Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/33e2ed51-cfb3-39be-ac3a-2e5effcd8e96.roa
File:                     33e2ed51-cfb3-39be-ac3a-2e5effcd8e96.roa (raw, json)
Hash identifier:          aGjPyKz4mkmCAYTDGZHY5VbXA2HUGHwrwKL2k0CV/C0=
Subject key identifier:   97:DF:BF:9F:AB:87:D2:72:20:A0:58:52:D3:9C:25:92:40:94:DF:CA
Certificate issuer:       /CN=7660ad47-0d47-4fc7-b1cc-1d954b61bac2
Certificate serial:       010D0C9F4328584B636749F0BE297014921ED600
Authority key identifier: 15:5D:E3:65:EC:9A:09:84:15:D2:3B:71:3E:E9:1A:F8:E3:8C:5D:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/33e2ed51-cfb3-39be-ac3a-2e5effcd8e96.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     10981
IP address blocks:        23.133.188.0/24 maxlen: 24
                          2602:f70d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:49:f0:be:29:70:14:92:1e:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7660ad47-0d47-4fc7-b1cc-1d954b61bac2
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=efd9a1a5-f4ae-4377-99cf-31ab6fcf5414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:d6:5f:2c:a7:91:fe:25:5c:45:07:88:87:
                    5b:e1:58:1f:79:47:bf:2c:72:a5:b8:6d:15:61:3a:
                    d1:dc:82:5f:92:96:f5:6b:d9:92:89:2a:d8:e8:8f:
                    da:6f:6c:9d:b2:ca:68:da:0a:db:63:cc:5b:e1:68:
                    c2:71:e0:80:02:0f:b8:77:32:e8:3e:dc:4e:f6:0b:
                    5e:65:af:5d:4a:fb:f5:b9:ea:0c:1c:36:01:b6:c6:
                    9b:53:d3:9c:b8:13:0a:2f:7d:57:15:3e:f3:5a:64:
                    7a:e2:e3:ce:bf:4c:15:3a:5a:34:34:ca:b7:47:7b:
                    41:27:2e:36:ed:35:99:99:a1:f4:c2:4c:e3:6f:54:
                    1e:7e:ff:45:05:65:a2:5d:dd:fc:a9:0f:2a:7c:75:
                    08:38:1c:19:f5:11:59:76:d4:80:53:18:3b:23:45:
                    03:e2:5b:73:75:e0:23:d0:2e:d5:a6:17:be:14:9c:
                    e3:c0:e6:22:6f:ba:85:e9:ce:dd:92:fc:a5:47:ca:
                    8f:60:80:c7:5e:ab:b1:8f:13:90:d2:74:74:68:75:
                    db:07:9f:d6:db:5a:b5:c3:91:c9:e2:9b:60:f4:76:
                    40:4c:a7:4a:d1:67:17:75:cd:29:73:56:33:55:0d:
                    1a:c7:fa:3a:f6:ac:a9:b8:f3:64:ef:ea:aa:ea:6e:
                    52:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DF:BF:9F:AB:87:D2:72:20:A0:58:52:D3:9C:25:92:40:94:DF:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/33e2ed51-cfb3-39be-ac3a-2e5effcd8e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.crl

            X509v3 Authority Key Identifier:
                keyid:15:5D:E3:65:EC:9A:09:84:15:D2:3B:71:3E:E9:1A:F8:E3:8C:5D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.188.0/24
                IPv6:
                  2602:f70d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:35:f2:3f:6b:e1:85:e0:88:85:f0:d7:67:ed:06:08:b0:c8:
         0c:7d:9c:c3:ef:ab:c8:18:f5:f9:d2:97:04:06:e9:66:61:d6:
         a6:ed:b8:c4:29:0e:c3:f7:f9:e2:21:2b:30:f8:be:66:99:52:
         af:83:9c:a1:11:e5:08:a2:19:2f:1b:85:1b:5e:72:03:d9:88:
         1b:71:8d:0c:13:4b:f3:5f:e4:85:c1:07:4c:e6:58:dc:a4:cf:
         bd:25:02:87:e4:0b:fb:00:07:4e:66:dc:e4:4d:04:e9:49:18:
         a7:0c:33:21:9d:23:f9:2a:98:90:43:e6:10:a8:66:74:95:66:
         59:b5:33:91:82:9f:03:3c:db:38:9b:63:9a:a9:40:4a:0f:e0:
         cd:d0:df:3b:c9:86:c9:0d:28:5e:05:92:61:03:25:55:69:e9:
         0c:3d:10:d5:03:1a:47:ab:36:e3:3a:5f:04:7f:14:b2:3d:1f:
         8d:41:1f:77:13:ad:0c:7d:f3:b3:83:11:82:c6:db:ce:5c:bd:
         7c:fe:1c:d9:82:de:8b:b6:52:07:03:f6:46:e1:e5:5c:67:ee:
         d2:36:1a:70:97:b7:b4:fb:36:79:64:bd:25:b6:05:cf:36:86:
         02:29:09:bf:11:a1:7a:b7:a0:30:9f:66:45:ea:50:22:29:2f:
         f2:7b:ce:77
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtjZ0nwvilwFJIe1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY2MGFkNDctMGQ0Ny00ZmM3LWIxY2MtMWQ5NTRiNjFi
YWMyMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk
ZWZkOWExYTUtZjRhZS00Mzc3LTk5Y2YtMzFhYjZmY2Y1NDE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUXWXyynkf4lXEUHiIdb4VgfeUe/LHKluG0V
YTrR3IJfkpb1a9mSiSrY6I/ab2ydsspo2grbY8xb4WjCceCAAg+4dzLoPtxO9gte
Za9dSvv1ueoMHDYBtsabU9OcuBMKL31XFT7zWmR64uPOv0wVOlo0NMq3R3tBJy42
7TWZmaH0wkzjb1Qefv9FBWWiXd38qQ8qfHUIOBwZ9RFZdtSAUxg7I0UD4ltzdeAj
0C7Vphe+FJzjwOYib7qF6c7dkvylR8qPYIDHXquxjxOQ0nR0aHXbB5/W21q1w5HJ
4ptg9HZATKdK0WcXdc0pc1YzVQ0ax/o69qypuPNk7+qq6m5SVwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFJffv5+rh9JyIKBYUtOcJZJAlN/KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NjYw
YWQ0Ny0wZDQ3LTRmYzctYjFjYy0xZDk1NGI2MWJhYzIvMzNlMmVkNTEtY2ZiMy0z
OWJlLWFjM2EtMmU1ZWZmY2Q4ZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzY2MGFkNDctMGQ0Ny00ZmM3LWIx
Y2MtMWQ5NTRiNjFiYWMyLzc2NjBhZDQ3LTBkNDctNGZjNy1iMWNjLTFkOTU0YjYx
YmFjMi5jcmwwHwYDVR0jBBgwFoAUFV3jZeyaCYQV0jtxPuka+OOMXSAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83NjYwYWQ0Ny0wZDQ3LTRmYzctYjFjYy0xZDk1
NGI2MWJhYzIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4W8MA4E
AgACMAgDBgQmAvcNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/NfI/a+GF4IiF8Ndn7QYIsMgMfZzD76vI
GPX50pcEBulmYdam7bjEKQ7D9/niISsw+L5mmVKvg5yhEeUIohkvG4UbXnID2Ygb
cY0ME0vzX+SFwQdM5ljcpM+9JQKH5Av7AAdOZtzkTQTpSRinDDMhnSP5KpiQQ+YQ
qGZ0lWZZtTORgp8DPNs4m2OaqUBKD+DN0N87yYbJDSheBZJhAyVVaekMPRDVAxpH
qzbjOl8EfxSyPR+NQR93E60MffOzgxGCxtvOXL18/hzZgt6LtlIHA/ZG4eVcZ+7S
Nhpwl7e0+zZ5ZL0ltgXPNoYCKQm/EaF6t6Awn2ZF6lAiKS/ye853
-----END CERTIFICATE-----
Generated at Fri Oct 10 19:57:36 2025 by rpki-client