Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/7bd6bc7b-514d-3e1b-93bd-78fd1008b393.roa
File:                     7bd6bc7b-514d-3e1b-93bd-78fd1008b393.roa (raw, json)
Hash identifier:          LVNpWFl116oj9Rl5zVmno0VTb/j5P6jqtRpc7870tDo=
Subject key identifier:   A1:62:54:A4:02:7B:88:4F:90:7D:F1:4B:B6:9C:AE:F6:93:9B:61:63
Certificate issuer:       /CN=10c8bda0-3c91-4c6f-b928-28b77211b8d1
Certificate serial:       010D0C9F4328584B79BCBBDA7E153D11AA690800
Authority key identifier: 64:93:ED:72:BC:87:D7:E9:1D:75:2B:E2:1D:D8:D8:60:85:4F:AC:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/7bd6bc7b-514d-3e1b-93bd-78fd1008b393.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     211392
IP address blocks:        23.179.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:bb:da:7e:15:3d:11:aa:69:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c8bda0-3c91-4c6f-b928-28b77211b8d1
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=08a7eb71-fa98-4b10-b30c-3cf409ea6078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9c:04:dd:4b:8c:55:4b:39:7a:22:86:a8:64:
                    59:91:8a:ae:b2:d5:48:e3:7d:90:13:25:1e:8e:fd:
                    90:b8:1c:0c:68:3f:0b:bf:d8:eb:ef:72:bd:1f:16:
                    56:d6:9d:d1:8e:fb:42:1d:82:a7:cf:9c:21:2f:bf:
                    ec:9b:24:b8:fd:6f:84:c1:c7:e4:7a:ec:c7:39:18:
                    44:51:8f:82:a2:14:cf:d9:43:4d:01:16:5e:2f:7e:
                    3e:20:4f:c2:85:c4:5b:d6:95:f0:df:74:8c:ad:a3:
                    d8:6d:0d:30:ec:83:09:4c:d0:69:1c:ae:df:97:a6:
                    cf:1c:5c:78:0b:4b:64:56:fe:e1:f7:ad:ce:34:48:
                    e9:5d:4f:ea:b5:f6:fc:0e:8c:aa:fb:11:d2:15:a6:
                    cc:05:a4:ac:31:7f:6a:4c:9a:37:e3:16:db:d0:a2:
                    ae:66:1d:5e:83:af:58:6b:18:53:a2:56:ee:c5:25:
                    0d:b6:ef:95:77:d1:89:18:46:f0:74:fe:80:fc:74:
                    1e:cb:7e:3d:ab:99:17:a0:7e:23:b4:e9:aa:da:41:
                    26:bd:41:51:2f:fb:73:a1:c6:c0:c4:a3:27:a6:fc:
                    ca:31:17:12:47:7d:a2:66:d2:14:f5:40:2f:4d:71:
                    29:d5:f2:8c:27:30:76:74:1c:0f:c0:42:5d:07:41:
                    23:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:62:54:A4:02:7B:88:4F:90:7D:F1:4B:B6:9C:AE:F6:93:9B:61:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/7bd6bc7b-514d-3e1b-93bd-78fd1008b393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.crl

            X509v3 Authority Key Identifier:
                keyid:64:93:ED:72:BC:87:D7:E9:1D:75:2B:E2:1D:D8:D8:60:85:4F:AC:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:70:81:af:6c:5e:c5:af:b1:76:b4:da:01:6f:22:a3:2b:26:
         ef:07:a7:bb:c1:d6:3f:f4:24:23:64:7f:ea:36:c8:bb:0e:87:
         f2:4a:2e:35:9a:d6:eb:ec:21:96:bf:53:b3:2b:bd:3c:95:f3:
         9d:b2:a0:58:07:6c:71:ef:7d:46:99:47:26:c0:5d:a6:cb:01:
         72:29:3b:2d:f3:ac:c8:2a:68:3f:a0:67:36:6e:46:b8:10:58:
         50:b5:38:8b:11:d8:c6:85:f5:b5:cc:70:e3:20:2b:41:81:ad:
         01:3b:16:5f:7b:24:7b:8f:4e:b5:9d:6d:81:95:e9:1a:5d:ab:
         42:94:5d:30:f3:1d:33:17:35:07:57:1b:c5:d3:2a:b3:15:a7:
         53:ed:d1:97:46:55:aa:82:e1:cf:69:36:0b:05:73:a6:cd:f8:
         78:4c:bd:de:58:38:71:65:ac:57:5c:0d:59:e1:24:cb:fb:32:
         b2:d3:99:9d:de:1f:60:68:e9:93:91:00:13:16:11:a7:3c:55:
         cb:b6:97:07:b3:c9:f5:b9:82:5d:c6:e0:06:20:ad:a7:31:0f:
         ad:8b:09:aa:f5:0e:c2:0f:67:80:12:cb:ec:54:f4:8c:50:b8:
         1a:27:77:51:9d:69:bd:cd:fe:f2:5e:c2:55:92:e4:53:b5:b8:
         c7:b7:1f:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLvafhU9EappCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTBjOGJkYTAtM2M5MS00YzZmLWI5MjgtMjhiNzcyMTFi
OGQxMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk
MDhhN2ViNzEtZmE5OC00YjEwLWIzMGMtM2NmNDA5ZWE2MDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZwE3UuMVUs5eiKGqGRZkYqustVI432QEyUe
jv2QuBwMaD8Lv9jr73K9HxZW1p3RjvtCHYKnz5whL7/smyS4/W+EwcfkeuzHORhE
UY+CohTP2UNNARZeL34+IE/ChcRb1pXw33SMraPYbQ0w7IMJTNBpHK7fl6bPHFx4
C0tkVv7h963ONEjpXU/qtfb8Doyq+xHSFabMBaSsMX9qTJo34xbb0KKuZh1eg69Y
axhTolbuxSUNtu+Vd9GJGEbwdP6A/HQey349q5kXoH4jtOmq2kEmvUFRL/tzocbA
xKMnpvzKMRcSR32iZtIU9UAvTXEp1fKMJzB2dBwPwEJdB0Ej6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKFiVKQCe4hPkH3xS7acrvaTm2FjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMGM4
YmRhMC0zYzkxLTRjNmYtYjkyOC0yOGI3NzIxMWI4ZDEvN2JkNmJjN2ItNTE0ZC0z
ZTFiLTkzYmQtNzhmZDEwMDhiMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTBjOGJkYTAtM2M5MS00YzZmLWI5
MjgtMjhiNzcyMTFiOGQxLzEwYzhiZGEwLTNjOTEtNGM2Zi1iOTI4LTI4Yjc3MjEx
YjhkMS5jcmwwHwYDVR0jBBgwFoAUZJPtcryH1+kddSviHdjYYIVPrH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMGM4YmRhMC0zYzkxLTRjNmYtYjkyOC0yOGI3
NzIxMWI4ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7P4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBwga9sXsWvsXa02gFvIqMrJu8Hp7vB1j/0JCNkf+o2yLsOh/JKLjWa
1uvsIZa/U7MrvTyV852yoFgHbHHvfUaZRybAXabLAXIpOy3zrMgqaD+gZzZuRrgQ
WFC1OIsR2MaF9bXMcOMgK0GBrQE7Fl97JHuPTrWdbYGV6Rpdq0KUXTDzHTMXNQdX
G8XTKrMVp1Pt0ZdGVaqC4c9pNgsFc6bN+HhMvd5YOHFlrFdcDVnhJMv7MrLTmZ3e
H2Bo6ZORABMWEac8Vcu2lwezyfW5gl3G4AYgracxD62LCar1DsIPZ4ASy+xU9IxQ
uBond1Gdab3N/vJewlWS5FO1uMe3H6o=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:38:45 2025 by rpki-client