Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/189fb312-2540-34f6-998b-2703b1dd5026.roa
File:                     189fb312-2540-34f6-998b-2703b1dd5026.roa (raw, json)
Hash identifier:          8EUsWvxsps5jiW2WDJh1za7JfcLyQ1UdQrQqHpsnoS8=
Subject key identifier:   24:D7:7B:79:A9:C5:8A:35:93:E3:14:82:E4:D9:EC:92:D4:FD:7B:61
Certificate issuer:       /CN=fc7254b9-092b-4c9f-9b49-3f8a520532f3
Certificate serial:       010D0C9F4328584AFC1C071E143E4B5919ADEB80
Authority key identifier: 27:C6:0E:94:27:FF:97:0F:C0:E7:AD:24:01:05:B0:13:4A:A2:A6:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/189fb312-2540-34f6-998b-2703b1dd5026.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     46998
IP address blocks:        23.186.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:07:1e:14:3e:4b:59:19:ad:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7254b9-092b-4c9f-9b49-3f8a520532f3
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=2a381c7e-8b0c-415f-b654-8672816563cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:af:3e:ea:11:9c:ac:ea:41:b8:f2:17:96:94:
                    d2:0d:5d:77:ed:81:31:e8:6f:ed:90:7a:58:46:86:
                    5a:f2:9d:e3:c0:9d:e6:94:7f:2e:ed:76:22:4d:dc:
                    28:cf:88:73:d6:2a:f7:c4:e5:41:a5:4c:12:d7:82:
                    80:ba:31:df:fc:4a:bf:c4:0e:a8:e9:37:c5:6c:9e:
                    13:fa:06:ab:69:07:c6:fb:b7:d8:19:d9:14:d3:2d:
                    82:31:a7:2d:9e:71:cf:c6:46:68:f2:00:22:00:3c:
                    4d:7c:75:11:a8:ae:46:2a:97:a0:87:67:e6:2b:ce:
                    fe:ad:b5:07:32:06:78:ae:f8:e6:e3:a9:40:af:e2:
                    4d:69:b2:19:85:8b:2b:df:ca:29:e0:46:e8:36:5b:
                    ef:5e:3b:6a:cb:b5:67:29:c6:a6:bc:c1:d2:46:07:
                    e9:30:13:e1:b9:4f:c4:ab:a2:9c:63:0e:5d:11:d8:
                    15:54:b9:0b:fd:a2:52:aa:d1:bc:51:7b:a4:3a:87:
                    ec:7f:9d:59:50:10:19:87:27:6b:7a:b0:09:ef:6a:
                    4a:0b:0e:a5:03:e0:62:f7:ac:c0:54:28:88:ea:82:
                    99:3c:de:74:2d:cf:d9:6d:cd:d0:3e:f4:6c:d1:3f:
                    99:11:4a:54:df:c5:92:0f:7d:53:7d:c0:7a:54:d8:
                    b5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D7:7B:79:A9:C5:8A:35:93:E3:14:82:E4:D9:EC:92:D4:FD:7B:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/189fb312-2540-34f6-998b-2703b1dd5026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.crl

            X509v3 Authority Key Identifier:
                keyid:27:C6:0E:94:27:FF:97:0F:C0:E7:AD:24:01:05:B0:13:4A:A2:A6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b4:32:2b:11:6e:6f:b9:6c:b6:f2:c5:4e:5b:3e:28:2c:e5:
