Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1/758d2349-757c-3407-84a3-33ffc79bc172.roa
File:                     758d2349-757c-3407-84a3-33ffc79bc172.roa (raw, json)
Hash identifier:          knG+2r/jp2OooyGlZh+QSApqeMyvz5KUJhCN4KRoURc=
Subject key identifier:   EF:3C:70:07:58:66:37:57:A8:5A:1E:15:AD:EF:2C:10:9E:81:F0:01
Certificate issuer:       /CN=aa7f8f98-bca3-4c8d-81b2-af03493ceeb1
Certificate serial:       010D0C9F4328584B153C125A5BC20233FB3E2D98
Authority key identifier: 40:9C:47:03:2B:A0:59:A1:B5:01:C4:B1:1F:73:DD:C1:75:43:38:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1/758d2349-757c-3407-84a3-33ffc79bc172.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     54113
IP address blocks:        23.185.0.0/24 maxlen: 24
                          2620:12a:8000::/44 maxlen: 44
                          2620:12a:8000::/48 maxlen: 48
                          2620:12a:8001::/48 maxlen: 48
                          2620:12a:8002::/48 maxlen: 48
                          2620:12a:8003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:12:5a:5b:c2:02:33:fb:3e:2d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa7f8f98-bca3-4c8d-81b2-af03493ceeb1
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=110d0652-4ef3-4f22-8c7f-e502c24bfd4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:07:0f:a3:ad:c1:a1:3e:d7:cf:7a:c3:f7:d0:
                    ac:79:e1:e7:4d:88:2c:98:6d:b7:d5:e3:98:f5:50:
                    01:c0:bc:a5:e1:c1:7e:d9:4b:a1:3e:67:06:8f:b5:
                    95:a1:a1:5f:9f:ed:eb:a1:ec:fb:50:9b:bb:62:69:
                    f4:3d:e9:19:a9:12:62:75:4c:6d:a5:99:6a:a5:9a:
                    16:f0:82:fb:65:8d:ab:f5:f9:bd:4b:9c:eb:19:bf:
                    a0:d2:04:b3:fa:eb:23:0b:87:9d:45:f1:6d:4e:d3:
                    e5:50:32:b0:b6:5e:df:0a:92:82:6c:3a:17:f8:df:
                    1e:b4:89:b0:bd:84:53:ed:e7:ea:df:de:43:b1:c7:
                    32:e0:99:ee:c9:aa:83:82:dd:5c:94:5e:71:7a:12:
                    99:8b:cd:dc:2e:08:74:a6:f6:51:e1:8b:f1:39:86:
                    4e:cd:08:ee:2c:06:ea:68:e8:2d:21:79:5a:70:c8:
                    26:a4:1f:5b:45:32:a2:40:0c:b4:99:d3:d1:db:7d:
                    b9:14:09:f9:6c:e1:10:2c:35:ea:e3:74:ac:8f:16:
                    1e:f6:b5:b8:18:ab:69:ee:73:04:1b:17:1e:4f:34:
                    1e:f7:20:d5:dd:83:48:eb:61:19:c2:e4:e1:0a:43:
                    3a:2b:6a:df:e5:a4:e2:b1:be:4f:8e:3b:f1:25:04:
                    79:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3C:70:07:58:66:37:57:A8:5A:1E:15:AD:EF:2C:10:9E:81:F0:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1/758d2349-757c-3407-84a3-33ffc79bc172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.crl

            X509v3 Authority Key Identifier:
                keyid:40:9C:47:03:2B:A0:59:A1:B5:01:C4:B1:1F:73:DD:C1:75:43:38:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa7f8f98-bca3-4c8d-81b2-af03493ceeb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.0.0/24
