Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa
File:                     879a586a-5dbd-3989-ac66-822d1f92f8f6.roa (raw, json)
Hash identifier:          RmI0rArBJOa360mqPYQ7WuAkAAtX1Dtej2p5CdllUns=
Subject key identifier:   6E:FD:9C:5B:B1:E5:92:94:E3:EC:B2:92:AE:9F:FD:F5:BF:D9:2F:A4
Certificate issuer:       /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial:       010D0C9F4328584AAB265B380B8918396BA89280
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        142.202.36.0/24 maxlen: 24
                          142.202.37.0/24 maxlen: 24
                          142.202.38.0/24 maxlen: 24
                          142.202.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5b:38:0b:89:18:39:6b:a8:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=4d268310-7486-4f3c-8ecb-1fb29590321f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:19:2e:ab:57:90:56:3b:03:7f:74:c4:9b:a9:
                    79:61:fb:41:c8:d7:96:ba:06:20:be:2f:88:6d:71:
                    a6:c6:96:c3:01:64:c9:e4:cb:d8:c9:ee:8b:30:7c:
                    96:b6:99:5d:eb:b4:ce:1e:fc:23:a9:ea:6b:b3:c5:
                    7a:35:23:08:f7:37:8f:32:70:4f:d6:7e:d9:5a:d2:
                    0c:75:93:dd:d0:42:b5:41:53:30:18:59:47:28:8c:
                    39:59:c6:00:63:b6:62:ea:54:54:f4:66:e3:a9:0c:
                    78:b4:b7:15:1f:83:52:b9:9a:87:13:33:4f:a7:94:
                    94:f5:c4:ed:b0:6f:2b:df:e1:44:60:be:74:cc:51:
                    b3:da:b6:41:b8:e4:ee:84:30:01:69:10:f5:33:83:
                    f7:0d:14:2f:f5:15:17:d7:a2:f5:87:65:c9:3a:63:
                    e6:28:85:31:a8:ae:3f:d4:9a:59:dd:89:dd:79:8d:
                    be:ad:53:11:b9:96:67:db:8b:3b:39:c9:4f:53:52:
                    ec:61:e9:7d:04:a7:fc:5c:63:c0:a5:87:39:4c:9c:
                    5e:dd:19:cf:4f:92:5e:96:67:ae:8d:73:16:ca:5b:
                    02:72:0c:1d:0c:be:16:83:1b:8d:e4:6e:68:88:13:
                    ae:67:d9:13:b2:03:71:51:3b:d0:31:5a:18:52:ef:
                    ed:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FD:9C:5B:B1:E5:92:94:E3:EC:B2:92:AE:9F:FD:F5:BF:D9:2F:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:05:f5:d6:93:36:5d:73:fc:99:90:1f:8d:a7:ae:55:cf:9c:
         54:9e:84:fa:64:2b:01:00:d6:b9:4d:c2:b8:2f:25:93:ea:46:
         46:c7:ce:60:0f:7c:3e:bf:f1:c6:4a:34:0a:ed:b7:b5:59:1b:
         18:35:1d:a5:fe:35:90:78:1b:20:d8:15:19:69:86:12:11:46:
         89:35:dd:27:6a:0c:58:0f:1e:3d:ba:22:0a:47:cf:10:69:98:
         8b:d6:70:a3:db:66:02:41:d7:89:a0:0a:46:74:db:61:ab:2f:
         91:da:8e:6b:4b:6c:38:fb:6c:52:2b:25:2f:50:8a:9b:34:1f:
         08:c2:29:56:f4:e3:27:73:19:7f:ec:11:cb:fc:cd:66:c8:fa:
         83:64:32:9f:e5:c6:1a:95:b7:f4:cf:3e:8a:4e:ea:52:2e:e3:
         c0:cc:30:e5:86:69:8e:63:81:34:a3:9d:ba:4a:83:6f:89:b3:
         60:b4:bf:b8:77:e6:2f:90:d8:96:f7:a7:4b:58:f1:b9:99:25:
         7a:0a:b9:d7:ce:a4:a3:ea:b2:15:50:62:b7:00:85:31:91:6a:
         cf:bc:d0:b3:d0:ed:a8:35:b4:31:86:f0:30:61:83:15:95:40:
         c2:b4:7e:b6:8f:2f:96:97:cf:07:0b:99:7d:04:3b:cb:f7:bf:
         1b:c0:40:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJls4C4kYOWuokoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh
OTY5MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NGQyNjgzMTAtNzQ4Ni00ZjNjLThlY2ItMWZiMjk1OTAzMjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxkuq1eQVjsDf3TEm6l5YftByNeWugYgvi+I
bXGmxpbDAWTJ5MvYye6LMHyWtpld67TOHvwjqeprs8V6NSMI9zePMnBP1n7ZWtIM
dZPd0EK1QVMwGFlHKIw5WcYAY7Zi6lRU9GbjqQx4tLcVH4NSuZqHEzNPp5SU9cTt
sG8r3+FEYL50zFGz2rZBuOTuhDABaRD1M4P3DRQv9RUX16L1h2XJOmPmKIUxqK4/
1JpZ3YndeY2+rVMRuZZn24s7OclPU1LsYel9BKf8XGPApYc5TJxe3RnPT5Jelmeu
jXMWylsCcgwdDL4WgxuN5G5oiBOuZ9kTsgNxUTvQMVoYUu/tzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG79nFux5ZKU4+yykq6f/fW/2S+kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj
ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvODc5YTU4NmEtNWRiZC0z
OTg5LWFjNjYtODIyZDFmOTJmOGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4
ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj
YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2
N2YyY2E5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsokMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACYF9daTNl1z/JmQH42nrlXPnFSehPpkKwEA1rlNwrgvJZPqRkbHzmAP
fD6/8cZKNArtt7VZGxg1HaX+NZB4GyDYFRlphhIRRok13SdqDFgPHj26IgpHzxBp
mIvWcKPbZgJB14mgCkZ022GrL5HajmtLbDj7bFIrJS9Qips0HwjCKVb04ydzGX/s
Ecv8zWbI+oNkMp/lxhqVt/TPPopO6lIu48DMMOWGaY5jgTSjnbpKg2+Js2C0v7h3
5i+Q2Jb3p0tY8bmZJXoKudfOpKPqshVQYrcAhTGRas+80LPQ7ag1tDGG8DBhgxWV
QMK0fraPL5aXzwcLmX0EO8v3vxvAQDo=
-----END CERTIFICATE-----
Generated at Wed Aug 20 13:19:32 2025 by rpki-client