Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ca3eed6f-f5e0-3f08-9ea9-7dd2b41ace3b.roa
File:                     ca3eed6f-f5e0-3f08-9ea9-7dd2b41ace3b.roa (raw, json)
Hash identifier:          FFHRfdbBoinDjSnYPC4ILXzHfucwnhifJgg6AxhgGVU=
Subject key identifier:   DD:DC:7A:E7:8C:70:85:FD:2D:2B:39:1A:18:ED:A5:09:64:5F:FF:14
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A16CF67D9CABB278C5B200
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ca3eed6f-f5e0-3f08-9ea9-7dd2b41ace3b.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        198.86.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:6c:f6:7d:9c:ab:b2:78:c5:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=2564c0a2-d9d5-40f4-88b3-bb42f957b839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c3:1c:98:00:6a:90:db:66:90:8a:17:d2:46:
                    ac:68:e0:fb:3a:85:3b:2e:4a:51:c5:96:ff:88:19:
                    45:58:04:5e:28:2e:bd:fd:ce:a5:8a:c4:16:f9:0d:
                    ad:37:f8:8d:57:0b:1f:68:a0:68:69:14:8c:37:f3:
                    98:15:f2:30:37:38:57:cf:cf:da:15:1e:64:97:a3:
                    fe:cd:2e:8f:32:31:c2:73:fd:23:55:00:fe:1a:f0:
                    36:ea:91:81:31:16:ce:22:f2:1c:29:a3:40:ee:e8:
                    f3:ed:a7:b6:b4:b6:a6:b8:06:6a:46:bd:d9:01:7d:
                    da:d3:4e:81:30:35:a0:72:da:5b:87:ef:35:23:73:
                    ca:07:cd:7e:12:54:4c:29:83:b9:ed:50:83:6d:1e:
                    17:00:2e:20:bb:80:b0:b6:52:19:9d:0a:c2:e0:34:
                    4f:aa:cd:f8:91:13:29:02:82:4b:ad:d3:15:b7:94:
                    59:b9:a5:ee:02:55:09:f0:c7:71:10:07:d5:0f:3d:
                    4b:b7:e2:bf:4b:c4:32:19:ac:f0:fb:79:bd:4d:53:
                    8c:55:6d:9d:9f:d5:b1:e7:4c:5c:b8:c1:d5:00:10:
                    db:36:2a:87:b1:27:be:96:a4:9a:13:ab:ee:69:eb:
                    3c:f1:83:74:44:ac:cf:1f:e3:a2:c7:ae:a5:54:3c:
                    6d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DC:7A:E7:8C:70:85:FD:2D:2B:39:1A:18:ED:A5:09:64:5F:FF:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ca3eed6f-f5e0-3f08-9ea9-7dd2b41ace3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c6:5b:f2:7b:f3:12:88:d9:ec:d9:f6:9d:67:4d:81:96:82:
         0a:9f:e2:46:8f:d2:25:6d:ac:0e:a1:b0:53:9a:1e:15:32:32:
         e7:d1:3d:80:25:3a:75:6d:41:f7:f4:7f:ed:b7:eb:ef:45:25:
         63:7d:ab:81:5e:78:40:fd:91:19:16:21:80:a2:62:8d:ac:64:
         42:6a:90:21:ba:87:97:01:0d:0c:91:fe:3d:01:2f:0c:77:75:
         4e:04:4e:e9:6c:8a:1d:7f:7c:74:ee:1d:6c:31:a1:ec:66:89:
         e5:5f:92:e3:13:84:90:a3:25:7a:4d:54:d3:8f:56:f7:cb:3d:
         40:13:ad:36:1f:25:f6:d8:2e:09:bd:a9:03:c9:1c:d0:b1:96:
         0f:01:8f:b1:5e:42:4b:38:9a:7b:4a:6e:df:51:fc:cf:82:9d:
         2b:4d:ed:14:c6:3a:95:2f:9e:5a:e9:0a:7d:4d:8b:1c:45:08:
         00:bc:aa:24:91:49:4d:8c:45:49:2b:23:7f:ef:16:89:c6:fd:
         89:24:89:04:8f:0f:48:16:9b:73:13:95:fc:a7:12:29:07:8f:
         35:b4:7d:6c:bd:e0:41:45:0d:fa:9d:92:75:de:1a:96:27:b8:
         15:05:eb:e9:92:6f:cd:cf:05:19:cc:04:fd:84:dd:13:61:c4:
         d4:c1:68:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWz2fZyrsnjFsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk
MjU2NGMwYTItZDlkNS00MGY0LTg4YjMtYmI0MmY5NTdiODM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsMcmABqkNtmkIoX0kasaOD7OoU7LkpRxZb/
iBlFWAReKC69/c6lisQW+Q2tN/iNVwsfaKBoaRSMN/OYFfIwNzhXz8/aFR5kl6P+
zS6PMjHCc/0jVQD+GvA26pGBMRbOIvIcKaNA7ujz7ae2tLamuAZqRr3ZAX3a006B
MDWgctpbh+81I3PKB81+ElRMKYO57VCDbR4XAC4gu4CwtlIZnQrC4DRPqs34kRMp
AoJLrdMVt5RZuaXuAlUJ8MdxEAfVDz1Lt+K/S8QyGazw+3m9TVOMVW2dn9Wx50xc
uMHVABDbNiqHsSe+lqSaE6vuaes88YN0RKzPH+Oix66lVDxtNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3ceueMcIX9LSs5GhjtpQlkX/8UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvY2EzZWVkNmYtZjVlMC0z
ZjA4LTllYTktN2RkMmI0MWFjZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxlb0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADXGW/J78xKI2ezZ9p1nTYGWggqf4kaP0iVtrA6hsFOaHhUyMufRPYAl
OnVtQff0f+236+9FJWN9q4FeeED9kRkWIYCiYo2sZEJqkCG6h5cBDQyR/j0BLwx3
dU4ETulsih1/fHTuHWwxoexmieVfkuMThJCjJXpNVNOPVvfLPUATrTYfJfbYLgm9
qQPJHNCxlg8Bj7FeQks4mntKbt9R/M+CnStN7RTGOpUvnlrpCn1NixxFCAC8qiSR
SU2MRUkrI3/vFonG/YkkiQSPD0gWm3MTlfynEikHjzW0fWy94EFFDfqdknXeGpYn
uBUF6+mSb83PBRnMBP2E3RNhxNTBaDc=
-----END CERTIFICATE-----
Generated at Tue Sep 9 07:58:36 2025 by rpki-client