Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/993932e0-9297-34e0-88e7-491c5545bdc4.roa
File:                     993932e0-9297-34e0-88e7-491c5545bdc4.roa (raw, json)
Hash identifier:          Zv5uX9XyJZE2swcLQAvQOVxhfndigX1s0JJlOW5ALnI=
Subject key identifier:   C2:C2:3E:48:1D:24:13:E3:3D:C1:0F:00:B4:4C:24:68:0A:67:92:44
Certificate issuer:       /CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
Certificate serial:       010D0C9F4328584B5B073A4D2D590C4CD7871980
Authority key identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/993932e0-9297-34e0-88e7-491c5545bdc4.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     51082
IP address blocks:        23.177.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:3a:4d:2d:59:0c:4c:d7:87:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=733cb041-b1ab-4d7f-a8ae-d0ba21e0d22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:50:82:e2:40:96:cf:02:62:e3:ab:30:86:
                    06:cb:b6:cc:b7:7f:2b:0c:1d:75:48:b5:d6:11:27:
                    c8:60:92:d9:68:99:20:75:85:e1:3a:13:3c:87:fa:
                    99:49:a2:be:0a:21:cc:8e:c6:5d:7f:9c:25:f6:ed:
                    a7:a1:f6:fe:4f:8c:81:cf:d5:cf:8a:a6:7d:7e:48:
                    8a:30:c0:5e:80:43:81:a2:1c:e8:8f:40:d9:64:10:
                    3a:cb:a1:70:89:e3:d2:d8:c6:a6:ed:ce:7b:6d:77:
                    20:99:45:83:f0:62:78:7b:c6:e9:df:03:34:72:a0:
                    7e:eb:5c:ee:23:30:90:9a:a3:74:65:6e:47:35:ca:
                    bb:75:83:3d:de:cf:ee:0c:fb:ef:db:5d:1d:89:b3:
                    7a:4e:b0:7a:9b:97:7b:c0:98:a0:b1:03:f6:ef:80:
                    3a:a9:c2:7d:51:85:6c:95:5b:7e:9e:8b:4f:7f:33:
                    38:f7:f5:a3:31:bd:96:5f:d6:e0:46:bd:a2:18:2f:
                    b9:fe:35:78:7b:f8:52:c9:c8:d6:08:e9:eb:26:ae:
                    16:eb:ce:ba:35:3b:55:70:b8:43:10:5a:2c:44:00:
                    fe:b9:6b:ef:21:41:d6:5e:5a:c6:e5:66:54:8b:f1:
                    36:06:a7:1c:37:1d:05:bb:80:c7:1e:90:9f:ac:c7:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C2:3E:48:1D:24:13:E3:3D:C1:0F:00:B4:4C:24:68:0A:67:92:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/993932e0-9297-34e0-88e7-491c5545bdc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl

            X509v3 Authority Key Identifier:
                keyid:00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:85:dc:46:a3:68:45:cc:bb:69:61:01:7a:b3:ff:e3:8f:a3:
         99:cf:57:d7:ef:72:31:d1:cd:7a:20:64:f9:65:ff:0d:f6:8c:
         5c:ee:7b:f3:f7:0f:46:c6:1b:86:78:e5:6b:67:c3:c9:fc:fa:
         85:3b:d6:c0:18:60:c2:8f:00:a0:58:25:e1:f6:f9:aa:ce:6d:
         b6:3f:cd:0d:df:a7:26:d4:71:1e:fd:53:ad:f3:2c:27:25:1f:
         cd:06:9f:20:e6:69:67:87:b1:a9:a7:94:83:25:bc:10:40:c0:
         f8:33:b3:66:6b:4c:48:f8:6a:4c:66:e5:72:1d:10:8e:37:ec:
         6b:62:7d:54:eb:4b:c5:49:0c:96:de:4b:80:f7:0f:ce:cd:c8:
         9f:d0:bf:83:a8:fc:b9:25:0c:6c:3b:34:bc:47:03:b3:3f:29:
         4b:9a:2a:4c:ef:49:fe:79:f7:11:a9:45:65:63:4a:51:e2:c1:
         91:1b:80:f4:8f:a6:fd:af:ab:10:9f:79:94:a9:00:0c:8b:d2:
         4e:97:4a:90:cf:d7:12:18:5f:29:90:b2:d8:03:5e:8f:2b:f4:
         93:12:0d:e7:1e:0d:56:bb:50:bf:a1:c6:ae:ab:bc:a3:67:a9:
         17:f5:9a:bd:1a:23:05:fa:9a:02:89:99:44:e8:7f:19:66:7f:
         cc:da:27:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzpNLVkMTNeHGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTllNWUyZmUtZGIzMy00MDBhLWIxY2EtODA1ZGU1MmVh
YjZhMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
NzMzY2IwNDEtYjFhYi00ZDdmLWE4YWUtZDBiYTIxZTBkMjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshlQguJAls8CYuOrMIYGy7bMt38rDB11SLXW
ESfIYJLZaJkgdYXhOhM8h/qZSaK+CiHMjsZdf5wl9u2nofb+T4yBz9XPiqZ9fkiK
MMBegEOBohzoj0DZZBA6y6FwiePS2Mam7c57bXcgmUWD8GJ4e8bp3wM0cqB+61zu
IzCQmqN0ZW5HNcq7dYM93s/uDPvv210dibN6TrB6m5d7wJigsQP274A6qcJ9UYVs
lVt+notPfzM49/WjMb2WX9bgRr2iGC+5/jV4e/hSycjWCOnrJq4W6866NTtVcLhD
EFosRAD+uWvvIUHWXlrG5WZUi/E2BqccNx0Fu4DHHpCfrMfgVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMLCPkgdJBPjPcEPALRMJGgKZ5JEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWU1
ZTJmZS1kYjMzLTQwMGEtYjFjYS04MDVkZTUyZWFiNmEvOTkzOTMyZTAtOTI5Ny0z
NGUwLTg4ZTctNDkxYzU1NDViZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTllNWUyZmUtZGIzMy00MDBhLWIx
Y2EtODA1ZGU1MmVhYjZhL2E5ZTVlMmZlLWRiMzMtNDAwYS1iMWNhLTgwNWRlNTJl
YWI2YS5jcmwwHwYDVR0jBBgwFoAUANKIpZEiUF4/+bTXZWsHbooGyX8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hOWU1ZTJmZS1kYjMzLTQwMGEtYjFjYS04MDVk
ZTUyZWFiNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7FIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGF3EajaEXMu2lhAXqz/+OPo5nPV9fvcjHRzXogZPll/w32jFzue/P3
D0bGG4Z45Wtnw8n8+oU71sAYYMKPAKBYJeH2+arObbY/zQ3fpybUcR79U63zLCcl
H80GnyDmaWeHsamnlIMlvBBAwPgzs2ZrTEj4akxm5XIdEI437GtifVTrS8VJDJbe
S4D3D87NyJ/Qv4Oo/LklDGw7NLxHA7M/KUuaKkzvSf559xGpRWVjSlHiwZEbgPSP
pv2vqxCfeZSpAAyL0k6XSpDP1xIYXymQstgDXo8r9JMSDeceDVa7UL+hxq6rvKNn
qRf1mr0aIwX6mgKJmUTofxlmf8zaJ28=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:32:43 2025 by rpki-client