Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/930237d2-7c98-3e15-b444-d23772ae4891.roa
File:                     930237d2-7c98-3e15-b444-d23772ae4891.roa (raw, json)
Hash identifier:          VBL2UDfxTXMbfuxifLbgpbB3Jp8S31s6yugXAd5b2vU=
Subject key identifier:   40:FD:50:0A:30:74:71:D8:00:C6:72:FB:7D:C0:30:CE:D5:D2:F1:70
Certificate issuer:       /CN=862a9ade-3d88-4730-8033-1414625d565b
Certificate serial:       010D0C9F4328584B1F0179E314EED9D5F7E88000
Authority key identifier: 2C:E1:46:DA:DF:D5:E4:78:2E:B1:F4:E3:E1:6F:6E:E5:18:EA:C4:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/930237d2-7c98-3e15-b444-d23772ae4891.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     400593
IP address blocks:        23.131.108.0/24 maxlen: 24
                          2602:f75d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:79:e3:14:ee:d9:d5:f7:e8:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862a9ade-3d88-4730-8033-1414625d565b
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=ed91c3a5-1e81-443c-98f1-5bc3be1ca584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:74:e6:74:c5:d3:78:d9:95:97:dc:f1:d9:ef:
                    f5:dc:8d:f3:1c:61:29:0e:18:4b:a9:b8:a5:b4:98:
                    4c:d4:3e:6f:58:36:49:6a:9a:3b:93:f5:3d:9d:65:
                    76:60:7e:b1:2d:dc:55:d8:0d:2b:33:79:4f:b5:49:
                    5e:c8:a1:24:d3:c8:af:ee:e9:92:9e:ac:27:8d:16:
                    12:32:cc:2c:ad:a7:2f:5e:f5:d3:00:cb:81:cb:0a:
                    20:ae:d1:8a:1e:a5:a1:0a:a4:a6:58:c9:17:70:f4:
                    c4:98:05:e2:74:17:42:81:fe:a7:5c:06:d9:ee:ff:
                    1c:22:ca:43:8d:eb:0b:dd:e6:00:9f:a7:e3:a3:b7:
                    91:1a:a9:79:d5:38:ae:d6:20:24:e1:97:81:de:bc:
                    eb:53:c9:aa:55:35:f6:03:b6:40:bd:c8:f7:a8:9c:
                    af:f1:66:da:4f:6b:dc:c7:68:68:66:c9:5f:40:e3:
                    aa:c9:18:5e:4d:2b:22:2f:48:91:14:2e:75:93:8b:
                    84:91:18:8e:c2:e0:e2:5f:54:1c:81:31:fd:2d:6a:
                    93:1b:6f:e6:26:e1:ce:58:65:9e:3d:f9:45:88:93:
                    5d:48:56:ae:a2:17:09:09:4c:d4:28:a4:1b:12:f2:
                    20:d2:53:1f:54:84:b2:5f:23:a3:e6:05:c8:6c:d0:
                    58:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FD:50:0A:30:74:71:D8:00:C6:72:FB:7D:C0:30:CE:D5:D2:F1:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/930237d2-7c98-3e15-b444-d23772ae4891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.crl

            X509v3 Authority Key Identifier:
                keyid:2C:E1:46:DA:DF:D5:E4:78:2E:B1:F4:E3:E1:6F:6E:E5:18:EA:C4:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.108.0/24
                IPv6:
