Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/864fb58d-479d-3fa2-8674-fb97d8aa308a.roa
File:                     864fb58d-479d-3fa2-8674-fb97d8aa308a.roa (raw, json)
Hash identifier:          EMNKhQyEq4h5LH7PCL5ja1EMfW3sketotioGsp93O24=
Subject key identifier:   7F:10:F3:51:12:EF:3B:57:A4:2A:84:C6:9A:B7:2E:D9:80:9E:FF:12
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B715D138F1368C953A7039800
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/864fb58d-479d-3fa2-8674-fb97d8aa308a.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     23473
IP address blocks:        96.63.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5d:13:8f:13:68:c9:53:a7:03:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=52c4af2f-1926-4418-9b7c-8ad035cc5a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c7:6c:18:75:81:77:2a:aa:aa:d4:65:32:a3:
                    3a:43:a6:c3:a4:6d:73:1b:c8:35:8d:18:57:8d:64:
                    0d:a9:ef:63:de:38:84:a6:40:42:99:89:72:a1:4a:
                    9b:a1:ae:9c:41:06:fb:79:5e:6e:27:ba:80:20:d5:
                    d0:3d:bf:0c:e4:b5:47:f1:51:9c:f8:ea:78:63:8d:
                    b1:32:86:d2:5e:6f:4a:62:61:50:c8:5f:85:95:26:
                    08:18:70:0f:b2:cd:65:55:67:dc:53:bf:7f:ff:9e:
                    97:4a:98:02:c7:3c:07:a5:e3:e8:64:9a:4b:38:1d:
                    fd:d3:e9:71:fc:07:6c:b3:24:0d:01:29:60:1b:f4:
                    44:34:1e:f9:e3:b3:3c:b6:ef:0e:04:c0:80:3a:e6:
                    2a:e8:ed:9a:df:f0:d8:31:7d:67:a3:36:cb:ad:10:
                    75:95:4e:0a:b8:46:ac:a5:0b:49:11:e9:d5:90:32:
                    31:bd:c3:e6:41:08:89:79:5d:0f:0c:fb:1f:d7:1d:
                    1b:7c:57:2c:be:64:5b:19:4d:20:be:65:f0:ec:e2:
                    df:68:cc:ec:23:59:69:e7:99:55:49:e1:db:98:2e:
                    ba:e2:04:35:c1:50:37:58:d8:86:4d:d5:73:f9:56:
                    8d:e6:23:49:eb:c7:a7:b9:ee:c3:de:a6:28:5c:64:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:10:F3:51:12:EF:3B:57:A4:2A:84:C6:9A:B7:2E:D9:80:9E:FF:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/864fb58d-479d-3fa2-8674-fb97d8aa308a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.63.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f2:59:64:99:2c:8f:7f:2d:08:34:91:e3:33:5a:c0:7e:ea:
         2f:c5:7c:74:b3:da:63:cd:55:e2:48:88:54:a9:04:a8:72:7a:
         53:f7:bf:a9:3b:aa:b3:88:0b:5e:59:bd:d1:a0:a1:9e:5c:42:
         78:93:6b:bb:55:67:62:fe:ee:ac:1c:67:0d:59:e8:a3:c3:e2:
         6f:fa:0f:72:f9:bc:69:8e:57:51:6c:59:63:cf:1c:b5:94:cb:
         25:a9:9f:41:cf:09:f8:a4:08:1e:2a:98:e7:8a:7f:b0:0b:50:
         84:1f:ad:22:13:67:b4:81:2f:54:52:26:b3:a8:7d:72:d8:15:
         ff:56:a4:a5:bd:96:6c:a3:76:94:55:73:ff:a1:13:6a:d0:e5:
         53:50:02:c3:a0:b1:9e:db:b2:8d:e2:ec:27:41:5a:a1:53:22:
         60:cc:25:31:fd:19:32:7a:d6:3f:41:e9:fa:a7:b7:15:ec:24:
         4d:ad:2d:f5:77:97:39:e0:82:f6:3e:40:bc:12:a2:cb:8c:ca:
         c7:35:15:aa:de:8c:45:9b:55:c1:af:57:b8:5e:52:3a:22:52:
         3f:79:1b:85:b2:67:3c:e3:64:0d:2e:63:53:50:d8:fd:85:8f:
         b2:39:c6:6e:0d:de:36:be:6f:1f:5f:49:f6:4e:f4:cb:17:56:
         8f:4f:49:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXROPE2jJU6cDmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk
NTJjNGFmMmYtMTkyNi00NDE4LTliN2MtOGFkMDM1Y2M1YTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MdsGHWBdyqqqtRlMqM6Q6bDpG1zG8g1jRhX
jWQNqe9j3jiEpkBCmYlyoUqboa6cQQb7eV5uJ7qAINXQPb8M5LVH8VGc+Op4Y42x
MobSXm9KYmFQyF+FlSYIGHAPss1lVWfcU79//56XSpgCxzwHpePoZJpLOB390+lx
/AdssyQNASlgG/RENB7547M8tu8OBMCAOuYq6O2a3/DYMX1nozbLrRB1lU4KuEas
pQtJEenVkDIxvcPmQQiJeV0PDPsf1x0bfFcsvmRbGU0gvmXw7OLfaMzsI1lp55lV
SeHbmC664gQ1wVA3WNiGTdVz+VaN5iNJ68enue7D3qYoXGQ//QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH8Q81ES7ztXpCqExpq3LtmAnv8SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODY0ZmI1OGQtNDc5ZC0z
ZmEyLTg2NzQtZmI5N2Q4YWEzMDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYD/2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHyWWSZLI9/LQg0keMzWsB+6i/FfHSz2mPNVeJIiFSpBKhyelP3v6k7
qrOIC15ZvdGgoZ5cQniTa7tVZ2L+7qwcZw1Z6KPD4m/6D3L5vGmOV1FsWWPPHLWU
yyWpn0HPCfikCB4qmOeKf7ALUIQfrSITZ7SBL1RSJrOofXLYFf9WpKW9lmyjdpRV
c/+hE2rQ5VNQAsOgsZ7bso3i7CdBWqFTImDMJTH9GTJ61j9B6fqntxXsJE2tLfV3
lznggvY+QLwSosuMysc1FarejEWbVcGvV7heUjoiUj95G4WyZzzjZA0uY1NQ2P2F
j7I5xm4N3ja+bx9fSfZO9MsXVo9PSdo=
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:53:19 2025 by rpki-client