Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc/ac44e76e-6867-3453-ab02-2991d56b5187.roa
File:                     ac44e76e-6867-3453-ab02-2991d56b5187.roa (raw, json)
Hash identifier:          B0hlQWD1A7OEpul+EFsiAnzfyfZ1sK7knSF++3W/MUU=
Subject key identifier:   C9:E0:13:C2:82:50:93:6F:51:F3:19:C6:18:79:B3:DA:F2:FE:AF:F6
Certificate issuer:       /CN=6c1a499f-4f56-4480-b4b2-2c31a96f1edc
Certificate serial:       010D0C9F4328584B2B919B505CCEC9C1DC6C2F80
Authority key identifier: 44:52:EC:83:7B:0F:3B:5E:B8:85:38:17:C9:CE:8E:F3:89:5E:BE:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc/ac44e76e-6867-3453-ab02-2991d56b5187.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     399861
IP address blocks:        23.134.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc/6c1a499f-4f56-4480-b4b2-2c31a96f1edc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc/6c1a499f-4f56-4480-b4b2-2c31a96f1edc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:9b:50:5c:ce:c9:c1:dc:6c:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1a499f-4f56-4480-b4b2-2c31a96f1edc
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=781fc4db-0697-4c75-b048-b41ced8e64de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:d4:47:d2:1f:51:95:83:03:99:2d:28:1b:
                    5b:be:20:d9:5f:c1:c0:5e:f5:d9:8f:75:4e:42:e7:
                    0c:92:0f:ca:40:be:06:17:9e:c2:8a:04:89:64:7b:
                    96:8d:03:72:b9:a1:17:6f:e6:63:1f:59:2d:be:48:
                    84:f4:e6:82:21:be:9d:e8:d5:34:87:f3:b4:50:71:
                    7e:03:01:f8:6a:e8:f7:5b:c8:55:d6:8f:c5:ef:f9:
                    62:68:ea:3d:45:db:43:b6:2e:97:bd:1d:e0:ab:c3:
                    a5:fe:8d:ee:35:3d:1a:f4:71:77:27:de:d3:72:b5:
                    3d:5e:e3:da:8c:71:94:56:4f:0f:52:45:a8:b3:a8:
                    3c:a8:92:c0:13:2c:c5:e9:e4:f5:05:0b:4b:9c:4d:
                    f4:05:d1:87:23:94:77:04:8a:a1:e6:f3:4d:a3:47:
                    01:4f:fc:5d:87:6c:80:38:35:f1:6b:21:95:7e:d1:
                    da:a9:11:c7:9d:d8:d9:13:37:20:4d:6e:30:7e:49:
                    27:86:6b:54:49:f3:ae:29:b3:3c:fc:48:e8:67:fe:
                    8f:cd:6c:25:13:b1:16:5f:26:95:0d:f5:c0:2c:4e:
                    f9:04:37:4b:0e:58:66:62:88:c0:e6:2b:09:13:fd:
                    ec:30:0c:3c:9f:3c:43:35:fd:55:07:2e:66:b6:cc:
                    74:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E0:13:C2:82:50:93:6F:51:F3:19:C6:18:79:B3:DA:F2:FE:AF:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc/ac44e76e-6867-3453-ab02-2991d56b5187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc/6c1a499f-4f56-4480-b4b2-2c31a96f1edc.crl

            X509v3 Authority Key Identifier:
