Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5cc03706-ae5c-4830-a0ae-c81dd1e49a9c/fbc4a2f5-9124-35f0-82da-6ceaa9267aee.roa
File:                     fbc4a2f5-9124-35f0-82da-6ceaa9267aee.roa (raw, json)
Hash identifier:          9xjC1Hrf/A2ldztexq6CPraLy61aXGvGvYmW5yRnP2I=
Subject key identifier:   CE:E8:CC:EA:49:5F:75:87:26:83:F6:3E:94:97:10:EA:B6:71:6D:F1
Certificate issuer:       /CN=5cc03706-ae5c-4830-a0ae-c81dd1e49a9c
Certificate serial:       010D0C9F4328584A78E5F2DE01D9EE73E8640CC0
Authority key identifier: E8:BD:5E:1C:77:43:8E:CB:01:4D:31:E8:F1:AD:0E:59:C5:8A:3F:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5cc03706-ae5c-4830-a0ae-c81dd1e49a9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5cc03706-ae5c-4830-a0ae-c81dd1e49a9c/fbc4a2f5-9124-35f0-82da-6ceaa9267aee.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     214483
IP address blocks:        23.137.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5cc03706-ae5c-4830-a0ae-c81dd1e49a9c/5cc03706-ae5c-4830-a0ae-c81dd1e49a9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5cc03706-ae5c-4830-a0ae-c81dd1e49a9c/5cc03706-ae5c-4830-a0ae-c81dd1e49a9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5cc03706-ae5c-4830-a0ae-c81dd1e49a9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e5:f2:de:01:d9:ee:73:e8:64:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc03706-ae5c-4830-a0ae-c81dd1e49a9c
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=93443182-8ee3-43da-80d6-e7850b8189b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:3d:03:6b:4b:94:94:91:b3:c4:c0:6a:46:
                    90:75:84:ab:17:0b:28:c3:23:9e:5f:41:75:26:5c:
                    fa:42:78:a9:ce:f7:69:2f:79:c3:d7:bd:73:73:45:
                    51:88:61:ce:08:13:92:64:50:a7:fb:74:76:42:22:
                    20:4c:30:29:4e:11:2b:5b:89:e8:02:96:11:a7:2f:
                    b4:74:05:8d:33:67:f4:ad:cd:09:31:8e:e9:f5:9c:
                    a9:14:e6:ea:9e:4a:6e:73:64:ae:60:29:ca:a1:7a:
                    ff:c1:c0:de:9c:67:e9:b0:c5:6e:53:5e:66:1b:81:
                    8a:d8:a7:7b:77:db:c7:cc:88:04:08:17:82:c0:54:
                    6b:bf:9b:96:73:ac:db:53:ee:a3:1a:33:90:0e:ee:
                    b7:27:f9:d5:18:56:b3:41:5e:b0:ca:23:30:04:50:
                    ef:53:ec:01:53:8e:df:56:5f:56:d0:9e:f1:c8:cc:
                    37:4a:65:6b:e3:a9:c9:ec:b0:89:f5:88:44:93:6a:
                    f9:9d:2c:fe:7a:2a:b5:c2:ba:fb:ee:a4:1b:1d:71:
                    2e:54:4a:4f:3f:00:b0:43:98:6c:79:70:b3:4a:77:
                    f9:7f:a3:e0:a7:73:6a:f3:91:86:25:3b:54:c2:a7:
                    0e:f6:ae:f1:6c:2e:92:58:4b:a2:ea:d6:9a:34:6b:
                    09:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E8:CC:EA:49:5F:75:87:26:83:F6:3E:94:97:10:EA:B6:71:6D:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5cc03706-ae5c-4830-a0ae-c81dd1e49a9c/fbc4a2f5-9124-35f0-82da-6ceaa9267aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5cc03706-ae5c-4830-a0ae-c81dd1e49a9c/5cc03706-ae5c-4830-a0ae-c81dd1e49a9c.crl

