Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/067ddac2-0d8a-3a62-a821-97457eb725bf.roa
File:                     067ddac2-0d8a-3a62-a821-97457eb725bf.roa (raw, json)
Hash identifier:          9+5IltqSR3LekmTsfJFDN04PN0L8WzTMPixIE/gvI+0=
Subject key identifier:   9F:79:07:B7:64:0B:91:3F:C0:C2:35:81:8A:A1:70:88:DF:DD:11:01
Certificate issuer:       /CN=6457bd98-4cd5-4766-a190-844b93a354f2
Certificate serial:       010D0C9F4328584B1AD18F863395F7C670761500
Authority key identifier: C2:05:CE:FE:36:D2:DC:A6:D9:0A:D3:E6:25:6B:11:7C:D2:0E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/067ddac2-0d8a-3a62-a821-97457eb725bf.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     46088
IP address blocks:        23.166.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:8f:86:33:95:f7:c6:70:76:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6457bd98-4cd5-4766-a190-844b93a354f2
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=2cb3647b-5249-4266-a124-0cd90cf1e94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:2d:21:35:63:86:6d:bb:e7:67:7e:50:a8:
                    0c:b2:27:d0:56:9a:ad:b3:a2:98:1f:80:3d:ae:d8:
                    98:31:29:7c:be:23:a4:c3:74:76:88:58:66:1f:b9:
                    e8:c1:ce:0b:0a:c2:55:77:60:bf:ea:e8:4b:d4:da:
                    18:32:55:f1:53:2f:61:04:b0:ac:b0:89:be:dc:ed:
                    33:4d:60:80:35:09:a2:89:c5:fd:a2:21:54:27:48:
                    ad:d2:34:69:e9:e4:86:67:ef:56:ad:f2:19:a1:83:
                    a6:88:10:d8:0c:c9:c5:7c:24:11:f0:2d:12:42:8c:
                    b9:fe:f2:20:72:2d:eb:a9:e9:20:6a:7c:d9:47:94:
                    09:6e:24:f6:47:06:05:27:2b:87:50:ba:81:1f:28:
                    79:1a:da:6f:43:ff:bb:56:67:ce:90:9e:50:bd:a3:
                    a2:09:51:1b:dd:c1:6f:89:ed:75:4f:62:8e:88:7f:
                    2c:43:ce:23:20:31:f1:2d:7d:6f:82:0e:27:4a:2f:
                    10:5f:71:4d:0e:f0:36:fe:b6:55:38:f0:99:a7:10:
                    48:32:37:55:ea:b3:f3:95:fd:61:3e:a0:c8:42:50:
                    64:56:14:09:87:d3:51:da:8e:97:bf:74:b1:c8:ab:
                    0c:a7:d2:91:aa:e1:d7:19:2a:da:0e:64:e5:b7:72:
                    5a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:79:07:B7:64:0B:91:3F:C0:C2:35:81:8A:A1:70:88:DF:DD:11:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/067ddac2-0d8a-3a62-a821-97457eb725bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.crl

            X509v3 Authority Key Identifier:
                keyid:C2:05:CE:FE:36:D2:DC:A6:D9:0A:D3:E6:25:6B:11:7C:D2:0E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:8d:d1:a5:b2:c5:cd:0c:d0:5b:bd:8b:e9:6c:ec:af:5b:05:
