Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/88089700-6560-3403-a85d-651c59fddc52.roa
File:                     88089700-6560-3403-a85d-651c59fddc52.roa (raw, json)
Hash identifier:          Rgxn1LEcMxdwUu6SBoaFdy9A0itYVFDFLULSEBQDiNk=
Subject key identifier:   30:82:72:D4:F1:FB:C3:8E:CF:79:77:1C:BD:FA:2F:8F:00:13:76:D6
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F432858496A1998E63C9EDD5496CFABA8
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/88089700-6560-3403-a85d-651c59fddc52.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     46841
IP address blocks:        162.218.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:98:e6:3c:9e:dd:54:96:cf:ab:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=7df066b7-fdf8-4ee2-8508-04d63ff041f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b6:27:c1:ed:d1:a6:51:b3:46:f0:01:b0:a2:
                    62:08:c2:87:3b:f1:7a:0a:72:1c:26:7d:c3:6e:dc:
                    85:be:d3:fa:de:c1:c0:6b:fe:f9:17:ba:d2:76:ac:
                    97:97:40:e3:34:8d:0e:12:59:77:f6:e8:fd:a5:0c:
                    56:bd:a3:ab:12:16:ab:1c:57:9a:8d:26:ad:f8:51:
                    f3:04:a7:24:48:b8:2a:37:51:d4:7a:68:e2:ee:47:
                    02:76:d2:18:0c:9f:92:af:c2:31:3e:6a:65:31:4c:
                    d2:e9:38:bd:8a:93:49:04:3e:38:fc:9d:f7:ba:1b:
                    44:a6:7c:d1:6a:63:a0:3d:03:f8:99:49:8f:16:3d:
                    6b:f5:29:58:97:08:7c:b3:d6:6e:aa:e6:9c:3c:93:
                    8c:e1:05:95:b1:74:b3:0b:b8:71:73:43:7c:9c:ec:
                    08:55:48:1d:68:1d:a9:a3:32:f3:0a:67:38:2a:e7:
                    cd:3b:2f:2e:9b:ed:db:08:03:95:88:cd:a0:60:5a:
                    fb:ad:3c:6a:08:0f:52:16:07:07:27:a6:58:60:66:
                    0f:11:fd:f6:a7:a3:35:a7:b8:9c:b5:94:b4:0e:67:
                    84:91:05:60:44:57:78:e9:6a:6c:56:3f:66:18:46:
                    62:a5:41:3a:bc:5c:a3:f4:50:b9:c0:68:ff:09:d5:
                    b3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:82:72:D4:F1:FB:C3:8E:CF:79:77:1C:BD:FA:2F:8F:00:13:76:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/88089700-6560-3403-a85d-651c59fddc52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:6c:23:05:08:c4:23:d0:b3:25:bb:0b:5f:14:47:8d:e9:61:
         b1:a5:5a:7e:55:f1:50:e4:51:b4:7e:47:60:66:9a:12:fd:ca:
         7a:01:4e:e8:e6:eb:6c:d8:94:6e:77:f1:cc:53:a7:57:87:9c:
         0c:87:a1:9a:74:e2:2c:4a:ae:3c:ba:f1:85:08:c9:15:97:e6:
         1d:dd:5f:1d:08:3b:26:46:45:3f:2b:2c:a5:a3:3b:35:a8:d9:
         03:73:1f:34:d9:3a:af:d1:c6:33:21:39:d6:0c:3a:81:dd:2d:
         3f:93:ab:6f:6e:df:2f:0e:e4:c7:20:4a:08:93:63:9f:92:a7:
         11:97:92:00:6b:4e:ce:b9:68:62:04:46:d2:3e:1b:7f:8f:27:
         d7:38:41:19:ee:70:a7:36:f8:c9:c1:f6:9c:00:8f:9c:8a:05:
         6d:35:56:61:99:14:29:ab:14:6e:9c:c0:1f:e3:74:7e:23:28:
         8d:8d:51:af:65:6a:99:92:51:92:5a:25:18:ef:dc:85:d8:75:
         e0:da:22:e6:b2:4c:76:10:aa:58:9f:29:12:54:82:73:b5:44:
         97:e6:92:3f:44:72:32:3c:6f:ea:41:14:e2:fb:1b:e8:aa:df:
         80:42:9b:2c:76:c8:45:5b:dc:b3:4d:e2:89:b0:c4:03:d8:6d:
         29:59:95:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGZjmPJ7dVJbPq6gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0
YzhjMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk
N2RmMDY2YjctZmRmOC00ZWUyLTg1MDgtMDRkNjNmZjA0MWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrYnwe3RplGzRvABsKJiCMKHO/F6CnIcJn3D
btyFvtP63sHAa/75F7rSdqyXl0DjNI0OEll39uj9pQxWvaOrEharHFeajSat+FHz
BKckSLgqN1HUemji7kcCdtIYDJ+Sr8IxPmplMUzS6Ti9ipNJBD44/J33uhtEpnzR
amOgPQP4mUmPFj1r9SlYlwh8s9ZuquacPJOM4QWVsXSzC7hxc0N8nOwIVUgdaB2p
ozLzCmc4KufNOy8um+3bCAOViM2gYFr7rTxqCA9SFgcHJ6ZYYGYPEf32p6M1p7ic
tZS0DmeEkQVgRFd46WpsVj9mGEZipUE6vFyj9FC5wGj/CdWzqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDCCctTx+8OOz3l3HL36L48AE3bWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz
NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvODgwODk3MDAtNjU2MC0z
NDAzLWE4NWQtNjUxYzU5ZmRkYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2
MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj
NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz
NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotpAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKJsIwUIxCPQsyW7C18UR43pYbGlWn5V8VDkUbR+R2BmmhL9ynoBTujm
62zYlG538cxTp1eHnAyHoZp04ixKrjy68YUIyRWX5h3dXx0IOyZGRT8rLKWjOzWo
2QNzHzTZOq/RxjMhOdYMOoHdLT+Tq29u3y8O5McgSgiTY5+SpxGXkgBrTs65aGIE
RtI+G3+PJ9c4QRnucKc2+MnB9pwAj5yKBW01VmGZFCmrFG6cwB/jdH4jKI2NUa9l
apmSUZJaJRjv3IXYdeDaIuayTHYQqlifKRJUgnO1RJfmkj9EcjI8b+pBFOL7G+iq
34BCmyx2yEVb3LNN4omwxAPYbSlZlfU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:19 2025 by rpki-client