rpki-client