Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/681dc50e-3ead-3000-ad27-9b19f00dbb5d.roa
File:                     681dc50e-3ead-3000-ad27-9b19f00dbb5d.roa (raw, json)
Hash identifier:          77XzGsJILyeTAtEeX6BEeEKZooEkGZ4fs2zh/0mRikQ=
Subject key identifier:   30:F3:C8:E1:05:2E:D8:74:DE:3A:F2:37:C4:F8:44:75:A4:AA:01:D0
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584AC87659B8347E9025CE4BEE00
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/681dc50e-3ead-3000-ad27-9b19f00dbb5d.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     14956
IP address blocks:        172.86.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:59:b8:34:7e:90:25:ce:4b:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=54bf4f45-1e36-4a6c-b15f-6a13f99a39bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:62:15:c8:3c:47:63:b4:c5:1d:01:95:f0:
                    e0:42:47:67:67:47:41:88:1f:5b:35:60:72:59:fc:
                    c5:85:f3:4c:08:16:f0:51:7a:94:ea:e2:5c:bc:4c:
                    c9:c0:99:ed:42:23:b4:5c:64:32:f4:d4:25:66:c2:
                    1c:6b:b3:c5:ee:6e:48:92:bc:8a:d8:71:a6:ac:6b:
                    7e:5a:b5:a8:ee:24:ce:49:17:34:8d:ed:8e:ee:8f:
                    62:f7:37:92:7b:ef:d5:ab:87:a6:5b:a8:31:a8:3d:
                    1e:ef:2c:64:ac:bd:fa:b0:40:4f:3a:74:5c:fe:8d:
                    6c:c1:14:67:68:0d:88:7e:60:e4:38:2f:47:13:ea:
                    c5:79:5f:41:d1:c6:b9:2b:c0:cd:0e:28:fd:8d:20:
                    34:e1:d3:bc:61:03:87:bb:23:c3:3c:62:16:b7:74:
                    d1:b0:a9:26:b3:2d:02:f4:d3:5d:f1:81:d6:d8:f2:
                    f6:9e:ab:8d:57:6b:f0:63:9b:07:af:48:ea:5b:25:
                    78:56:bc:82:b0:16:65:1b:86:59:d4:03:50:7c:5a:
                    b5:c3:06:a2:61:da:db:f4:77:2d:5e:6f:4b:c3:73:
                    34:de:57:54:0c:4f:d6:07:7c:7e:01:6f:25:ae:ff:
                    56:76:50:37:3a:6f:bb:5a:ac:8e:28:99:28:43:0e:
                    8d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F3:C8:E1:05:2E:D8:74:DE:3A:F2:37:C4:F8:44:75:A4:AA:01:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/681dc50e-3ead-3000-ad27-9b19f00dbb5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:81:d4:d8:80:29:f2:a7:7d:92:d2:5b:77:ea:85:d7:c6:a9:
         c7:6c:44:62:28:13:22:cf:80:d7:7e:4d:61:d4:09:09:07:27:
         05:1b:64:09:ef:0a:68:3f:2e:82:ba:f8:96:96:05:69:8a:0a:
         2e:e6:d7:1f:71:c3:5f:c4:d8:d1:e9:39:61:d2:9f:4a:c8:c8:
         98:02:6b:f5:93:c9:b5:11:d4:9f:12:2a:6f:61:25:59:ab:5c:
         71:2b:d7:8f:2f:94:bf:3a:ca:fd:bb:b0:9e:75:d7:60:8a:99:
         2b:84:0c:a6:c8:13:6a:7b:f3:19:57:7c:f2:58:80:47:b3:1c:
         82:94:da:cd:76:1f:73:e0:a8:50:c8:4d:61:6e:5c:ed:b6:5f:
         05:95:8f:8b:c4:45:2c:9e:49:ed:c4:2c:24:aa:a1:bf:ee:20:
         ae:db:18:2c:b7:c5:fb:73:38:37:b1:f2:91:b6:65:76:15:a2:
         e7:a4:6e:38:d0:fd:b4:b1:db:55:f6:69:16:1f:39:1f:f8:e2:
         ab:ee:c9:07:61:4f:39:a6:f3:a3:04:c3:7a:35:86:ee:55:2e:
         95:6d:94:78:3f:60:3a:de:7f:3c:1b:11:a7:31:6b:89:48:9a:
         6c:f8:d2:94:22:e3:7d:8b:8d:36:38:18:67:7c:7d:e5:e2:f8:
         fd:3f:e3:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdlm4NH6QJc5L7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi
OWQ3MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk
NTRiZjRmNDUtMWUzNi00YTZjLWIxNWYtNmExM2Y5OWEzOWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte1iFcg8R2O0xR0BlfDgQkdnZ0dBiB9bNWBy
WfzFhfNMCBbwUXqU6uJcvEzJwJntQiO0XGQy9NQlZsIca7PF7m5IkryK2HGmrGt+
WrWo7iTOSRc0je2O7o9i9zeSe+/Vq4emW6gxqD0e7yxkrL36sEBPOnRc/o1swRRn
aA2IfmDkOC9HE+rFeV9B0ca5K8DNDij9jSA04dO8YQOHuyPDPGIWt3TRsKkmsy0C
9NNd8YHW2PL2nquNV2vwY5sHr0jqWyV4VryCsBZlG4ZZ1ANQfFq1wwaiYdrb9Hct
Xm9Lw3M03ldUDE/WB3x+AW8lrv9WdlA3Om+7WqyOKJkoQw6NuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDDzyOEFLth03jryN8T4RHWkqgHQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi
NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvNjgxZGM1MGUtM2VhZC0z
MDAwLWFkMjctOWIxOWYwMGRiYjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj
MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi
YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm
NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrFZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+B1NiAKfKnfZLSW3fqhdfGqcdsRGIoEyLPgNd+TWHUCQkHJwUbZAnv
Cmg/LoK6+JaWBWmKCi7m1x9xw1/E2NHpOWHSn0rIyJgCa/WTybUR1J8SKm9hJVmr
XHEr148vlL86yv27sJ5112CKmSuEDKbIE2p78xlXfPJYgEezHIKU2s12H3PgqFDI
TWFuXO22XwWVj4vERSyeSe3ELCSqob/uIK7bGCy3xftzODex8pG2ZXYVouekbjjQ
/bSx21X2aRYfOR/44qvuyQdhTzmm86MEw3o1hu5VLpVtlHg/YDrefzwbEacxa4lI
mmz40pQi432LjTY4GGd8feXi+P0/45c=
-----END CERTIFICATE-----
Generated at Thu Aug 21 10:27:37 2025 by rpki-client