Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1d6954c-dd4a-3522-94a3-f2c0ba99bee0.roa
File:                     a1d6954c-dd4a-3522-94a3-f2c0ba99bee0.roa (raw, json)
Hash identifier:          92rerxS0AXqXN4Q6x4qQ+h5LSHUGlSShUQFgA0YhNoQ=
Subject key identifier:   62:33:82:2D:1B:E2:90:BA:E4:81:E5:8B:14:57:19:40:7D:04:65:9F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC8763625FD4B4812FA2178C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1d6954c-dd4a-3522-94a3-f2c0ba99bee0.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     24319
IP address blocks:        96.7.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:36:25:fd:4b:48:12:fa:21:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=75316bfc-d8cd-4ddf-9c0a-891f60123b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c5:58:d8:af:4e:26:c5:cc:bf:59:ee:28:b3:
                    98:b3:b9:0b:1f:4d:a6:8a:f4:10:2a:95:95:0f:a8:
                    ee:d1:71:e9:30:bb:7b:c4:89:c0:b7:92:1c:0f:13:
                    a7:2c:ea:79:5a:bb:7f:21:d9:1c:8b:95:99:97:be:
                    bd:08:cc:9f:b1:38:74:9f:a4:dd:30:4e:74:a8:bb:
                    90:29:aa:b8:fb:f0:c2:7f:73:d7:2f:69:59:12:26:
                    c5:1e:24:7a:df:5f:18:af:f4:b9:a9:85:68:15:4e:
                    78:1b:9f:0c:bc:3d:b4:88:d2:be:75:cc:89:f1:ff:
                    73:9e:4d:26:cc:c4:01:3e:03:f1:a3:46:1a:42:9b:
                    2c:b7:37:73:0b:c4:2d:c8:fa:13:f9:94:26:c8:df:
                    ef:b2:1a:5c:7f:d5:94:d5:5d:a1:ae:a8:c9:8d:cb:
                    26:10:f6:55:9e:6a:cf:af:5c:73:22:e0:db:fd:01:
                    9e:a7:af:1e:14:a1:a1:e3:ea:95:be:d5:e9:75:cb:
                    0f:d8:0a:b1:1b:6a:92:2b:05:c1:f1:cf:b4:e6:97:
                    5e:54:5e:29:87:d9:58:55:cf:04:9a:1f:66:c9:33:
                    61:75:ad:01:65:6b:1a:e6:4b:2e:e8:98:47:ea:e8:
                    9f:a8:47:c1:3e:57:dd:dc:49:01:bd:a2:dd:30:05:
                    8c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:33:82:2D:1B:E2:90:BA:E4:81:E5:8B:14:57:19:40:7D:04:65:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1d6954c-dd4a-3522-94a3-f2c0ba99bee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d9:86:dd:70:c9:fa:7e:7f:73:93:14:05:68:67:61:ff:68:
         88:47:c9:65:be:68:c0:ce:ae:6c:99:9b:eb:0d:60:f8:f1:7e:
         cc:3f:8e:08:ee:5e:dd:3a:29:98:a5:9f:cc:43:91:85:23:63:
         70:84:3c:ea:b1:91:7e:29:72:e3:cd:18:76:d0:f9:fe:54:41:
         5c:a6:58:e8:87:77:c4:c5:63:2d:4f:6a:d5:5d:08:c1:3f:cb:
         b8:3a:8f:40:2f:b2:e7:67:c7:a0:06:78:0c:9b:81:7c:a8:73:
         80:cf:55:62:6b:db:ef:df:fa:fe:14:2f:17:61:30:a3:82:52:
         30:a7:40:6c:8d:e8:a7:fa:d2:eb:0f:9e:fa:9f:94:dc:5f:22:
         0d:0f:62:db:dc:47:0c:56:44:39:83:11:15:b4:30:98:d0:15:
         03:8a:3a:88:1b:fc:14:50:1a:5e:1f:15:1b:f3:b1:2d:0e:c5:
         69:b8:cf:b6:28:ac:52:1a:56:c8:89:49:2e:b1:05:43:a9:6b:
         e5:f2:0b:29:fa:41:d5:38:f9:8d:78:7f:d4:a4:22:b1:63:9e:
         ec:f9:a5:60:d8:5d:9c:19:86:9a:a1:27:ff:51:87:57:86:2a:
         ac:be:f2:5a:c0:6a:07:ad:7a:db:2f:d0:3a:e2:81:4e:8a:0e:
         6e:49:d2:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdjYl/UtIEvoheMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk
NzUzMTZiZmMtZDhjZC00ZGRmLTljMGEtODkxZjYwMTIzYjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsVY2K9OJsXMv1nuKLOYs7kLH02mivQQKpWV
D6ju0XHpMLt7xInAt5IcDxOnLOp5Wrt/Idkci5WZl769CMyfsTh0n6TdME50qLuQ
Kaq4+/DCf3PXL2lZEibFHiR6318Yr/S5qYVoFU54G58MvD20iNK+dcyJ8f9znk0m
zMQBPgPxo0YaQpsstzdzC8QtyPoT+ZQmyN/vshpcf9WU1V2hrqjJjcsmEPZVnmrP
r1xzIuDb/QGep68eFKGh4+qVvtXpdcsP2AqxG2qSKwXB8c+05pdeVF4ph9lYVc8E
mh9myTNhda0BZWsa5ksu6JhH6uifqEfBPlfd3EkBvaLdMAWMmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGIzgi0b4pC65IHlixRXGUB9BGWfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTFkNjk1NGMtZGQ0YS0z
NTIyLTk0YTMtZjJjMGJhOTliZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYAeCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPZht1wyfp+f3OTFAVoZ2H/aIhHyWW+aMDOrmyZm+sNYPjxfsw/jgju
Xt06KZiln8xDkYUjY3CEPOqxkX4pcuPNGHbQ+f5UQVymWOiHd8TFYy1PatVdCME/
y7g6j0Avsudnx6AGeAybgXyoc4DPVWJr2+/f+v4ULxdhMKOCUjCnQGyN6Kf60usP
nvqflNxfIg0PYtvcRwxWRDmDERW0MJjQFQOKOogb/BRQGl4fFRvzsS0OxWm4z7Yo
rFIaVsiJSS6xBUOpa+XyCyn6QdU4+Y14f9SkIrFjnuz5pWDYXZwZhpqhJ/9Rh1eG
Kqy+8lrAagetetsv0DrigU6KDm5J0mQ=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:03:27 2025 by rpki-client