Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/dec0bda2-8e4f-34a0-8a87-5be34cfc05e7.roa
File:                     dec0bda2-8e4f-34a0-8a87-5be34cfc05e7.roa (raw, json)
Hash identifier:          fydMaEv2dpHo21oxzNy+1HJ80j6nSrqu+jaF2G/f+Xc=
Subject key identifier:   33:1E:3D:F5:41:AD:F3:C0:6E:59:D5:7E:EC:04:EA:D9:0D:79:02:F2
Certificate issuer:       /CN=f9c87fef-d8f8-4134-a4ec-f2a073567030
Certificate serial:       010D0C9F4328584B031690E5B0CC681504612240
Authority key identifier: 92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/dec0bda2-8e4f-34a0-8a87-5be34cfc05e7.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     30006
IP address blocks:        23.169.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:90:e5:b0:cc:68:15:04:61:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c87fef-d8f8-4134-a4ec-f2a073567030
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=70b79c94-eee7-4463-957a-a13e1cc721e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d7:d2:81:ab:4c:b8:d5:87:4d:ae:49:8b:1c:
                    fb:d2:de:37:79:29:76:06:42:1a:ea:58:56:43:1f:
                    a0:ba:2c:34:43:f7:af:78:29:e2:e8:90:53:9a:16:
                    0c:fa:9d:80:32:03:ef:ee:52:99:49:33:d9:76:6f:
                    80:38:5b:36:a9:0d:7e:17:f7:da:7b:a7:a9:b2:dd:
                    56:85:55:17:6b:f8:12:2f:e4:f7:c3:3b:9b:8f:69:
                    19:2e:a8:1d:52:0d:06:29:75:d4:13:55:2e:5f:65:
                    dc:22:7e:4a:a3:e5:d2:f6:d3:ee:61:87:fa:2d:2f:
                    76:d4:72:07:40:11:6f:8a:15:96:81:8a:b8:9b:bf:
                    b8:e8:5f:0f:e0:71:7f:ce:a7:bc:34:cf:0f:bb:d4:
                    32:7e:06:91:49:29:50:8b:bc:b9:4b:e8:44:87:7d:
                    6a:54:74:a9:d8:e4:db:11:5c:99:cb:72:5d:3f:f3:
                    15:76:37:b6:4b:62:a8:c3:98:be:12:fa:e7:34:d2:
                    9b:66:8a:bd:db:b0:dc:8a:71:eb:d3:bb:f2:5a:0d:
                    d6:46:a3:31:05:d7:a7:63:8f:5e:bd:5b:84:33:62:
                    88:d4:fc:17:ce:0e:51:f2:ca:e2:13:4d:1a:93:44:
                    88:5a:ec:90:0d:9a:c0:4e:e7:fa:f8:07:6f:b7:9d:
                    35:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1E:3D:F5:41:AD:F3:C0:6E:59:D5:7E:EC:04:EA:D9:0D:79:02:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/dec0bda2-8e4f-34a0-8a87-5be34cfc05e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl

            X509v3 Authority Key Identifier:
                keyid:92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:68:64:f8:96:97:e8:f4:4d:4d:47:8e:8d:69:b2:2a:4d:97:
         20:c5:9a:bd:f3:3e:e3:d6:28:1f:70:97:a7:22:89:8c:4a:3b:
         c9:17:26:0b:ca:44:c1:99:2c:50:c8:78:bc:71:f4:da:79:6a:
         44:16:a8:22:95:dd:0a:80:f0:59:a1:65:57:25:f2:e0:62:86:
         01:6a:8b:c2:46:26:ac:f6:6a:82:cd:63:43:ce:41:fa:63:55:
         44:c7:5f:4a:aa:1f:ad:c9:05:d5:7d:c5:c4:c0:99:3f:71:9a:
         f0:60:92:d6:ae:d8:44:f1:4c:40:2a:f0:b1:83:7c:92:b6:a8:
         5c:b1:4b:4b:67:1a:a1:d2:06:24:43:16:71:fb:04:c4:1d:c6:
         24:39:97:b6:c2:d1:0c:73:6e:50:ea:34:09:c0:b2:8f:5d:f8:
         9c:1d:ec:13:01:e1:38:87:be:ba:af:3a:6a:95:54:1c:93:90:
         34:f4:e5:e9:96:9f:84:ae:5d:c7:8a:66:34:73:be:df:81:8d:
         4d:7a:5c:17:f8:97:01:d3:9c:fd:93:84:5e:d4:3b:ac:3f:82:
         3c:cf:e6:04:0e:1b:62:73:56:42:0d:8e:7d:1a:02:27:18:19:
         ef:86:6e:d2:a7:23:81:a4:7b:46:6d:9b:c3:d1:08:42:81:c7:
         01:7b:f2:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDFpDlsMxoFQRhIkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjljODdmZWYtZDhmOC00MTM0LWE0ZWMtZjJhMDczNTY3
MDMwMB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk
NzBiNzljOTQtZWVlNy00NDYzLTk1N2EtYTEzZTFjYzcyMWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNfSgatMuNWHTa5Jixz70t43eSl2BkIa6lhW
Qx+guiw0Q/eveCni6JBTmhYM+p2AMgPv7lKZSTPZdm+AOFs2qQ1+F/fae6epst1W
hVUXa/gSL+T3wzubj2kZLqgdUg0GKXXUE1UuX2XcIn5Ko+XS9tPuYYf6LS921HIH
QBFvihWWgYq4m7+46F8P4HF/zqe8NM8Pu9QyfgaRSSlQi7y5S+hEh31qVHSp2OTb
EVyZy3JdP/MVdje2S2Kow5i+EvrnNNKbZoq927DcinHr07vyWg3WRqMxBdenY49e
vVuEM2KI1PwXzg5R8sriE00ak0SIWuyQDZrATuf6+Advt5010QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMePfVBrfPAblnVfuwE6tkNeQLyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOWM4
N2ZlZi1kOGY4LTQxMzQtYTRlYy1mMmEwNzM1NjcwMzAvZGVjMGJkYTItOGU0Zi0z
NGEwLThhODctNWJlMzRjZmMwNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjljODdmZWYtZDhmOC00MTM0LWE0
ZWMtZjJhMDczNTY3MDMwL2Y5Yzg3ZmVmLWQ4ZjgtNDEzNC1hNGVjLWYyYTA3MzU2
NzAzMC5jcmwwHwYDVR0jBBgwFoAUkrsDbxKpSG9IpQ1W/5ReLmI8HbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOWM4N2ZlZi1kOGY4LTQxMzQtYTRlYy1mMmEw
NzM1NjcwMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6k4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJoZPiWl+j0TU1Hjo1psipNlyDFmr3zPuPWKB9wl6ciiYxKO8kXJgvK
RMGZLFDIeLxx9Np5akQWqCKV3QqA8FmhZVcl8uBihgFqi8JGJqz2aoLNY0POQfpj
VUTHX0qqH63JBdV9xcTAmT9xmvBgktau2ETxTEAq8LGDfJK2qFyxS0tnGqHSBiRD
FnH7BMQdxiQ5l7bC0QxzblDqNAnAso9d+Jwd7BMB4TiHvrqvOmqVVByTkDT05emW
n4SuXceKZjRzvt+BjU16XBf4lwHTnP2ThF7UO6w/gjzP5gQOG2JzVkINjn0aAicY
Ge+GbtKnI4Gke0Ztm8PRCEKBxwF78oc=
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:57:21 2025 by rpki-client