                IPv6:
                  2620:12a:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:16:c6:c4:a0:98:2a:79:b7:e3:d9:1f:b2:00:69:7a:58:89:
         18:33:99:e9:a7:1a:f5:57:ac:35:f8:5e:8d:09:44:d0:aa:e2:
         c6:04:4f:07:26:61:24:e8:9a:f2:b6:8d:72:43:db:75:ec:fa:
         f6:24:ef:56:80:cd:9f:e4:53:b7:01:5e:8f:37:36:b3:d0:92:
         c6:9b:2a:74:a6:2e:dd:17:30:21:7b:9b:f6:dc:0a:99:be:bd:
         4c:d3:b1:75:98:de:fd:b9:05:2c:a4:d2:1b:78:ee:9b:c0:f4:
         be:92:21:24:a5:04:09:38:18:54:eb:ea:ba:a0:e7:d6:5d:8b:
         ef:97:33:a6:66:17:b4:20:0e:fe:1d:bf:32:5a:72:51:0d:e4:
         b5:83:cd:d7:d5:21:a6:b8:b1:76:db:08:72:5b:31:09:36:af:
         20:78:ec:bf:70:ed:b6:15:08:f7:d7:fa:ae:9e:70:26:ff:6f:
         3d:0e:2e:82:44:7a:47:b6:c3:f0:a9:2e:2c:90:17:70:76:88:
         1f:76:9c:17:23:64:d3:3f:3a:5c:f6:4a:69:20:e5:26:cf:7a:
         e6:2b:7b:af:8a:8c:61:9f:a9:c8:6b:d5:06:b4:13:a0:32:15:
         66:09:0c:c6:5e:07:4e:d3:2e:6e:6a:ad:41:a0:e5:13:8a:33:
         da:6b:7a:00
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEsVPBJaW8ICM/s+LZgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWE3ZjhmOTgtYmNhMy00YzhkLTgxYjItYWYwMzQ5M2Nl
ZWIxMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk
MTEwZDA2NTItNGVmMy00ZjIyLThjN2YtZTUwMmMyNGJmZDRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAcPo63BoT7Xz3rD99CseeHnTYgsmG231eOY
9VABwLyl4cF+2UuhPmcGj7WVoaFfn+3roez7UJu7Ymn0PekZqRJidUxtpZlqpZoW
8IL7ZY2r9fm9S5zrGb+g0gSz+usjC4edRfFtTtPlUDKwtl7fCpKCbDoX+N8etImw
vYRT7efq395Dsccy4JnuyaqDgt1clF5xehKZi83cLgh0pvZR4YvxOYZOzQjuLAbq
aOgtIXlacMgmpB9bRTKiQAy0mdPR2325FAn5bOEQLDXq43SsjxYe9rW4GKtp7nME
GxceTzQe9yDV3YNI62EZwuThCkM6K2rf5aTisb5PjjvxJQR55QIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFO88cAdYZjdXqFoeFa3vLBCegfABMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYTdm
OGY5OC1iY2EzLTRjOGQtODFiMi1hZjAzNDkzY2VlYjEvNzU4ZDIzNDktNzU3Yy0z
NDA3LTg0YTMtMzNmZmM3OWJjMTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWE3ZjhmOTgtYmNhMy00YzhkLTgx
YjItYWYwMzQ5M2NlZWIxL2FhN2Y4Zjk4LWJjYTMtNGM4ZC04MWIyLWFmMDM0OTNj
ZWViMS5jcmwwHwYDVR0jBBgwFoAUQJxHAyugWaG1AcSxH3PdwXVDOKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYTdmOGY5OC1iY2EzLTRjOGQtODFiMi1hZjAz
NDkzY2VlYjEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF7kAMA8E
AgACMAkDBwQmIAEqgAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZxbGxKCYKnm349kfsgBpeliJGDOZ6aca
9VesNfhejQlE0KrixgRPByZhJOia8raNckPbdez69iTvVoDNn+RTtwFejzc2s9CS
xpsqdKYu3RcwIXub9twKmb69TNOxdZje/bkFLKTSG3jum8D0vpIhJKUECTgYVOvq
uqDn1l2L75czpmYXtCAO/h2/MlpyUQ3ktYPN19UhprixdtsIclsxCTavIHjsv3Dt
thUI99f6rp5wJv9vPQ4ugkR6R7bD8KkuLJAXcHaIH3acFyNk0z86XPZKaSDlJs96
5it7r4qMYZ+pyGvVBrQToDIVZgkMxl4HTtMubmqtQaDlE4oz2mt6AA==
-----END CERTIFICATE-----
Generated at Fri Oct 10 04:57:11 2025 by rpki-client