Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/b44d0c10-7ac5-35c8-98ba-313c6515fe95.roa
File:                     b44d0c10-7ac5-35c8-98ba-313c6515fe95.roa (raw, json)
Hash identifier:          btBnMV5wtjqAleBGZYf7pDPss5l+gQZVtSU/U4+67TY=
Subject key identifier:   6B:7D:50:7F:CE:9A:3D:F0:38:14:45:BD:F1:47:FF:D0:31:7C:50:49
Certificate issuer:       /CN=862a9ade-3d88-4730-8033-1414625d565b
Certificate serial:       010D0C9F4328584B1F017A0D5C34B3817CA64000
Authority key identifier: 2C:E1:46:DA:DF:D5:E4:78:2E:B1:F4:E3:E1:6F:6E:E5:18:EA:C4:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/b44d0c10-7ac5-35c8-98ba-313c6515fe95.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     401474
IP address blocks:        23.131.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:7a:0d:5c:34:b3:81:7c:a6:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862a9ade-3d88-4730-8033-1414625d565b
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=a5f0cbff-5232-471c-8094-c7f9dbb4fde4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:54:4d:0e:71:c6:0e:5f:74:4b:5d:ab:1c:83:
                    9c:7c:63:df:70:b7:bc:61:e5:ac:31:06:ee:9c:4e:
                    ef:0e:e4:79:b0:6e:b8:9f:a3:49:a6:54:02:3e:1f:
                    13:5b:ce:63:3d:b1:8c:61:25:a2:3e:6d:4f:e3:11:
                    84:f5:27:76:d4:be:30:5b:d4:97:06:0e:6f:86:f0:
                    1d:61:7d:da:c5:58:cb:22:84:2a:2b:46:82:b8:a4:
                    29:da:6b:a3:5e:b9:b8:8a:38:ec:e7:6f:6b:be:eb:
                    80:c2:18:a2:9e:02:1b:40:a3:a6:0c:92:ef:da:ff:
                    b4:71:94:57:5f:38:1e:d5:cc:6c:32:3b:6c:75:fa:
                    34:d0:0e:41:37:e1:56:eb:af:78:f6:69:af:41:7a:
                    23:2c:16:4c:97:66:58:50:6f:b2:a9:fe:2c:52:73:
                    81:5d:1d:4a:7b:98:c2:62:7b:bb:6a:26:b1:7b:7f:
                    97:e1:83:39:8a:3e:db:5b:fb:70:21:9a:5d:78:6e:
                    bc:0a:fa:d3:6d:41:4f:de:6b:83:bb:59:01:6a:52:
                    88:66:f2:80:2c:3a:dd:fd:2a:88:f8:a0:6c:c5:fa:
                    6f:da:60:5f:a1:e9:2f:25:5e:cc:83:70:85:76:ad:
                    87:10:8d:3f:d2:96:08:49:c7:7b:de:46:6f:99:ce:
                    6d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7D:50:7F:CE:9A:3D:F0:38:14:45:BD:F1:47:FF:D0:31:7C:50:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/b44d0c10-7ac5-35c8-98ba-313c6515fe95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.crl

            X509v3 Authority Key Identifier:
                keyid:2C:E1:46:DA:DF:D5:E4:78:2E:B1:F4:E3:E1:6F:6E:E5:18:EA:C4:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:7b:57:c2:99:84:20:19:ff:c5:e7:dc:41:08:13:0a:9d:82:
