Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/373356e7-dce4-35d9-af44-51f6844e979e.roa
File:                     373356e7-dce4-35d9-af44-51f6844e979e.roa (raw, json)
Hash identifier:          axxTsL5fFTsd5gzRCHFZvkOz+R+Yb3EMiu26MW+AflM=
Subject key identifier:   DE:86:85:29:54:39:67:FD:16:6E:47:6B:F8:22:B6:75:97:2F:CC:7D
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584B5C6C7AB5513F3630E7C07C00
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/373356e7-dce4-35d9-af44-51f6844e979e.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     40934
IP address blocks:        23.249.54.0/24 maxlen: 24
                          23.249.57.0/24 maxlen: 24
                          66.35.20.0/24 maxlen: 24
                          66.35.21.0/24 maxlen: 24
                          66.35.22.0/24 maxlen: 24
                          66.35.30.0/24 maxlen: 24
                          96.45.43.0/24 maxlen: 24
                          173.243.131.0/24 maxlen: 24
                          209.40.108.0/24 maxlen: 24
                          209.40.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:7a:b5:51:3f:36:30:e7:c0:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=f9ff2cb9-676c-46a1-a572-46156793215d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:0a:e0:cb:ac:b8:95:28:c3:30:10:9b:cd:
                    13:8a:f6:ef:00:1c:b6:bc:cc:08:98:9e:0e:35:98:
                    ba:99:e7:fa:ef:04:61:45:63:f9:b4:1b:ae:b8:f2:
                    6f:bb:5b:2f:8c:f1:95:8a:77:8c:d2:64:42:2e:62:
                    1b:6d:d3:13:cf:52:12:38:d3:70:ab:e5:46:57:0c:
                    51:79:ca:9a:8f:0c:4b:80:7c:df:ca:89:55:39:f6:
                    a6:2f:39:d7:84:74:32:09:38:9d:fd:72:ba:59:f2:
                    94:db:e5:4f:33:a5:0d:0f:09:d9:39:4a:f8:9c:3c:
                    f3:2c:bd:1c:53:40:1f:8c:0a:16:f3:15:77:ec:4b:
                    06:90:38:75:be:c0:a1:39:91:aa:54:fb:4e:6d:25:
                    a2:99:05:b3:c7:50:e2:a4:31:b2:2d:be:a8:fa:fc:
                    74:ff:0e:e2:fe:1c:0c:f2:b7:18:60:f9:7b:39:15:
                    3c:00:94:87:70:8e:53:64:9e:06:35:8e:85:52:7f:
                    3a:92:5b:59:c2:54:d8:c9:bd:81:76:9a:18:df:cb:
                    ed:ba:19:89:a7:2b:86:70:9c:68:89:86:8c:7a:a2:
                    b4:41:52:50:fe:f7:15:b9:7a:71:2b:ab:49:68:4b:
                    f4:ef:e7:89:d6:71:4a:d2:6d:76:44:a8:4e:10:53:
                    1f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:86:85:29:54:39:67:FD:16:6E:47:6B:F8:22:B6:75:97:2F:CC:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/373356e7-dce4-35d9-af44-51f6844e979e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.54.0/24
                  23.249.57.0/24
                  66.35.20.0-66.35.22.255
                  66.35.30.0/24
                  96.45.43.0/24
                  173.243.131.0/24
                  209.40.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:c2:d9:11:b4:d5:09:ee:3a:ce:19:f3:be:7d:50:ac:46:8b:
         bd:66:15:c8:45:af:db:50:1b:a5:63:4d:d5:12:9a:e3:00:29:
         2f:1e:f9:9d:86:6b:18:de:f6:7b:f9:96:ec:34:9c:22:d6:4d:
         f8:ff:55:8e:e6:50:d7:1f:d5:d9:28:d3:d6:0e:4d:ca:41:5e:
         9a:e7:fd:b1:d7:77:f5:0d:af:63:20:78:59:72:8d:7f:5e:3b:
         02:c5:ae:c3:d3:69:00:86:9e:6d:1c:07:e9:18:40:9f:e2:7f:
         96:87:bd:36:40:64:b8:23:b8:07:45:91:9f:88:39:ac:0c:f0:
         4b:9a:ca:b4:1a:79:53:1f:1a:2c:df:6f:9d:53:63:6f:5c:94:
         12:37:7d:ff:40:21:13:26:ef:df:87:62:95:ec:42:bb:05:33:
         39:87:f4:6a:72:b3:ad:7a:62:13:d8:90:89:03:25:7a:7f:26:
         de:d9:da:5a:51:f6:ae:7e:b6:7c:3a:4c:e0:24:cc:4d:aa:45:
         a7:8f:27:cf:b5:08:fc:8c:8c:5c:48:53:32:18:23:28:98:fe:
         29:bf:bf:c7:a6:24:86:d1:d7:ae:bb:f0:f3:aa:40:b9:41:70:
         f5:58:74:c8:8b:81:cc:38:a3:68:17:43:db:ee:63:14:96:3a:
         b8:79:27:5c
-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgIUAQ0Mn0MoWEtcbHq1UT82MOfAfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1
NTg0MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
ZjlmZjJjYjktNjc2Yy00NmExLWE1NzItNDYxNTY3OTMyMTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswQK4MusuJUowzAQm80TivbvABy2vMwImJ4O
NZi6mef67wRhRWP5tBuuuPJvu1svjPGVineM0mRCLmIbbdMTz1ISONNwq+VGVwxR
ecqajwxLgHzfyolVOfamLznXhHQyCTid/XK6WfKU2+VPM6UNDwnZOUr4nDzzLL0c
U0AfjAoW8xV37EsGkDh1vsChOZGqVPtObSWimQWzx1DipDGyLb6o+vx0/w7i/hwM
8rcYYPl7ORU8AJSHcI5TZJ4GNY6FUn86kltZwlTYyb2BdpoY38vtuhmJpyuGcJxo
iYaMeqK0QVJQ/vcVuXpxK6tJaEv07+eJ1nFK0m12RKhOEFMf1QIDAQABo4IDgTCC
A30wHQYDVR0OBBYEFN6GhSlUOWf9Fm5Ha/gitnWXL8x9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk
YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvMzczMzU2ZTctZGNlNC0z
NWQ5LWFmNDQtNTFmNjg0NGU5NzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx
OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh
NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk
ZmQ0YTU1ODQuY2VyMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAF/k2AwQA
F/k5MAwDBAJCIxQDBABCIxYDBABCIx4DBABgLSsDBACt84MDBAHRKGwwVAYDVR0g
AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h
cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC
AQEAeMLZEbTVCe46zhnzvn1QrEaLvWYVyEWv21AbpWNN1RKa4wApLx75nYZrGN72
e/mW7DScItZN+P9VjuZQ1x/V2SjT1g5NykFemuf9sdd39Q2vYyB4WXKNf147AsWu
w9NpAIaebRwH6RhAn+J/loe9NkBkuCO4B0WRn4g5rAzwS5rKtBp5Ux8aLN9vnVNj
b1yUEjd9/0AhEybv34dilexCuwUzOYf0anKzrXpiE9iQiQMlen8m3tnaWlH2rn62
fDpM4CTMTapFp48nz7UI/IyMXEhTMhgjKJj+Kb+/x6YkhtHXrrvw86pAuUFw9Vh0
yIuBzDijaBdD2+5jFJY6uHknXA==
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:26:24 2025 by rpki-client