Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c41bed8-49c2-3060-b919-441343a23db0.roa
File:                     2c41bed8-49c2-3060-b919-441343a23db0.roa (raw, json)
Hash identifier:          CYZeaC/FjfXWk9dprIo9eE81CRXsfzPhARKte41EpK8=
Subject key identifier:   73:AA:C9:B8:53:C0:09:07:F3:E5:C8:2C:BF:78:9C:05:13:3F:76:C5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7D160FA5C43661CB4E4A2EA4
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c41bed8-49c2-3060-b919-441343a23db0.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     20940
IP address blocks:        23.217.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:16:0f:a5:c4:36:61:cb:4e:4a:2e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=7223eea8-080e-43ca-b824-d7be21fd7925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:63:33:fa:5f:2c:84:12:64:c9:db:91:ea:6f:
                    c8:76:25:98:b3:c6:f1:29:4d:7c:20:ff:54:c4:18:
                    cf:34:5d:78:c0:0d:5f:53:1c:a9:e8:8f:d6:f6:46:
                    31:b1:cc:44:21:0d:11:04:72:bf:fd:99:8f:29:05:
                    71:ff:1c:c1:08:37:1b:b3:50:35:ab:ef:e3:f5:d1:
                    a6:a0:d3:6d:e8:64:fa:e9:27:da:5a:cb:3d:e2:e3:
                    77:e6:fc:0e:4b:d9:7c:3c:a6:e5:e0:3f:b5:cf:71:
                    30:68:1e:e2:ba:7b:09:93:46:1b:de:19:3d:ef:1a:
                    57:86:98:df:df:14:9a:d8:01:91:22:75:37:55:94:
                    51:fc:5e:41:77:33:eb:61:16:aa:5d:b1:a0:01:00:
                    f7:92:04:e4:bb:47:18:95:76:a0:f5:e4:7d:99:ba:
                    a7:22:4c:0b:f5:f6:26:d5:25:24:b7:d8:a4:2b:27:
                    be:f3:06:28:43:51:71:0e:41:db:64:fc:70:fd:65:
                    a9:37:2c:e3:c8:6a:cb:07:35:46:86:84:22:70:2b:
                    54:63:8a:2f:65:88:cf:5e:8f:88:b0:d8:7a:48:ed:
                    4d:25:40:d5:aa:17:4b:21:81:79:47:d5:65:f4:49:
                    71:b6:f3:ac:1f:56:49:ae:25:68:c1:cf:22:6e:bd:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AA:C9:B8:53:C0:09:07:F3:E5:C8:2C:BF:78:9C:05:13:3F:76:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c41bed8-49c2-3060-b919-441343a23db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.217.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:30:dc:c6:b1:e4:f0:42:ad:f0:e8:d0:1c:ac:bf:e4:56:43:
         61:b3:a9:74:e9:e8:26:48:05:4f:81:5f:28:fa:00:2c:ac:14:
         e9:d5:9a:7e:1a:a2:25:b1:f1:22:46:21:04:5d:57:57:98:68:
         a5:a3:2c:d6:fa:e4:3d:74:d5:41:d8:bb:b4:45:29:ad:03:b5:
         95:bb:22:6f:a7:38:d3:70:cb:07:8a:a7:2a:f5:7e:ee:10:ee:
         9b:0e:73:2f:4a:bf:9c:89:dd:7e:d9:8a:39:1d:c6:68:6f:2e:
         fc:a5:aa:81:0e:36:e0:8e:23:58:d5:7c:bc:bf:cd:bc:ce:98:
         13:c3:07:06:01:76:f0:d2:e5:91:a2:55:29:4e:f9:4e:29:6f:
         f8:a6:73:5d:fb:55:d8:8e:bc:e1:92:22:ea:97:df:8b:f3:69:
         63:51:c3:99:11:fc:49:d5:60:7e:86:43:88:15:50:ff:14:2a:
         0f:43:44:8c:ef:4b:f4:4a:d7:ca:c3:dd:ad:ca:c0:2e:8b:5e:
         99:c0:af:c0:68:a0:33:c3:3e:ab:2d:d2:bf:50:30:f4:2e:06:
         60:75:be:68:0c:16:7b:71:f7:23:3f:3d:18:69:a8:77:62:02:
         03:35:c8:66:50:1c:ec:d3:52:94:3e:29:36:bc:1d:1e:a2:52:
         c2:19:58:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9Fg+lxDZhy05KLqQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk
NzIyM2VlYTgtMDgwZS00M2NhLWI4MjQtZDdiZTIxZmQ3OTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mMz+l8shBJkyduR6m/IdiWYs8bxKU18IP9U
xBjPNF14wA1fUxyp6I/W9kYxscxEIQ0RBHK//ZmPKQVx/xzBCDcbs1A1q+/j9dGm
oNNt6GT66SfaWss94uN35vwOS9l8PKbl4D+1z3EwaB7iunsJk0Yb3hk97xpXhpjf
3xSa2AGRInU3VZRR/F5BdzPrYRaqXbGgAQD3kgTku0cYlXag9eR9mbqnIkwL9fYm
1SUkt9ikKye+8wYoQ1FxDkHbZPxw/WWpNyzjyGrLBzVGhoQicCtUY4ovZYjPXo+I
sNh6SO1NJUDVqhdLIYF5R9Vl9ElxtvOsH1ZJriVowc8ibr1dAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOqybhTwAkH8+XILL94nAUTP3bFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmM0MWJlZDgtNDljMi0z
MDYwLWI5MTktNDQxMzQzYTIzZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9k3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACsw3Max5PBCrfDo0Bysv+RWQ2GzqXTp6CZIBU+BXyj6ACysFOnVmn4a
oiWx8SJGIQRdV1eYaKWjLNb65D101UHYu7RFKa0DtZW7Im+nONNwyweKpyr1fu4Q
7psOcy9Kv5yJ3X7ZijkdxmhvLvylqoEONuCOI1jVfLy/zbzOmBPDBwYBdvDS5ZGi
VSlO+U4pb/imc137VdiOvOGSIuqX34vzaWNRw5kR/EnVYH6GQ4gVUP8UKg9DRIzv
S/RK18rD3a3KwC6LXpnAr8BooDPDPqst0r9QMPQuBmB1vmgMFntx9yM/PRhpqHdi
AgM1yGZQHOzTUpQ+KTa8HR6iUsIZWMg=
-----END CERTIFICATE-----
Generated at Wed Jul 23 01:28:32 2025 by rpki-client