         c6:50:f3:d2:94:e6:a9:b2:3c:71:e5:65:9c:3e:fd:b5:5c:c8:
         20:43:a4:8c:17:d2:a0:4f:99:70:1c:0e:59:20:2f:6a:05:38:
         7b:bc:c4:80:68:15:74:e2:3b:48:98:bf:31:df:aa:f5:c8:fb:
         61:0b:75:9e:ae:22:97:3d:96:49:0d:6c:64:29:79:ac:ac:b8:
         ef:4b:fb:e9:e4:5e:1b:ca:92:6f:85:57:93:56:5f:b3:f3:d2:
         24:9c:72:f1:f8:03:d6:58:6d:2a:5c:81:c4:09:0b:4b:39:b9:
         5d:f6:ce:7d:ad:81:3e:ee:3c:e0:3e:9b:01:75:f1:09:95:5c:
         05:d0:f4:79:44:84:36:28:94:29:17:5e:10:98:72:6d:ac:c8:
         83:e3:76:b4:63:0d:75:27:a8:86:b1:03:fc:86:67:44:f8:c9:
         15:ec:c5:4b:6c:08:44:9b:14:ae:ee:59:53:38:74:ed:01:16:
         13:dc:63:4c:61:dc:17:b4:11:a3:90:a6:ca:bb:6b:4c:2e:b3:
         76:a1:7b:a4:af:2e:04:11:6d:b0:19:11:1a:61:a6:16:fb:7b:
         81:70:9c:d6:ba:02:1d:23:2e:2d:ec:0b:d0:55:dd:fb:18:1b:
         08:26:ae:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAXoNXDSzgXymQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODYyYTlhZGUtM2Q4OC00NzMwLTgwMzMtMTQxNDYyNWQ1
NjViMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
YTVmMGNiZmYtNTIzMi00NzFjLTgwOTQtYzdmOWRiYjRmZGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglRNDnHGDl90S12rHIOcfGPfcLe8YeWsMQbu
nE7vDuR5sG64n6NJplQCPh8TW85jPbGMYSWiPm1P4xGE9Sd21L4wW9SXBg5vhvAd
YX3axVjLIoQqK0aCuKQp2mujXrm4ijjs529rvuuAwhiingIbQKOmDJLv2v+0cZRX
Xzge1cxsMjtsdfo00A5BN+FW66949mmvQXojLBZMl2ZYUG+yqf4sUnOBXR1Ke5jC
Ynu7aiaxe3+X4YM5ij7bW/twIZpdeG68CvrTbUFP3muDu1kBalKIZvKALDrd/SqI
+KBsxfpv2mBfoekvJV7Mg3CFdq2HEI0/0pYIScd73kZvmc5tEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGt9UH/Omj3wOBRFvfFH/9AxfFBJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NjJh
OWFkZS0zZDg4LTQ3MzAtODAzMy0xNDE0NjI1ZDU2NWIvYjQ0ZDBjMTAtN2FjNS0z
NWM4LTk4YmEtMzEzYzY1MTVmZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODYyYTlhZGUtM2Q4OC00NzMwLTgw
MzMtMTQxNDYyNWQ1NjViLzg2MmE5YWRlLTNkODgtNDczMC04MDMzLTE0MTQ2MjVk
NTY1Yi5jcmwwHwYDVR0jBBgwFoAULOFG2t/V5HgusfTj4W9u5RjqxO4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84NjJhOWFkZS0zZDg4LTQ3MzAtODAzMy0xNDE0
NjI1ZDU2NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4NsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABV7V8KZhCAZ/8Xn3EEIEwqdgsZQ89KU5qmyPHHlZZw+/bVcyCBDpIwX
0qBPmXAcDlkgL2oFOHu8xIBoFXTiO0iYvzHfqvXI+2ELdZ6uIpc9lkkNbGQpeays
uO9L++nkXhvKkm+FV5NWX7Pz0iSccvH4A9ZYbSpcgcQJC0s5uV32zn2tgT7uPOA+
mwF18QmVXAXQ9HlEhDYolCkXXhCYcm2syIPjdrRjDXUnqIaxA/yGZ0T4yRXsxUts
CESbFK7uWVM4dO0BFhPcY0xh3Be0EaOQpsq7a0wus3ahe6SvLgQRbbAZERphphb7
e4FwnNa6Ah0jLi3sC9BV3fsYGwgmrjU=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:10:00 2025 by rpki-client