Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
File:                     11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa (raw, json)
Hash identifier:          4H6Gsvcwr0o++HPkIy7U7QBZrEpUNBbfKf88JKjpdkI=
Subject key identifier:   6F:38:DA:45:BE:28:47:E7:1D:62:7D:A7:20:8F:12:86:02:64:8B:76
Certificate issuer:       /CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
Certificate serial:       010D0C9F4328584A920634FD97E68F5EFF8E3F00
Authority key identifier: FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     394760
IP address blocks:        23.140.8.0/24 maxlen: 24
                          2602:fb30::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:34:fd:97:e6:8f:5e:ff:8e:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=f6fe7b9e-5a76-4d91-8f81-df3bef87c7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:a7:f5:9e:09:e9:d8:bb:6d:70:07:3d:0c:
                    4d:4a:46:c3:5c:22:25:f2:d0:e5:a9:d9:c9:6e:9e:
                    9b:4c:50:0d:15:1a:cc:be:e7:ea:8b:e6:10:09:72:
                    d7:95:11:1b:7a:75:72:5e:3a:53:39:89:96:24:3a:
                    af:ef:a7:54:68:85:b7:4b:65:64:d5:d7:89:e5:ba:
                    67:d3:e8:d1:d2:b3:70:82:de:19:85:96:ba:46:35:
                    d0:60:00:16:86:d5:37:3c:f4:22:2b:ee:8c:3f:f0:
                    05:d1:8f:40:5c:21:94:88:c4:72:89:0e:33:7d:f5:
                    1b:0b:5e:8b:33:9e:7b:e0:8e:f2:f7:5d:b0:92:3a:
                    7e:4a:94:51:92:b2:a0:68:10:72:a9:e0:98:ab:b6:
                    fa:7d:34:ed:de:24:21:79:6d:6b:60:88:7e:3b:7b:
                    e7:49:56:28:31:52:f6:bd:10:2a:84:11:ed:17:33:
                    29:a4:6a:dc:6b:41:ec:88:1b:c8:2b:b4:db:d5:99:
                    ee:f1:cb:67:15:66:c3:e1:37:b3:0c:6d:eb:86:dd:
                    1b:16:39:ca:a2:b2:98:ee:9e:88:a8:c7:8f:5e:18:
                    28:b2:56:01:00:f2:30:cd:71:bb:5e:73:44:c6:2e:
                    ba:cc:94:91:d3:17:a2:2a:ca:3a:48:13:f8:f1:5a:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:38:DA:45:BE:28:47:E7:1D:62:7D:A7:20:8F:12:86:02:64:8B:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.crl

            X509v3 Authority Key Identifier:
                keyid:FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.8.0/24
                IPv6:
                  2602:fb30::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:bb:bc:09:90:34:7a:cd:07:4e:c5:45:9a:19:27:ee:6f:7b:
         22:a3:d9:7a:7c:54:ec:7e:86:3c:b0:82:e8:6e:4e:ff:5e:d2:
         55:18:fe:a7:db:a3:db:4c:6f:08:b8:94:61:29:43:7f:81:fa:
         ad:29:eb:da:31:79:47:c2:bd:24:0d:2e:37:26:87:67:13:5e:
         92:9c:e5:38:1d:0c:cd:30:2a:7c:e2:0e:cd:ec:f7:cf:99:1d:
         e8:42:1e:35:36:df:53:d0:ea:dc:dd:0d:99:2a:14:16:40:13:
         9d:ff:0a:db:b7:5a:85:09:d9:81:29:68:5c:8f:46:7f:7d:ec:
         1a:78:4b:fd:0f:b4:44:f5:de:98:12:75:d7:9b:fe:b1:81:1e:
         92:8b:b0:21:77:24:6e:24:94:70:f4:08:59:29:4e:59:bc:c1:
         4f:bc:bf:a6:b7:11:a8:1b:72:6f:23:d6:31:10:fb:8b:26:fa:
         e8:d7:49:7d:7e:9c:50:b3:be:f5:6e:8c:df:cc:1b:5a:43:b9:
         41:38:b5:8b:b5:30:6d:57:c7:9f:63:4c:61:a6:a8:d7:b5:59:
         9d:bc:61:f4:1c:06:0e:bd:05:49:3f:dd:1c:61:08:5d:05:34:
         62:e6:68:e0:80:cc:5b:28:8c:8d:75:d6:b1:55:27:3a:3a:8e:
         5d:15:6a:7a
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEqSBjT9l+aPXv+OPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFjN2MzYjQtY2JmYi00NjBiLThjYmEtYThiMDY1MDRj
ODkyMB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk
ZjZmZTdiOWUtNWE3Ni00ZDkxLThmODEtZGYzYmVmODdjN2Y3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxan9Z4J6di7bXAHPQxNSkbDXCIl8tDlqdnJ
bp6bTFANFRrMvufqi+YQCXLXlREbenVyXjpTOYmWJDqv76dUaIW3S2Vk1deJ5bpn
0+jR0rNwgt4ZhZa6RjXQYAAWhtU3PPQiK+6MP/AF0Y9AXCGUiMRyiQ4zffUbC16L
M5574I7y912wkjp+SpRRkrKgaBByqeCYq7b6fTTt3iQheW1rYIh+O3vnSVYoMVL2
vRAqhBHtFzMppGrca0HsiBvIK7Tb1Znu8ctnFWbD4TezDG3rht0bFjnKorKY7p6I
qMePXhgoslYBAPIwzXG7XnNExi66zJSR0xeiKso6SBP48VqN9QIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFG842kW+KEfnHWJ9pyCPEoYCZIt2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81YWM3
YzNiNC1jYmZiLTQ2MGItOGNiYS1hOGIwNjUwNGM4OTIvMTFkMWFmNjAtOTFlNy0z
ZDVhLTg1MzItOWRmZmNkZWY5ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWFjN2MzYjQtY2JmYi00NjBiLThj
YmEtYThiMDY1MDRjODkyLzVhYzdjM2I0LWNiZmItNDYwYi04Y2JhLWE4YjA2NTA0
Yzg5Mi5jcmwwHwYDVR0jBBgwFoAU+5HZC71nsRTK2OAzjZcioG1PIb8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81YWM3YzNiNC1jYmZiLTQ2MGItOGNiYS1hOGIw
NjUwNGM4OTIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4wIMA4E
AgACMAgDBgAmAvswADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDUu7wJkDR6zQdOxUWaGSfub3sio9l6fFTs
foY8sILobk7/XtJVGP6n26PbTG8IuJRhKUN/gfqtKevaMXlHwr0kDS43JodnE16S
nOU4HQzNMCp84g7N7PfPmR3oQh41Nt9T0Orc3Q2ZKhQWQBOd/wrbt1qFCdmBKWhc
j0Z/fewaeEv9D7RE9d6YEnXXm/6xgR6Si7AhdyRuJJRw9AhZKU5ZvMFPvL+mtxGo
G3JvI9YxEPuLJvro10l9fpxQs771bozfzBtaQ7lBOLWLtTBtV8efY0xhpqjXtVmd
vGH0HAYOvQVJP90cYQhdBTRi5mjggMxbKIyNddaxVSc6Oo5dFWp6
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:04:07 2025 by rpki-client