         4f:21:c7:48:52:bc:86:9a:48:a4:3c:53:23:3f:30:f4:e7:15:
         ef:a3:f4:36:11:54:3f:e9:18:fb:ad:ba:84:69:25:c9:25:aa:
         26:6b:12:fb:b7:31:7f:df:a7:f9:14:24:c9:96:e5:31:36:48:
         97:ad:bf:f0:92:e9:6c:da:aa:ca:9c:2c:3f:bb:74:95:b7:d3:
         44:a1:fd:da:c4:39:7a:9b:74:32:ce:08:e8:d9:37:64:14:08:
         b7:a8:94:81:50:af:79:76:9c:00:c8:a2:4a:11:af:94:c7:88:
         98:9c:6a:02:01:c4:2e:51:6e:34:ff:38:7a:d4:b7:c0:1b:dd:
         0b:fb:76:db:20:95:27:d5:04:04:8f:86:6b:97:e0:d3:18:d5:
         11:fb:49:c5:b3:57:09:eb:71:18:fd:89:c3:7a:36:d8:93:24:
         b9:9a:9c:95:2d:fe:9c:3e:0a:09:29:d9:2d:07:1b:53:8a:ef:
         1a:80:da:0e:a2:96:bf:ba:20:2c:0c:13:76:d9:7f:8d:06:04:
         8d:49:a7:b1:20:8c:b0:29:66:fd:84:42:cc:3e:c9:2f:4a:d2:
         70:00:d6:d2:85:4a:c3:01:46:7f:5e:0d:c7:ca:58:a8:bd:08:
         49:c7:c8:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAceFD5LWRmt64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmM3MjU0YjktMDkyYi00YzlmLTliNDktM2Y4YTUyMDUz
MmYzMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk
MmEzODFjN2UtOGIwYy00MTVmLWI2NTQtODY3MjgxNjU2M2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi68+6hGcrOpBuPIXlpTSDV137YEx6G/tkHpY
RoZa8p3jwJ3mlH8u7XYiTdwoz4hz1ir3xOVBpUwS14KAujHf/Eq/xA6o6TfFbJ4T
+garaQfG+7fYGdkU0y2CMactnnHPxkZo8gAiADxNfHURqK5GKpegh2fmK87+rbUH
MgZ4rvjm46lAr+JNabIZhYsr38op4EboNlvvXjtqy7VnKcamvMHSRgfpMBPhuU/E
q6KcYw5dEdgVVLkL/aJSqtG8UXukOofsf51ZUBAZhydrerAJ72pKCw6lA+Bi96zA
VCiI6oKZPN50Lc/Zbc3QPvRs0T+ZEUpU38WSD31TfcB6VNi1KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCTXe3mpxYo1k+MUguTZ7JLU/XthMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mYzcy
NTRiOS0wOTJiLTRjOWYtOWI0OS0zZjhhNTIwNTMyZjMvMTg5ZmIzMTItMjU0MC0z
NGY2LTk5OGItMjcwM2IxZGQ1MDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmM3MjU0YjktMDkyYi00YzlmLTli
NDktM2Y4YTUyMDUzMmYzL2ZjNzI1NGI5LTA5MmItNGM5Zi05YjQ5LTNmOGE1MjA1
MzJmMy5jcmwwHwYDVR0jBBgwFoAUJ8YOlCf/lw/A560kAQWwE0qipsQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mYzcyNTRiOS0wOTJiLTRjOWYtOWI0OS0zZjhh
NTIwNTMyZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7pIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFq0MisRbm+5bLbyxU5bPigs5U8hx0hSvIaaSKQ8UyM/MPTnFe+j9DYR
VD/pGPutuoRpJcklqiZrEvu3MX/fp/kUJMmW5TE2SJetv/CS6WzaqsqcLD+7dJW3
00Sh/drEOXqbdDLOCOjZN2QUCLeolIFQr3l2nADIokoRr5THiJicagIBxC5RbjT/
OHrUt8Ab3Qv7dtsglSfVBASPhmuX4NMY1RH7ScWzVwnrcRj9icN6NtiTJLmanJUt
/pw+Cgkp2S0HG1OK7xqA2g6ilr+6ICwME3bZf40GBI1Jp7EgjLApZv2EQsw+yS9K
0nAA1tKFSsMBRn9eDcfKWKi9CEnHyL4=
-----END CERTIFICATE-----
Generated at Fri Oct 10 09:59:29 2025 by rpki-client