Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/8919d429-f4cf-30f8-b3f0-a8ab3e2c1bd0.roa
File:                     8919d429-f4cf-30f8-b3f0-a8ab3e2c1bd0.roa (raw, json)
Hash identifier:          15sPbxP+NnIg4zum0Cu2HVHyHLdV9lmgNdZD5WMIyWY=
Subject key identifier:   15:5B:F7:D4:0D:2C:C5:24:1A:DF:4F:88:7C:FE:54:6B:EF:EC:D8:E0
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328584B2002EDC4B76CAA686B657680
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/8919d429-f4cf-30f8-b3f0-a8ab3e2c1bd0.roa
Signing time:             Mon 08 Sep 2025 09:39:28 +0000
ROA not before:           Mon 08 Sep 2025 09:39:28 +0000
ROA not after:            Sun 07 Dec 2025 10:39:28 +0000
asID:                     205220
IP address blocks:        23.137.137.0/24 maxlen: 24
                          216.73.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:02:ed:c4:b7:6c:aa:68:6b:65:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Sep  8 09:39:28 2025 GMT
            Not After : Dec  7 10:39:28 2025 GMT
        Subject: CN=248155e6-f54f-48c5-acb6-84b664789779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:af:85:6a:89:78:53:cc:85:0e:e6:7a:48:dd:
                    f3:3e:2f:a5:8c:b5:ef:57:79:77:bf:ae:68:51:fd:
                    87:a7:fd:36:f3:2c:d6:42:3a:23:af:c6:9c:86:82:
                    c8:81:8a:f5:17:ff:14:66:4a:2c:93:1c:a5:cc:8e:
                    fc:21:6f:dc:48:3f:cc:71:75:81:b5:db:21:30:61:
                    5e:ef:d6:24:66:c0:08:ed:74:5d:b5:d5:13:30:f8:
                    9f:62:1f:b3:14:05:83:9b:f1:5d:60:04:cf:9f:59:
                    c8:c5:42:29:be:25:4d:2f:96:69:25:c9:64:94:d5:
                    bf:4e:4f:51:bf:7d:19:8e:d3:ae:2c:a4:b3:38:54:
                    02:52:f6:93:c6:fa:8a:23:83:8e:0c:fa:65:22:77:
                    a8:60:c2:38:dc:e6:f2:94:41:7e:70:c1:32:70:88:
                    6e:98:6b:3a:f2:c7:75:d7:ab:c5:82:5d:49:4c:48:
                    6f:b5:fd:86:8d:50:c7:b1:fc:de:8c:8a:b0:c9:b2:
                    e3:43:49:5c:98:af:77:c6:40:fe:93:9a:ac:34:59:
                    62:36:cc:34:f8:b5:c9:44:ee:84:5b:b1:03:91:7d:
                    28:44:38:7a:9e:e2:39:aa:ac:ed:d9:02:d1:d6:d2:
                    13:e1:70:6a:73:e3:b6:01:6a:4c:a7:2d:18:62:6f:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5B:F7:D4:0D:2C:C5:24:1A:DF:4F:88:7C:FE:54:6B:EF:EC:D8:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/8919d429-f4cf-30f8-b3f0-a8ab3e2c1bd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.137.0/24
                  216.73.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:cd:4c:95:85:44:04:82:72:2f:29:78:e5:f3:83:e3:b5:e7:
         a5:d0:96:e3:53:b4:23:b1:b6:17:f9:bc:bd:df:17:db:08:00:
         27:f5:c4:a0:82:2c:a0:53:9f:a4:b6:8f:ae:61:15:d8:a6:5d:
         d0:af:10:29:55:30:1a:cc:06:a2:b2:46:da:13:9b:a2:4b:e0:
         3e:b3:93:1e:95:9e:ff:ec:c5:c0:20:5c:fe:65:8e:c9:9a:f0:
         8b:c2:2a:82:d6:34:28:6e:c4:ba:0a:09:2b:8f:30:89:0c:17:
         d8:be:6d:56:3e:49:79:15:f9:74:43:fb:27:2e:e7:75:9e:6d:
         a5:ba:3c:45:13:9f:f6:5c:c5:9a:af:18:ac:ef:16:6c:b3:3d:
         54:03:28:2b:dd:c9:93:90:ee:3b:ca:95:9d:30:f0:3b:7e:09:
         e5:2d:7d:52:ff:f1:73:c5:29:7c:17:76:09:6e:06:3d:ca:7f:
         54:f9:e6:45:00:ac:53:ef:33:8d:7d:d4:49:af:36:12:ed:60:
         31:97:5f:d4:5d:db:27:76:04:73:1a:da:42:f4:fe:13:9a:b6:
         56:88:f4:d8:a3:d1:97:64:d2:ef:ef:7f:90:a0:b6:5b:dd:d9:
         01:dc:a2:44:b2:5c:1a:6f:0e:10:f2:7f:8a:55:ed:c9:68:5c:
         f7:98:a9:88
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsgAu3Et2yqaGtldoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4
OGRmMB4XDTI1MDkwODA5MzkyOFoXDTI1MTIwNzEwMzkyOFowLzEtMCsGA1UEAxMk
MjQ4MTU1ZTYtZjU0Zi00OGM1LWFjYjYtODRiNjY0Nzg5Nzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma+Faol4U8yFDuZ6SN3zPi+ljLXvV3l3v65o
Uf2Hp/028yzWQjojr8achoLIgYr1F/8UZkoskxylzI78IW/cSD/McXWBtdshMGFe
79YkZsAI7XRdtdUTMPifYh+zFAWDm/FdYATPn1nIxUIpviVNL5ZpJclklNW/Tk9R
v30ZjtOuLKSzOFQCUvaTxvqKI4OODPplIneoYMI43ObylEF+cMEycIhumGs68sd1
16vFgl1JTEhvtf2GjVDHsfzejIqwybLjQ0lcmK93xkD+k5qsNFliNsw0+LXJRO6E
W7EDkX0oRDh6nuI5qqzt2QLR1tIT4XBqc+O2AWpMpy0YYm+r2QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBVb99QNLMUkGt9PiHz+VGvv7NjgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5
NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvODkxOWQ0MjktZjRjZi0z
MGY4LWIzZjAtYThhYjNlMmMxYmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2OTVjOTEtNTBlZC00MDJjLWI4
OTYtNjA1NmJiZGU4OGRmLzM5Njk1YzkxLTUwZWQtNDAyYy1iODk2LTYwNTZiYmRl
ODhkZi5jcmwwHwYDVR0jBBgwFoAU+vU6ER4AXbycYWexl2vVDekdgbQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2
YmJkZTg4ZGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4mJAwQA
2EmXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAC7NTJWFRASCci8peOXzg+O156XQluNTtCOxthf5vL3fF9sI
ACf1xKCCLKBTn6S2j65hFdimXdCvEClVMBrMBqKyRtoTm6JL4D6zkx6Vnv/sxcAg
XP5ljsma8IvCKoLWNChuxLoKCSuPMIkMF9i+bVY+SXkV+XRD+ycu53WebaW6PEUT
n/ZcxZqvGKzvFmyzPVQDKCvdyZOQ7jvKlZ0w8Dt+CeUtfVL/8XPFKXwXdgluBj3K
f1T55kUArFPvM4191EmvNhLtYDGXX9Rd2yd2BHMa2kL0/hOatlaI9Nij0Zdk0u/v
f5Cgtlvd2QHcokSyXBpvDhDyf4pV7cloXPeYqYg=
-----END CERTIFICATE-----
Generated at Sat Oct 11 13:07:49 2025 by rpki-client