Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47c8f7ce-cf7f-32e0-80f9-525d54dac7c0.roa
File:                     47c8f7ce-cf7f-32e0-80f9-525d54dac7c0.roa (raw, json)
Hash identifier:          OmHom3tUz4N0+lBe6if8BS+k897LqN3kwxI753qmfuQ=
Subject key identifier:   DE:D1:0E:23:17:22:E9:A2:92:8A:DB:80:46:22:02:FE:AF:B1:D4:D1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6290A3247F136FD2DDE742C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47c8f7ce-cf7f-32e0-80f9-525d54dac7c0.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        23.193.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:a3:24:7f:13:6f:d2:dd:e7:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=99ee333e-ed2b-4641-8e3c-750322eae02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6d:e1:3e:ea:dd:57:80:73:c5:87:7e:58:e7:
                    ed:68:b5:1a:fb:d0:1c:86:48:c9:7a:4a:de:82:d2:
                    26:93:27:b4:44:71:d3:5c:ce:56:a4:ce:b2:5a:5a:
                    d3:48:2c:d8:f2:0f:f2:71:e4:06:82:76:b0:5e:83:
                    e0:3e:c0:51:f2:0d:27:c4:92:94:7e:bf:0c:ad:a2:
                    f4:17:c1:4c:c3:7f:35:82:fb:83:42:c2:d6:a2:36:
                    df:a5:e8:42:e3:bf:d2:e1:7a:a7:95:7a:fe:05:f0:
                    f5:a6:13:77:6e:4d:96:a3:f5:61:d8:7f:ed:a7:39:
                    07:06:1d:4f:d5:c4:ce:88:ab:49:fa:d5:53:55:b5:
                    94:fc:de:d4:11:8e:c9:b1:7b:c4:5a:91:d5:ff:f5:
                    ec:90:3b:65:27:b3:ed:b3:8b:18:2a:61:e3:c3:62:
                    6d:ca:f5:dd:58:00:15:ca:33:b4:0e:55:c2:b0:06:
                    2f:16:95:b5:0a:d1:08:20:39:96:5c:06:1c:ab:74:
                    5b:28:2f:db:ff:e9:48:d9:aa:11:8c:17:36:92:0b:
                    ef:09:1c:62:ad:9f:b8:a0:ec:b4:68:a9:c9:eb:79:
                    f0:3a:b3:72:29:93:86:b9:26:6b:d3:34:26:41:27:
                    52:2f:15:aa:02:a7:72:c9:20:0f:9a:52:34:01:03:
                    e7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D1:0E:23:17:22:E9:A2:92:8A:DB:80:46:22:02:FE:AF:B1:D4:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47c8f7ce-cf7f-32e0-80f9-525d54dac7c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.193.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:53:00:f1:98:c9:8c:1f:d8:46:62:4e:76:9a:d1:54:10:6f:
         d5:fd:19:97:6a:06:c8:58:3b:b9:e0:7a:ab:6e:12:99:c3:78:
         2d:c1:02:51:66:c0:6c:eb:68:cc:0b:c6:06:1d:72:b8:8f:e1:
         9f:6a:29:51:87:27:bd:a7:be:1f:05:f7:ba:98:d2:e7:d2:f4:
         e1:8a:ec:77:8a:bf:0e:f6:a3:51:f9:ba:2d:8c:c2:10:c9:4b:
         4a:81:66:b4:88:55:51:97:b9:ec:30:fb:21:b0:f1:ca:aa:6a:
         a1:58:b2:2e:b9:b8:64:f5:ce:90:a7:19:e3:5e:11:99:51:79:
         2a:fa:44:75:ba:a1:5d:01:a5:82:dc:08:5e:6d:b4:ec:01:ba:
         e9:fd:77:87:a9:fe:cd:37:7e:3d:79:96:3e:9d:2a:bb:09:72:
         6f:b6:94:fc:e3:da:27:88:47:96:5c:2e:25:e8:87:4f:f5:b9:
         10:86:c8:f6:c2:dc:33:90:da:19:a7:6e:e1:4d:a9:09:bc:8a:
         67:28:72:f6:bb:a4:e8:c3:cd:3c:97:20:89:b2:5d:e8:fe:79:
         8b:f0:96:ff:fe:50:8c:c3:98:f0:6d:d5:03:38:e0:3c:7e:75:
         61:6f:47:54:f2:8e:a7:2b:1b:1d:ac:be:ed:aa:d4:20:3f:10:
         cc:8a:c3:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikKMkfxNv0t3nQsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
OTllZTMzM2UtZWQyYi00NjQxLThlM2MtNzUwMzIyZWFlMDJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim3hPurdV4BzxYd+WOftaLUa+9AchkjJekre
gtImkye0RHHTXM5WpM6yWlrTSCzY8g/yceQGgnawXoPgPsBR8g0nxJKUfr8MraL0
F8FMw381gvuDQsLWojbfpehC47/S4XqnlXr+BfD1phN3bk2Wo/Vh2H/tpzkHBh1P
1cTOiKtJ+tVTVbWU/N7UEY7JsXvEWpHV//XskDtlJ7Pts4sYKmHjw2JtyvXdWAAV
yjO0DlXCsAYvFpW1CtEIIDmWXAYcq3RbKC/b/+lI2aoRjBc2kgvvCRxirZ+4oOy0
aKnJ63nwOrNyKZOGuSZr0zQmQSdSLxWqAqdyySAPmlI0AQPnDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN7RDiMXIumikorbgEYiAv6vsdTRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDdjOGY3Y2UtY2Y3Zi0z
MmUwLTgwZjktNTI1ZDU0ZGFjN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8HBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAARTAPGYyYwf2EZiTnaa0VQQb9X9GZdqBshYO7ngeqtuEpnDeC3BAlFm
wGzraMwLxgYdcriP4Z9qKVGHJ72nvh8F97qY0ufS9OGK7HeKvw72o1H5ui2MwhDJ
S0qBZrSIVVGXueww+yGw8cqqaqFYsi65uGT1zpCnGeNeEZlReSr6RHW6oV0BpYLc
CF5ttOwBuun9d4ep/s03fj15lj6dKrsJcm+2lPzj2ieIR5ZcLiXoh0/1uRCGyPbC
3DOQ2hmnbuFNqQm8imcocva7pOjDzTyXIImyXej+eYvwlv/+UIzDmPBt1QM44Dx+
dWFvR1TyjqcrGx2svu2q1CA/EMyKw7k=
-----END CERTIFICATE-----
Generated at Wed Jul 23 01:22:47 2025 by rpki-client