Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/0f251356-cf96-3213-a9a8-f255012a0362.roa
File:                     0f251356-cf96-3213-a9a8-f255012a0362.roa (raw, json)
Hash identifier:          IxvBD+S7QmxKnQl1CapWppM2x6muHguncbQ/YkeIqUY=
Subject key identifier:   CE:65:4A:F6:B9:B9:3D:0F:2B:D3:A0:9D:48:E2:F7:F3:94:4D:9A:8E
Certificate issuer:       /CN=a2077046-f4ec-47b5-8973-860e9cbddb69
Certificate serial:       010D0C9F4328584B0B76A5A808CBB896A9E7EAE0
Authority key identifier: 65:75:99:FF:A5:CF:FD:81:64:22:CC:79:51:10:9D:3C:D7:62:37:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/0f251356-cf96-3213-a9a8-f255012a0362.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     4508
IP address blocks:        23.175.32.0/24 maxlen: 24
                          155.254.2.0/23 maxlen: 23
                          198.89.188.0/23 maxlen: 23
                          2606:d680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/a2077046-f4ec-47b5-8973-860e9cbddb69.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/a2077046-f4ec-47b5-8973-860e9cbddb69.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:a5:a8:08:cb:b8:96:a9:e7:ea:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2077046-f4ec-47b5-8973-860e9cbddb69
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=da8fd4a2-953d-4dca-ae4b-348cbabdacda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:25:f2:d3:5e:19:32:bd:7f:93:05:bc:c1:a5:
                    78:fa:14:60:ab:43:56:7e:0a:e1:f9:2b:8c:43:6e:
                    29:35:42:a4:7b:3a:ea:e0:41:40:c0:63:d9:5b:78:
                    eb:5b:95:87:f5:10:16:cd:f3:2f:05:b1:79:75:fb:
                    9c:e2:0e:37:72:a5:df:88:33:3c:26:7f:38:74:d3:
                    ce:7e:6a:b1:da:aa:e4:91:9a:de:44:d7:cb:ff:e5:
                    e6:c9:71:ea:cd:93:d2:10:01:66:62:3a:91:15:1b:
                    90:1c:bb:ce:fb:a3:0c:f3:88:2c:28:45:5b:b1:f3:
                    ca:2a:cb:df:81:07:db:62:47:d2:8b:99:81:09:5c:
                    c1:25:39:69:9c:db:f8:44:3a:d9:3f:60:c8:53:83:
                    40:6c:d4:91:e3:a8:46:5b:7a:66:04:8f:45:fb:91:
                    f5:29:90:ca:3d:08:9f:41:13:3f:43:9c:ec:1d:6e:
                    84:9c:cf:62:33:68:31:4c:93:92:2e:6c:c2:15:f5:
                    61:9a:30:3a:9d:16:e6:5c:24:eb:83:a5:2d:2c:07:
                    3e:fe:e2:27:c5:6b:33:87:b1:bc:4f:7a:56:28:ba:
                    0b:05:de:f2:fd:bd:6e:af:93:52:d5:7b:1e:c1:89:
                    1d:59:73:5b:a1:4a:02:52:1d:8f:dd:ed:8e:a7:15:
                    6e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:65:4A:F6:B9:B9:3D:0F:2B:D3:A0:9D:48:E2:F7:F3:94:4D:9A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/0f251356-cf96-3213-a9a8-f255012a0362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/a2077046-f4ec-47b5-8973-860e9cbddb69.crl

            X509v3 Authority Key Identifier:
                keyid:65:75:99:FF:A5:CF:FD:81:64:22:CC:79:51:10:9D:3C:D7:62:37:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.32.0/24
