Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90fc1a9a-0ca4-3356-9de4-78f998122c76.roa
File:                     90fc1a9a-0ca4-3356-9de4-78f998122c76.roa (raw, json)
Hash identifier:          WFwjLADRwL2FL/2ZJeqH9xLl97++j2SLN5nct4EnLy8=
Subject key identifier:   E1:13:B9:27:F1:4A:D1:C2:8C:3C:BE:C0:41:B6:35:F5:22:9D:58:7B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AF5215A899FB2014FC3EF2100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90fc1a9a-0ca4-3356-9de4-78f998122c76.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        104.83.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:5a:89:9f:b2:01:4f:c3:ef:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=f8de792b-a1a1-4cd5-a26c-87b8d808b94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b7:1d:ba:32:97:bb:7c:cc:3a:c2:a0:f9:be:
                    33:38:af:27:ab:16:c7:ea:ea:5e:f7:6b:48:19:11:
                    60:ac:1a:13:04:19:af:9c:f2:2b:c8:c4:3d:eb:1e:
                    69:49:ef:ba:1e:18:7a:12:fc:24:4d:ef:d4:1e:e5:
                    29:d6:3e:c2:59:aa:4a:ba:43:d7:46:f4:e7:b7:39:
                    07:d4:60:74:3a:01:40:a1:6e:0f:3e:b2:78:8d:0f:
                    6a:97:79:cb:9f:66:ce:00:68:f3:8d:ce:96:9f:95:
                    93:bb:7b:ff:be:3a:d7:0b:70:82:98:1c:32:14:d9:
                    3c:07:14:31:dc:63:2f:13:a9:7e:60:25:ae:22:a6:
                    86:b9:71:94:c2:ea:a0:c7:12:dd:50:3e:7f:fc:eb:
                    20:f5:d8:61:11:07:fc:58:cd:c3:6f:0a:05:0e:66:
                    f0:07:80:5e:7d:87:e1:3f:e8:01:98:a0:fa:5c:2c:
                    53:bf:1b:40:54:52:6c:d6:e0:c5:1e:c9:8e:2a:4e:
                    cf:e6:51:96:32:02:9c:77:74:fe:ca:6e:a6:18:28:
                    0f:30:bd:4a:f4:74:51:3b:c3:ea:bb:b7:3e:c5:e3:
                    a0:a9:60:8a:c5:83:88:80:e3:09:4e:1e:53:9f:10:
                    67:04:1b:0a:c5:9e:df:e6:ff:c1:41:09:c3:c1:da:
                    40:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:13:B9:27:F1:4A:D1:C2:8C:3C:BE:C0:41:B6:35:F5:22:9D:58:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90fc1a9a-0ca4-3356-9de4-78f998122c76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.83.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:fd:d5:5e:45:99:03:8a:1e:96:5d:45:cc:c4:9d:76:bb:3c:
         a2:42:80:c6:d0:86:05:35:db:1f:86:3e:f9:90:0c:54:09:f3:
         22:da:dd:55:78:67:1d:62:83:3d:c5:f2:29:c7:0a:0f:47:75:
         37:e2:f7:5f:54:48:13:33:bd:58:d8:67:06:f8:b3:bf:55:d4:
         25:e9:90:ad:17:41:fb:ab:74:fd:2e:17:7f:44:b8:ab:cd:1a:
         da:31:cf:65:74:d9:f5:dd:16:a7:28:bb:b9:94:e6:6e:bd:2b:
         d6:bf:f7:26:d8:eb:f5:ad:2f:a3:3d:95:b5:c2:fc:1a:f8:72:
         0f:c6:42:71:b6:54:78:13:62:fe:12:87:01:96:9a:fb:c6:68:
         19:05:cb:4d:0c:4c:fb:39:2a:fd:8f:3e:47:e3:7c:c6:c4:c8:
         a7:ba:c1:be:c5:f2:fd:53:fe:37:ca:3a:22:c6:72:20:40:15:
         c5:a5:21:c3:3f:75:c6:a3:14:29:16:49:23:a8:d6:cc:8a:58:
         ff:7a:b3:c4:98:fc:a6:f3:0a:19:66:aa:b3:81:2d:00:80:59:
         41:bd:87:2f:b7:1a:40:f0:cc:46:98:c7:16:77:d0:44:4c:15:
         9b:a8:dd:84:12:84:93:8d:65:df:7f:c4:66:5a:b6:b4:06:ea:
         8e:df:ab:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVqJn7IBT8PvIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZjhkZTc5MmItYTFhMS00Y2Q1LWEyNmMtODdiOGQ4MDhiOTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7cdujKXu3zMOsKg+b4zOK8nqxbH6upe92tI
GRFgrBoTBBmvnPIryMQ96x5pSe+6Hhh6EvwkTe/UHuUp1j7CWapKukPXRvTntzkH
1GB0OgFAoW4PPrJ4jQ9ql3nLn2bOAGjzjc6Wn5WTu3v/vjrXC3CCmBwyFNk8BxQx
3GMvE6l+YCWuIqaGuXGUwuqgxxLdUD5//Osg9dhhEQf8WM3DbwoFDmbwB4BefYfh
P+gBmKD6XCxTvxtAVFJs1uDFHsmOKk7P5lGWMgKcd3T+ym6mGCgPML1K9HRRO8Pq
u7c+xeOgqWCKxYOIgOMJTh5TnxBnBBsKxZ7f5v/BQQnDwdpA8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOETuSfxStHCjDy+wEG2NfUinVh7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTBmYzFhOWEtMGNhNC0z
MzU2LTlkZTQtNzhmOTk4MTIyYzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFMMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEH91V5FmQOKHpZdRczEnXa7PKJCgMbQhgU12x+GPvmQDFQJ8yLa3VV4
Zx1igz3F8inHCg9HdTfi919USBMzvVjYZwb4s79V1CXpkK0XQfurdP0uF39EuKvN
Gtoxz2V02fXdFqcou7mU5m69K9a/9ybY6/WtL6M9lbXC/Br4cg/GQnG2VHgTYv4S
hwGWmvvGaBkFy00MTPs5Kv2PPkfjfMbEyKe6wb7F8v1T/jfKOiLGciBAFcWlIcM/
dcajFCkWSSOo1syKWP96s8SY/KbzChlmqrOBLQCAWUG9hy+3GkDwzEaYxxZ30ERM
FZuo3YQShJONZd9/xGZatrQG6o7fq90=
-----END CERTIFICATE-----
Generated at Sat Sep 6 05:20:58 2025 by rpki-client