            X509v3 Authority Key Identifier:
                keyid:E8:BD:5E:1C:77:43:8E:CB:01:4D:31:E8:F1:AD:0E:59:C5:8A:3F:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5cc03706-ae5c-4830-a0ae-c81dd1e49a9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:a7:08:4a:0d:8e:cd:e9:04:a7:32:3f:ab:2b:8e:b3:ff:c2:
         ac:96:91:12:ee:02:5d:3c:2a:5b:72:9e:bb:69:80:a1:0c:68:
         cc:70:dc:79:b0:76:44:8b:1a:9d:1b:94:27:07:da:5d:59:3c:
         97:0b:57:55:b0:62:52:4b:e3:cc:82:2c:34:b4:a8:a6:a6:23:
         20:79:e8:fc:af:d2:21:8c:aa:21:65:1b:aa:20:41:80:68:5d:
         18:3d:40:f8:6c:54:e5:26:30:2b:09:a2:33:93:24:04:12:29:
         70:a4:63:3a:c4:a6:63:00:71:32:a2:a1:72:04:f2:71:b1:c9:
         76:63:49:67:18:2f:7c:51:cd:b9:67:ec:31:3f:21:e3:08:ed:
         1b:70:c5:6b:f9:4a:64:2c:8e:ea:18:5f:0d:c3:df:b0:e3:6d:
         1a:d9:38:df:cb:2f:24:27:7c:5e:49:99:77:c4:a3:ca:19:ce:
         f2:2b:42:17:37:d1:ce:2f:5c:67:9f:71:9c:e9:4a:40:c8:ae:
         bc:75:bb:64:a7:26:77:53:3c:01:2b:31:92:cf:aa:d9:11:86:
         88:07:d7:ca:fc:3b:ac:38:9e:04:64:bf:27:4a:24:60:77:5f:
         97:19:51:93:8b:db:b9:4e:7b:96:44:e0:a3:b5:00:65:d2:ed:
         b6:fc:be:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp45fLeAdnuc+hkDMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjMDM3MDYtYWU1Yy00ODMwLWEwYWUtYzgxZGQxZTQ5
YTljMB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk
OTM0NDMxODItOGVlMy00M2RhLTgwZDYtZTc4NTBiODE4OWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArms9A2tLlJSRs8TAakaQdYSrFwsowyOeX0F1
Jlz6QnipzvdpL3nD171zc0VRiGHOCBOSZFCn+3R2QiIgTDApThErW4noApYRpy+0
dAWNM2f0rc0JMY7p9ZypFObqnkpuc2SuYCnKoXr/wcDenGfpsMVuU15mG4GK2Kd7
d9vHzIgECBeCwFRrv5uWc6zbU+6jGjOQDu63J/nVGFazQV6wyiMwBFDvU+wBU47f
Vl9W0J7xyMw3SmVr46nJ7LCJ9YhEk2r5nSz+eiq1wrr77qQbHXEuVEpPPwCwQ5hs
eXCzSnf5f6Pgp3Nq85GGJTtUwqcO9q7xbC6SWEui6taaNGsJ/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM7ozOpJX3WHJoP2PpSXEOq2cW3xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81Y2Mw
MzcwNi1hZTVjLTQ4MzAtYTBhZS1jODFkZDFlNDlhOWMvZmJjNGEyZjUtOTEyNC0z
NWYwLTgyZGEtNmNlYWE5MjY3YWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWNjMDM3MDYtYWU1Yy00ODMwLWEw
YWUtYzgxZGQxZTQ5YTljLzVjYzAzNzA2LWFlNWMtNDgzMC1hMGFlLWM4MWRkMWU0
OWE5Yy5jcmwwHwYDVR0jBBgwFoAU6L1eHHdDjssBTTHo8a0OWcWKP4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy81Y2MwMzcwNi1hZTVjLTQ4MzAtYTBhZS1jODFk
ZDFlNDlhOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4nMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKOnCEoNjs3pBKcyP6srjrP/wqyWkRLuAl08KltynrtpgKEMaMxw3Hmw
dkSLGp0blCcH2l1ZPJcLV1WwYlJL48yCLDS0qKamIyB56Pyv0iGMqiFlG6ogQYBo
XRg9QPhsVOUmMCsJojOTJAQSKXCkYzrEpmMAcTKioXIE8nGxyXZjSWcYL3xRzbln
7DE/IeMI7RtwxWv5SmQsjuoYXw3D37DjbRrZON/LLyQnfF5JmXfEo8oZzvIrQhc3
0c4vXGefcZzpSkDIrrx1u2SnJndTPAErMZLPqtkRhogH18r8O6w4ngRkvydKJGB3
X5cZUZOL27lOe5ZE4KO1AGXS7bb8vs0=
-----END CERTIFICATE-----
Generated at Tue Jul 22 05:50:17 2025 by rpki-client