         59:20:39:c1:59:fc:0e:ce:97:08:b1:fb:ea:be:50:a5:23:2d:
         ff:cf:b9:07:32:db:c3:59:ba:a8:d8:3b:56:bb:86:69:4d:ea:
         9a:9b:f8:8f:2e:14:fc:7d:d5:b6:18:8b:97:ed:16:72:f6:1a:
         45:1c:d0:49:72:e6:f6:83:83:b0:e1:eb:fa:ae:e3:1c:93:0e:
         ff:25:5f:86:32:6e:0a:69:47:7d:6e:fc:e5:61:36:ac:a2:58:
         32:5e:c4:21:6d:3d:11:f6:71:b4:54:11:9d:c4:33:1e:58:5f:
         60:fc:5f:1a:bd:0c:74:25:22:fd:85:65:d3:d2:07:36:a7:a8:
         4f:90:d6:29:6a:87:69:8d:80:be:9d:3f:cb:33:8b:a3:ba:2a:
         30:80:28:8e:25:4c:a4:36:93:1d:03:c0:f4:d8:3b:fa:7f:89:
         53:1b:d0:dc:97:cb:de:da:d3:ed:55:ee:a2:8a:2c:2e:d1:9e:
         33:d7:c1:37:44:0b:5b:d7:3d:51:ec:2a:16:33:a8:f2:88:4f:
         fb:91:81:ba:82:ea:04:16:c7:1f:84:7c:ef:ca:fc:0b:3a:cd:
         d5:8d:a3:c9:60:77:3e:be:a5:07:65:3e:12:84:51:9d:0c:33:
         bd:87:5a:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Y+GM5X3xnB2FQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQ1N2JkOTgtNGNkNS00NzY2LWExOTAtODQ0YjkzYTM1
NGYyMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
MmNiMzY0N2ItNTI0OS00MjY2LWExMjQtMGNkOTBjZjFlOTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGwtITVjhm2752d+UKgMsifQVpqts6KYH4A9
rtiYMSl8viOkw3R2iFhmH7nowc4LCsJVd2C/6uhL1NoYMlXxUy9hBLCssIm+3O0z
TWCANQmiicX9oiFUJ0it0jRp6eSGZ+9WrfIZoYOmiBDYDMnFfCQR8C0SQoy5/vIg
ci3rqekganzZR5QJbiT2RwYFJyuHULqBHyh5GtpvQ/+7VmfOkJ5QvaOiCVEb3cFv
ie11T2KOiH8sQ84jIDHxLX1vgg4nSi8QX3FNDvA2/rZVOPCZpxBIMjdV6rPzlf1h
PqDIQlBkVhQJh9NR2o6Xv3SxyKsMp9KRquHXGSraDmTlt3Ja4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ95B7dkC5E/wMI1gYqhcIjf3REBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU3
YmQ5OC00Y2Q1LTQ3NjYtYTE5MC04NDRiOTNhMzU0ZjIvMDY3ZGRhYzItMGQ4YS0z
YTYyLWE4MjEtOTc0NTdlYjcyNWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjQ1N2JkOTgtNGNkNS00NzY2LWEx
OTAtODQ0YjkzYTM1NGYyLzY0NTdiZDk4LTRjZDUtNDc2Ni1hMTkwLTg0NGI5M2Ez
NTRmMi5jcmwwHwYDVR0jBBgwFoAUwgXO/jbS3KbZCtPmJWsRfNIOeD0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU3YmQ5OC00Y2Q1LTQ3NjYtYTE5MC04NDRi
OTNhMzU0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6boMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6N0aWyxc0M0Fu9i+ls7K9bBVkgOcFZ/A7Olwix++q+UKUjLf/PuQcy
28NZuqjYO1a7hmlN6pqb+I8uFPx91bYYi5ftFnL2GkUc0Ely5vaDg7Dh6/qu4xyT
Dv8lX4YybgppR31u/OVhNqyiWDJexCFtPRH2cbRUEZ3EMx5YX2D8Xxq9DHQlIv2F
ZdPSBzanqE+Q1ilqh2mNgL6dP8szi6O6KjCAKI4lTKQ2kx0DwPTYO/p/iVMb0NyX
y97a0+1V7qKKLC7RnjPXwTdEC1vXPVHsKhYzqPKIT/uRgbqC6gQWxx+EfO/K/As6
zdWNo8lgdz6+pQdlPhKEUZ0MM72HWjY=
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:43:04 2025 by rpki-client