                keyid:44:52:EC:83:7B:0F:3B:5E:B8:85:38:17:C9:CE:8E:F3:89:5E:BE:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ac:b6:99:a8:f4:e0:29:5e:a4:27:6a:74:c8:45:19:4a:86:
         08:15:24:c6:37:bd:2d:48:32:8d:a7:a2:24:46:6a:7a:c6:85:
         bf:65:19:33:d5:75:8c:4e:c3:21:0d:b6:b9:f7:c7:9e:84:ce:
         51:bb:4a:c5:56:27:51:06:d2:e3:58:1e:13:7a:70:ce:5b:b9:
         cd:43:6a:ad:3b:e1:7d:e6:ed:91:f3:53:5e:7f:e1:4b:bf:13:
         ca:50:9b:af:fe:8a:18:7b:91:60:f3:e2:7a:23:d3:10:52:38:
         c9:ef:49:0f:2f:a5:73:6a:59:f7:ea:51:b3:5c:12:68:0b:bf:
         b6:6a:ab:52:ae:c6:24:f4:bc:f4:0f:02:4b:4e:36:6e:47:b6:
         6e:39:9c:c2:5e:d0:5e:44:ae:9d:89:7b:5d:1c:25:47:a5:e2:
         8d:81:f5:93:74:b7:3b:e9:63:c7:2c:b2:00:e6:18:04:eb:e0:
         2f:36:f8:b4:59:8a:f4:52:56:8d:60:02:49:0e:55:6f:4b:d6:
         74:11:35:61:cd:87:82:a8:b3:c6:2a:ad:7b:70:81:ce:aa:65:
         d1:d2:73:6a:31:3c:2c:85:35:d3:ef:6c:f6:a7:ef:4b:8b:95:
         24:2b:2b:22:df:7e:db:94:2c:80:5a:ee:e4:06:3e:6e:82:bd:
         ad:54:2f:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZtQXM7JwdxsL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmMxYTQ5OWYtNGY1Ni00NDgwLWI0YjItMmMzMWE5NmYx
ZWRjMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk
NzgxZmM0ZGItMDY5Ny00Yzc1LWIwNDgtYjQxY2VkOGU2NGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw77UR9IfUZWDA5ktKBtbviDZX8HAXvXZj3VO
QucMkg/KQL4GF57CigSJZHuWjQNyuaEXb+ZjH1ktvkiE9OaCIb6d6NU0h/O0UHF+
AwH4auj3W8hV1o/F7/liaOo9RdtDti6XvR3gq8Ol/o3uNT0a9HF3J97TcrU9XuPa
jHGUVk8PUkWos6g8qJLAEyzF6eT1BQtLnE30BdGHI5R3BIqh5vNNo0cBT/xdh2yA
ODXxayGVftHaqRHHndjZEzcgTW4wfkknhmtUSfOuKbM8/EjoZ/6PzWwlE7EWXyaV
DfXALE75BDdLDlhmYojA5isJE/3sMAw8nzxDNf1VBy5mtsx0awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMngE8KCUJNvUfMZxhh5s9ry/q/2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82YzFh
NDk5Zi00ZjU2LTQ0ODAtYjRiMi0yYzMxYTk2ZjFlZGMvYWM0NGU3NmUtNjg2Ny0z
NDUzLWFiMDItMjk5MWQ1NmI1MTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmMxYTQ5OWYtNGY1Ni00NDgwLWI0
YjItMmMzMWE5NmYxZWRjLzZjMWE0OTlmLTRmNTYtNDQ4MC1iNGIyLTJjMzFhOTZm
MWVkYy5jcmwwHwYDVR0jBBgwFoAURFLsg3sPO164hTgXyc6O84levn0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82YzFhNDk5Zi00ZjU2LTQ0ODAtYjRiMi0yYzMx
YTk2ZjFlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4aUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJKstpmo9OApXqQnanTIRRlKhggVJMY3vS1IMo2noiRGanrGhb9lGTPV
dYxOwyENtrn3x56EzlG7SsVWJ1EG0uNYHhN6cM5buc1Daq074X3m7ZHzU15/4Uu/
E8pQm6/+ihh7kWDz4noj0xBSOMnvSQ8vpXNqWffqUbNcEmgLv7Zqq1KuxiT0vPQP
AktONm5Htm45nMJe0F5Erp2Je10cJUel4o2B9ZN0tzvpY8cssgDmGATr4C82+LRZ
ivRSVo1gAkkOVW9L1nQRNWHNh4Kos8YqrXtwgc6qZdHSc2oxPCyFNdPvbPan70uL
lSQrKyLfftuULIBa7uQGPm6Cva1UL+g=
-----END CERTIFICATE-----
Generated at Fri Oct 10 19:56:00 2025 by rpki-client