                  2602:f75d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:62:66:59:1c:54:1f:2d:65:11:d6:54:92:a2:f7:9a:73:a3:
         ee:55:53:49:b4:64:f0:6a:3a:43:a6:e4:d2:45:a2:e8:27:a8:
         f5:1d:83:88:70:60:fa:f0:e5:f7:1b:13:a1:35:fc:3f:c6:45:
         c7:85:60:85:2f:2f:11:4e:ff:ab:38:de:12:8c:d0:9b:b8:f3:
         bf:38:dc:99:ca:f1:c1:20:95:97:73:84:1b:91:59:28:5d:49:
         4f:bb:09:a2:d0:04:d4:3a:8b:27:c1:a6:c7:cd:f4:a9:22:46:
         e8:d1:15:c8:1c:a2:2f:0c:72:f1:95:3c:a3:51:d3:5b:02:34:
         5a:49:c1:d9:46:3b:b3:ae:7d:6c:bf:98:ad:7b:ab:5f:03:6c:
         89:b2:d9:8b:8e:a4:42:13:24:64:55:75:ce:8d:09:29:49:d6:
         2e:1b:40:ca:2c:34:c8:27:2b:82:2f:59:06:4c:9b:5e:ad:a5:
         37:e6:37:85:65:12:df:01:88:d2:a4:eb:d0:3c:57:f2:37:ea:
         f4:01:98:37:8a:6c:8d:24:ff:30:81:2c:d3:bf:39:4e:b7:e7:
         0d:18:a4:50:69:4f:85:32:fe:eb:e4:d1:6b:32:14:23:23:8b:
         aa:c8:72:8c:14:74:fd:d5:e4:bd:bb:48:d3:d5:ca:82:fc:94:
         f2:45:2c:30
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsfAXnjFO7Z1ffogAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODYyYTlhZGUtM2Q4OC00NzMwLTgwMzMtMTQxNDYyNWQ1
NjViMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
ZWQ5MWMzYTUtMWU4MS00NDNjLTk4ZjEtNWJjM2JlMWNhNTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXTmdMXTeNmVl9zx2e/13I3zHGEpDhhLqbil
tJhM1D5vWDZJapo7k/U9nWV2YH6xLdxV2A0rM3lPtUleyKEk08iv7umSnqwnjRYS
MswsracvXvXTAMuBywogrtGKHqWhCqSmWMkXcPTEmAXidBdCgf6nXAbZ7v8cIspD
jesL3eYAn6fjo7eRGql51Tiu1iAk4ZeB3rzrU8mqVTX2A7ZAvcj3qJyv8WbaT2vc
x2hoZslfQOOqyRheTSsiL0iRFC51k4uEkRiOwuDiX1QcgTH9LWqTG2/mJuHOWGWe
PflFiJNdSFauohcJCUzUKKQbEvIg0lMfVISyXyOj5gXIbNBYxwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFED9UAowdHHYAMZy+33AMM7V0vFwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NjJh
OWFkZS0zZDg4LTQ3MzAtODAzMy0xNDE0NjI1ZDU2NWIvOTMwMjM3ZDItN2M5OC0z
ZTE1LWI0NDQtZDIzNzcyYWU0ODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODYyYTlhZGUtM2Q4OC00NzMwLTgw
MzMtMTQxNDYyNWQ1NjViLzg2MmE5YWRlLTNkODgtNDczMC04MDMzLTE0MTQ2MjVk
NTY1Yi5jcmwwHwYDVR0jBBgwFoAULOFG2t/V5HgusfTj4W9u5RjqxO4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84NjJhOWFkZS0zZDg4LTQ3MzAtODAzMy0xNDE0
NjI1ZDU2NWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4NsMA4E
AgACMAgDBgQmAvddADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXYmZZHFQfLWUR1lSSoveac6PuVVNJtGTw
ajpDpuTSRaLoJ6j1HYOIcGD68OX3GxOhNfw/xkXHhWCFLy8RTv+rON4SjNCbuPO/
ONyZyvHBIJWXc4QbkVkoXUlPuwmi0ATUOosnwabHzfSpIkbo0RXIHKIvDHLxlTyj
UdNbAjRaScHZRjuzrn1sv5ite6tfA2yJstmLjqRCEyRkVXXOjQkpSdYuG0DKLDTI
JyuCL1kGTJteraU35jeFZRLfAYjSpOvQPFfyN+r0AZg3imyNJP8wgSzTvzlOt+cN
GKRQaU+FMv7r5NFrMhQjI4uqyHKMFHT91eS9u0jT1cqC/JTyRSww
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:09 2025 by rpki-client