                  155.254.2.0/23
                  198.89.188.0/23
                IPv6:
                  2606:d680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:88:76:0e:dd:32:50:1e:b8:ef:13:b8:d7:be:11:01:d4:d4:
         76:61:84:5f:26:6d:18:9f:6f:0c:51:25:03:33:ef:72:a4:1b:
         6f:7e:b1:a2:53:dd:7d:4a:4a:97:4d:59:3c:c3:87:ae:1c:96:
         29:06:0f:7f:bc:d7:b2:f0:7f:bb:c4:4a:86:23:57:42:e9:0e:
         29:24:4a:48:23:3b:8a:8a:fc:5d:99:08:3a:f0:24:a0:f8:76:
         83:9e:82:34:3f:21:90:f7:66:6e:25:74:97:1f:9c:9e:ca:33:
         af:a4:3e:e3:7b:ff:68:d5:c6:10:19:65:ae:d8:5c:1d:c8:55:
         da:e7:48:ca:20:90:55:19:3f:38:d4:c4:d4:24:90:b7:b6:13:
         82:8e:59:9c:31:83:04:7d:10:9f:a6:d3:9f:c7:3d:32:6e:a2:
         f2:09:7b:b6:ba:ed:15:87:1a:f5:64:ff:3d:7d:9c:41:1c:55:
         23:ce:22:ce:1f:f6:88:69:03:6c:6e:2f:64:c8:2f:32:70:9c:
         24:78:30:ce:61:3a:cd:4b:49:2b:25:7f:3e:e2:dd:d2:68:01:
         9a:ae:2b:6e:45:5c:2d:24:eb:0e:96:bd:c8:48:43:f7:a9:e1:
         ed:fc:89:6f:b8:f8:c9:0b:4e:d9:51:05:8e:7b:de:99:93:f1:
         98:15:ef:de
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEsLdqWoCMu4lqnn6uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIwNzcwNDYtZjRlYy00N2I1LTg5NzMtODYwZTljYmRk
YjY5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk
ZGE4ZmQ0YTItOTUzZC00ZGNhLWFlNGItMzQ4Y2JhYmRhY2RhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiXy014ZMr1/kwW8waV4+hRgq0NWfgrh+SuM
Q24pNUKkezrq4EFAwGPZW3jrW5WH9RAWzfMvBbF5dfuc4g43cqXfiDM8Jn84dNPO
fmqx2qrkkZreRNfL/+XmyXHqzZPSEAFmYjqRFRuQHLvO+6MM84gsKEVbsfPKKsvf
gQfbYkfSi5mBCVzBJTlpnNv4RDrZP2DIU4NAbNSR46hGW3pmBI9F+5H1KZDKPQif
QRM/Q5zsHW6EnM9iM2gxTJOSLmzCFfVhmjA6nRbmXCTrg6UtLAc+/uInxWszh7G8
T3pWKLoLBd7y/b1ur5NS1XsewYkdWXNboUoCUh2P3e2OpxVuGQIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFM5lSva5uT0PK9OgnUji9/OUTZqOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjA3
NzA0Ni1mNGVjLTQ3YjUtODk3My04NjBlOWNiZGRiNjkvMGYyNTEzNTYtY2Y5Ni0z
MjEzLWE5YTgtZjI1NTAxMmEwMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwNzcwNDYtZjRlYy00N2I1LTg5
NzMtODYwZTljYmRkYjY5L2EyMDc3MDQ2LWY0ZWMtNDdiNS04OTczLTg2MGU5Y2Jk
ZGI2OS5jcmwwHwYDVR0jBBgwFoAUZXWZ/6XP/YFkIsx5URCdPNdiN/gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjA3NzA0Ni1mNGVjLTQ3YjUtODk3My04NjBl
OWNiZGRiNjkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAF68gAwQB
m/4CAwQBxlm8MA0EAgACMAcDBQAmBtaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGyIdg7dMlAeuO8TuNe+
EQHU1HZhhF8mbRifbwxRJQMz73KkG29+saJT3X1KSpdNWTzDh64clikGD3+817Lw
f7vESoYjV0LpDikkSkgjO4qK/F2ZCDrwJKD4doOegjQ/IZD3Zm4ldJcfnJ7KM6+k
PuN7/2jVxhAZZa7YXB3IVdrnSMogkFUZPzjUxNQkkLe2E4KOWZwxgwR9EJ+m05/H
PTJuovIJe7a67RWHGvVk/z19nEEcVSPOIs4f9ohpA2xuL2TILzJwnCR4MM5hOs1L
SSslfz7i3dJoAZquK25FXC0k6w6WvchIQ/ep4e38iW+4+MkLTtlRBY573pmT8ZgV
794=
-----END CERTIFICATE-----
Generated at Sat Oct 11 04:29:43 2025 by rpki-client