Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa
File:                     9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa (raw, json)
Hash identifier:          QrtC3EzsD6l9DfnleyZc/SzLi+QMskja+UDQnyEvh68=
Subject key identifier:   46:7C:6E:C7:07:8E:2B:AC:06:9F:0D:3C:EC:6F:9D:B4:FA:8E:32:F4
Certificate issuer:       /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
Certificate serial:       010D0C9F4328584B110C0FBE73729D9248CACD80
Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        208.88.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:0f:be:73:72:9d:92:48:ca:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=e64464fc-188e-455f-a1ce-066057d63eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:a0:f3:b4:de:c8:0b:b3:52:39:5f:a7:d9:
                    44:96:ca:36:cb:fa:09:3f:51:9c:72:8a:f2:05:84:
                    32:df:55:e0:54:f2:3e:16:13:a1:53:e3:45:37:54:
                    b6:28:87:fb:cf:1d:ff:8f:b8:c6:37:9c:9d:e9:5a:
                    c5:2e:2d:8d:1c:cd:71:c6:28:32:73:8d:45:a8:f8:
                    bf:96:90:fc:0b:76:84:b5:a7:f2:b0:27:f9:ef:cc:
                    3e:83:f4:c7:3b:19:c7:cd:57:94:5c:d5:8e:fd:12:
                    9a:31:63:b8:4d:be:6b:43:b3:c4:00:73:59:3f:66:
                    43:80:70:f1:48:71:43:54:5c:98:06:52:a3:f3:49:
                    7e:60:70:3b:1c:c2:50:bb:6a:e9:5c:73:20:f2:9c:
                    a0:be:4c:ee:c7:99:7c:14:f1:3d:b2:93:3a:8f:81:
                    ea:2a:05:d6:e8:de:97:b0:4b:f4:e4:15:47:1a:0d:
                    13:2d:70:11:4c:ab:41:f0:7d:09:21:8a:89:23:f2:
                    b1:c2:6e:18:1a:2b:44:4f:06:3b:19:91:b3:c4:d6:
                    33:52:94:74:db:be:05:06:99:6f:2b:6e:5c:1b:27:
                    12:9e:9a:95:09:1a:dd:d0:a6:d9:4e:15:47:4d:c1:
                    d6:67:42:bb:7c:11:d4:18:e0:c5:a6:3d:d2:2a:88:
                    cd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7C:6E:C7:07:8E:2B:AC:06:9F:0D:3C:EC:6F:9D:B4:FA:8E:32:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl

            X509v3 Authority Key Identifier:
                keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:50:32:de:7c:5b:7b:70:a2:02:fe:96:9f:38:00:ba:db:38:
         5c:78:4d:12:e7:46:55:fd:0c:b7:f9:98:5b:42:0e:d9:a7:eb:
         1d:19:0d:3b:75:eb:46:c9:6e:ab:9d:6f:cb:0d:bc:a9:c5:af:
         28:e0:49:61:77:55:ff:4a:4f:13:7d:eb:09:b1:35:c4:f1:06:
         85:33:a2:db:fe:c5:2c:16:55:8c:e8:89:9e:8f:87:17:88:f4:
         b4:47:28:fe:45:0e:f9:8c:36:80:45:60:a6:0e:db:02:1f:d0:
         4a:6a:b1:da:0e:85:bb:38:e8:d7:8c:79:35:b2:45:c8:72:5c:
         e9:05:39:26:e2:c1:ea:67:ef:01:09:3f:fe:73:a1:db:9d:5b:
         9f:11:0d:38:38:a0:ed:e6:f6:3a:e1:1b:29:04:00:dc:ee:a2:
         2e:38:6a:ef:73:63:cb:3d:f3:e4:ba:ae:5f:b7:2c:aa:ea:57:
         64:cb:5e:d7:e5:e8:6c:00:eb:94:18:85:29:1e:6c:91:73:0e:
         e3:42:de:ab:0b:b8:82:1a:1b:f1:b3:f7:86:2b:21:6e:af:7f:
         4d:f2:35:d3:b8:6e:0c:3f:b7:42:0e:b0:85:60:0f:26:d1:31:
         8a:62:88:2c:d5:b2:ec:f7:d1:24:1b:d9:e0:fa:fe:6a:0f:56:
         1d:3b:67:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDA++c3KdkkjKzYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw
NDhiMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZTY0NDY0ZmMtMTg4ZS00NTVmLWExY2UtMDY2MDU3ZDYzZWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNGg87TeyAuzUjlfp9lElso2y/oJP1Gccory
BYQy31XgVPI+FhOhU+NFN1S2KIf7zx3/j7jGN5yd6VrFLi2NHM1xxigyc41FqPi/
lpD8C3aEtafysCf578w+g/THOxnHzVeUXNWO/RKaMWO4Tb5rQ7PEAHNZP2ZDgHDx
SHFDVFyYBlKj80l+YHA7HMJQu2rpXHMg8pygvkzux5l8FPE9spM6j4HqKgXW6N6X
sEv05BVHGg0TLXARTKtB8H0JIYqJI/Kxwm4YGitETwY7GZGzxNYzUpR0274FBplv
K25cGycSnpqVCRrd0KbZThVHTcHWZ0K7fBHUGODFpj3SKojN4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEZ8bscHjiusBp8NPOxvnbT6jjL0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk
YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvOWRiMzBmNjQtN2UwYi0z
NjA4LWI3YmQtNzZmY2U4ZDc2ZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2
NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj
MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4
YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FggMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlQMt58W3twogL+lp84ALrbOFx4TRLnRlX9DLf5mFtCDtmn6x0ZDTt1
60bJbqudb8sNvKnFryjgSWF3Vf9KTxN96wmxNcTxBoUzotv+xSwWVYzoiZ6PhxeI
9LRHKP5FDvmMNoBFYKYO2wIf0EpqsdoOhbs46NeMeTWyRchyXOkFOSbiwepn7wEJ
P/5zodudW58RDTg4oO3m9jrhGykEANzuoi44au9zY8s98+S6rl+3LKrqV2TLXtfl
6GwA65QYhSkebJFzDuNC3qsLuIIaG/Gz94YrIW6vf03yNdO4bgw/t0IOsIVgDybR
MYpiiCzVsuz30SQb2eD6/moPVh07Z2g=
-----END CERTIFICATE-----
Generated at Fri Oct 10 21:31:22 2025 by rpki-client