Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/82cc481a-87fe-3f98-a84e-94e1b879d975.roa
File:                     82cc481a-87fe-3f98-a84e-94e1b879d975.roa (raw, json)
Hash identifier:          Akv6cw2Beeeh+945lX7zPju/1FraF+a0qhkDeC5pXtU=
Subject key identifier:   CB:CC:A0:CE:B1:4D:12:33:AD:8C:F6:C5:7A:53:77:9B:08:74:BD:A7
Certificate issuer:       /CN=f97b644e-a01f-43c5-83e0-146254941d5f
Certificate serial:       010D0C9F4328584B63674346331A12824B7DB680
Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/82cc481a-87fe-3f98-a84e-94e1b879d975.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     36290
IP address blocks:        208.81.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:43:46:33:1a:12:82:4b:7d:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=174a45b9-d10c-4364-8896-b2d3b91a3b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:e4:be:80:f7:4f:31:97:4d:1e:84:39:38:
                    0f:3f:d3:79:bb:63:54:17:14:e6:31:0e:df:12:b9:
                    c6:8a:30:8e:12:67:42:7d:d9:f2:28:74:1b:c8:10:
                    2b:0b:d2:41:47:51:5f:bb:c8:d8:b0:7e:48:d5:d1:
                    0d:ba:8f:8e:a7:d2:54:f5:95:c4:77:84:33:a8:e4:
                    40:10:44:0a:51:ec:89:4d:68:8a:cb:2e:1f:90:42:
                    8a:58:e3:01:af:b2:08:f8:aa:e1:f1:b8:51:38:c1:
                    05:24:df:e5:eb:fb:18:6a:d7:79:3c:f7:8e:87:93:
                    da:df:45:85:c1:56:7e:6d:c0:c6:fd:07:f4:45:0d:
                    2e:12:98:19:61:57:fe:b1:5a:25:d6:3c:fb:7b:20:
                    b0:13:98:d4:0b:71:29:bf:75:fb:6e:6e:6b:d4:e0:
                    22:d2:e5:96:74:9e:ce:77:ef:74:73:2c:a5:a0:8f:
                    23:c8:ef:9c:40:a8:32:f5:6a:79:91:c0:67:e1:22:
                    9a:f8:bf:96:d1:41:54:48:d8:31:72:39:e0:a3:29:
                    37:ff:f8:eb:47:7e:24:f0:1d:5e:a4:4b:6a:1d:be:
                    af:9b:f6:60:c1:1b:d3:0a:41:73:6a:09:aa:05:67:
                    37:aa:2f:0b:cb:64:c9:6d:44:cd:3f:dc:36:ff:47:
                    25:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CC:A0:CE:B1:4D:12:33:AD:8C:F6:C5:7A:53:77:9B:08:74:BD:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/82cc481a-87fe-3f98-a84e-94e1b879d975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl

            X509v3 Authority Key Identifier:
                keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:00:9d:77:7d:f6:03:53:9f:07:a9:a0:07:6f:ff:5c:52:f7:
         9f:88:4d:59:e0:9f:b7:19:11:e7:19:9b:ae:80:7b:f6:b5:e0:
         17:79:0c:fe:17:bb:68:5f:ee:89:e2:9d:b2:99:c7:60:0b:73:
         5c:e2:42:32:55:71:88:f8:cc:62:27:87:01:3c:a4:ba:65:c3:
         6a:18:bb:79:0e:e7:a8:6e:28:99:51:1b:dd:26:a8:a3:68:87:
         e7:92:71:7d:a3:cc:76:fa:b7:20:ed:54:6e:04:a0:49:a0:7f:
         6b:73:eb:56:21:00:de:b4:54:77:45:0f:0f:9c:8b:0f:52:40:
         df:ee:59:25:64:7c:01:4d:f4:84:54:0c:84:06:9f:71:44:c4:
         9e:d5:e7:96:fc:af:bb:25:da:94:b6:78:28:fd:1b:be:62:3f:
         73:4a:08:e9:0f:2b:3c:7a:40:81:e8:16:23:ba:11:a0:1e:f8:
         8b:7f:27:d5:9a:c2:b1:46:be:22:a9:d1:2b:dc:1b:6e:e9:09:
         a1:9f:80:f0:42:c0:80:63:4b:3e:26:f9:fa:da:fd:53:1d:d2:
         a4:39:90:3f:04:42:f9:93:05:c1:46:df:46:2f:06:f0:0b:18:
         10:6c:f3:15:76:b2:ac:4c:fb:c9:b2:65:d9:d1:f6:b6:ea:56:
         28:09:43:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0NGMxoSgkt9toAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQx
ZDVmMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk
MTc0YTQ1YjktZDEwYy00MzY0LTg4OTYtYjJkM2I5MWEzYjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/vkvoD3TzGXTR6EOTgPP9N5u2NUFxTmMQ7f
ErnGijCOEmdCfdnyKHQbyBArC9JBR1Ffu8jYsH5I1dENuo+Op9JU9ZXEd4QzqORA
EEQKUeyJTWiKyy4fkEKKWOMBr7II+Krh8bhROMEFJN/l6/sYatd5PPeOh5Pa30WF
wVZ+bcDG/Qf0RQ0uEpgZYVf+sVol1jz7eyCwE5jUC3Epv3X7bm5r1OAi0uWWdJ7O
d+90cyyloI8jyO+cQKgy9Wp5kcBn4SKa+L+W0UFUSNgxcjngoyk3//jrR34k8B1e
pEtqHb6vm/ZgwRvTCkFzagmqBWc3qi8Ly2TJbUTNP9w2/0clSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMvMoM6xTRIzrYz2xXpTd5sIdL2nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdi
NjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvODJjYzQ4MWEtODdmZS0z
Zjk4LWE4NGUtOTRlMWI4NzlkOTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk3YjY0NGUtYTAxZi00M2M1LTgz
ZTAtMTQ2MjU0OTQxZDVmL2Y5N2I2NDRlLWEwMWYtNDNjNS04M2UwLTE0NjI1NDk0
MWQ1Zi5jcmwwHwYDVR0jBBgwFoAUa4fVPa771tCdLGIp0ZhceOMQtukwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYy
NTQ5NDFkNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FGgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYAnXd99gNTnwepoAdv/1xS95+ITVngn7cZEecZm66Ae/a14Bd5DP4X
u2hf7oninbKZx2ALc1ziQjJVcYj4zGInhwE8pLplw2oYu3kO56huKJlRG90mqKNo
h+eScX2jzHb6tyDtVG4EoEmgf2tz61YhAN60VHdFDw+ciw9SQN/uWSVkfAFN9IRU
DIQGn3FExJ7V55b8r7sl2pS2eCj9G75iP3NKCOkPKzx6QIHoFiO6EaAe+It/J9Wa
wrFGviKp0SvcG27pCaGfgPBCwIBjSz4m+fra/VMd0qQ5kD8EQvmTBcFG30YvBvAL
GBBs8xV2sqxM+8myZdnR9rbqVigJQyk=
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:55:38 2025 by rpki-client