Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/787bccb6-3826-3e00-8b03-f7cb54c0ee2e.roa
File:                     787bccb6-3826-3e00-8b03-f7cb54c0ee2e.roa (raw, json)
Hash identifier:          xPXxeWwcANDypSBX5U002ndNnJ8B+kQ6GAmZWOkNp2c=
Subject key identifier:   64:7A:44:47:89:95:C5:49:3B:17:43:67:A2:AB:27:7A:87:17:2C:5F
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584B08ABE9FB8E5ED7164267C380
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/787bccb6-3826-3e00-8b03-f7cb54c0ee2e.roa
Signing time:             Sun 31 Aug 2025 01:00:33 +0000
ROA not before:           Sun 31 Aug 2025 01:00:33 +0000
ROA not after:            Sat 29 Nov 2025 02:00:33 +0000
asID:                     63023
IP address blocks:        69.42.210.0/23 maxlen: 24
                          186.190.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:08:ab:e9:fb:8e:5e:d7:16:42:67:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Aug 31 01:00:33 2025 GMT
            Not After : Nov 29 02:00:33 2025 GMT
        Subject: CN=893885be-fedc-4dfd-8ede-3439606da7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e5:e5:46:70:16:fb:83:f3:16:02:f9:45:20:
                    b4:42:19:93:a9:94:62:c8:9a:20:af:aa:66:13:ca:
                    91:43:e1:f5:6c:cf:f0:98:d9:a0:d4:95:89:b0:c4:
                    a9:e2:2b:53:f8:8a:fe:a7:ab:d9:57:74:23:42:e3:
                    e6:30:f7:7c:f7:04:0e:56:74:14:26:9a:c3:b5:9d:
                    be:6e:47:48:3c:ae:36:2c:3f:dc:5e:32:88:0c:89:
                    c9:ca:89:f5:1b:68:c6:1e:c5:32:c8:f6:7b:88:c2:
                    cc:61:8c:b2:03:cd:ec:ef:a9:33:ea:f7:44:cb:60:
                    02:7a:29:f8:15:eb:d3:17:6b:13:62:47:fa:b5:fe:
                    0d:9b:c8:47:81:2e:f6:70:20:c7:a1:e7:c6:04:e0:
                    8d:c9:89:82:43:44:c6:63:70:b1:19:99:aa:0c:76:
                    33:bd:8c:0a:f8:94:55:ee:a0:15:23:0b:48:63:0d:
                    00:65:3d:81:bb:dc:95:df:28:2e:61:dc:7e:49:5f:
                    65:9d:90:81:f7:53:c3:05:7f:ae:c6:74:da:fd:c4:
                    af:44:1e:5e:f4:29:42:43:31:7d:56:a8:4e:1f:a5:
                    5d:dd:88:8d:49:15:67:66:b2:28:15:9c:c0:9a:42:
                    43:52:92:98:5b:4f:b4:dd:57:48:b7:16:c1:78:a8:
                    5c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7A:44:47:89:95:C5:49:3B:17:43:67:A2:AB:27:7A:87:17:2C:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/787bccb6-3826-3e00-8b03-f7cb54c0ee2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.210.0/23
                  186.190.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6b:a3:ed:90:05:8a:11:b1:e2:7d:65:50:71:14:99:0d:67:
         f5:f0:57:05:14:03:7c:fe:f0:6d:6b:2e:b3:7f:96:50:3d:7b:
         48:1f:a5:c6:ef:35:ea:df:51:68:27:a6:36:81:ec:da:98:cf:
         54:87:a3:b9:17:5b:65:60:3a:77:1a:ec:08:c0:84:11:ec:2d:
         4d:61:09:08:ce:fd:59:ec:80:75:d3:1a:14:6a:4f:fb:77:e7:
         91:d0:50:66:80:99:47:3e:39:be:df:bf:78:78:78:25:c3:32:
         91:8d:02:58:a4:14:b3:05:93:d6:62:39:5b:6f:5b:86:48:dd:
         ce:19:77:8a:d8:5f:56:3a:f3:22:35:5b:6f:18:d9:6b:eb:3d:
         e2:1d:f6:3f:7e:94:fa:d8:54:04:40:ea:2a:57:7c:bc:c3:c1:
         f4:45:e0:1b:ba:4b:3a:c1:18:bd:e2:90:54:77:dd:44:4d:10:
         70:4b:1b:77:57:e7:c3:b9:50:50:c4:a2:36:e5:53:f0:83:2d:
         35:90:ba:a6:e6:93:95:0c:44:fe:cb:d2:4c:7d:dc:3b:c5:ed:
         5b:2e:9a:e3:47:32:4a:0c:45:0b:57:4b:0e:5e:0d:bf:55:91:
         77:98:0d:8d:44:3d:e4:b7:5b:da:94:33:74:6e:18:2d:a4:ef:
         57:e3:c6:58
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsIq+n7jl7XFkJnw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0
Mzg4MB4XDTI1MDgzMTAxMDAzM1oXDTI1MTEyOTAyMDAzM1owLzEtMCsGA1UEAxMk
ODkzODg1YmUtZmVkYy00ZGZkLThlZGUtMzQzOTYwNmRhN2IxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheXlRnAW+4PzFgL5RSC0QhmTqZRiyJogr6pm
E8qRQ+H1bM/wmNmg1JWJsMSp4itT+Ir+p6vZV3QjQuPmMPd89wQOVnQUJprDtZ2+
bkdIPK42LD/cXjKIDInJyon1G2jGHsUyyPZ7iMLMYYyyA83s76kz6vdEy2ACein4
FevTF2sTYkf6tf4Nm8hHgS72cCDHoefGBOCNyYmCQ0TGY3CxGZmqDHYzvYwK+JRV
7qAVIwtIYw0AZT2Bu9yV3yguYdx+SV9lnZCB91PDBX+uxnTa/cSvRB5e9ClCQzF9
VqhOH6Vd3YiNSRVnZrIoFZzAmkJDUpKYW0+03VdItxbBeKhcfQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGR6REeJlcVJOxdDZ6KrJ3qHFyxfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl
YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvNzg3YmNjYjYtMzgyNi0z
ZTAwLThiMDMtZjdjYjU0YzBlZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm
NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4
NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi
N2Q4ODQzODguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBRSrSAwQB
ur7SMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAD9ro+2QBYoRseJ9ZVBxFJkNZ/XwVwUUA3z+8G1rLrN/llA9
e0gfpcbvNerfUWgnpjaB7NqYz1SHo7kXW2VgOnca7AjAhBHsLU1hCQjO/VnsgHXT
GhRqT/t355HQUGaAmUc+Ob7fv3h4eCXDMpGNAlikFLMFk9ZiOVtvW4ZI3c4Zd4rY
X1Y68yI1W28Y2WvrPeId9j9+lPrYVARA6ipXfLzDwfRF4Bu6SzrBGL3ikFR33URN
EHBLG3dX58O5UFDEojblU/CDLTWQuqbmk5UMRP7L0kx93DvF7VsumuNHMkoMRQtX
Sw5eDb9VkXeYDY1EPeS3W9qUM3RuGC2k71fjxlg=
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:57 2025 by rpki-client