Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b73525c-9423-3893-bf4c-78f46756d60e.roa
File:                     5b73525c-9423-3893-bf4c-78f46756d60e.roa (raw, json)
Hash identifier:          zc7koVf/MB0Z6s9kdga42fAyouiOYGmW7F66sohlk7E=
Subject key identifier:   DA:B3:E1:E8:83:67:A9:2A:F7:3B:C7:FC:25:16:20:84:AA:4F:08:C7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A655B360821AB995A75B82F60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b73525c-9423-3893-bf4c-78f46756d60e.roa
Signing time:             Thu 03 Jul 2025 13:01:04 +0000
ROA not before:           Thu 03 Jul 2025 13:01:04 +0000
ROA not after:            Wed 01 Oct 2025 13:01:04 +0000
asID:                     16625
IP address blocks:        23.199.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:5b:36:08:21:ab:99:5a:75:b8:2f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  3 13:01:04 2025 GMT
            Not After : Oct  1 13:01:04 2025 GMT
        Subject: CN=bbcf1203-1798-444d-ad84-c9a6c13dac8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:2c:dd:53:c3:dc:f2:fb:4f:23:b8:e9:15:
                    38:3f:ec:d5:d6:0e:df:32:76:1a:58:71:a6:84:5e:
                    51:be:f1:c4:2b:f0:52:c4:26:06:22:25:ae:43:60:
                    a6:8c:48:d7:19:94:e6:4a:f9:31:80:2e:ea:e7:13:
                    33:4b:b3:aa:54:54:2f:67:e2:47:a6:7c:95:7d:97:
                    26:40:3d:20:c7:c0:9f:47:5c:42:82:a0:48:7c:41:
                    83:c7:9e:bf:fb:02:c8:a9:d8:26:5d:2b:7d:90:d8:
                    f2:17:fb:30:ed:2a:32:f6:19:e6:ab:0b:e2:a8:50:
                    c6:c2:62:74:89:fc:a5:14:7a:32:ed:5f:ca:5e:15:
                    bf:6c:e4:74:98:7b:31:f2:36:06:f7:82:f8:32:74:
                    13:a8:e8:07:4a:fa:ba:1c:ce:fc:49:1a:c0:d9:bc:
                    24:af:7d:f2:a0:49:9d:5b:c1:97:4c:f8:f3:07:91:
                    a9:7c:fa:d8:23:af:f7:a3:9c:eb:85:79:94:83:8f:
                    50:e2:b1:e6:07:bb:4c:ef:ae:ce:6f:e9:12:e5:d9:
                    a1:6e:55:6d:22:81:d3:77:ce:83:75:25:3f:f1:38:
                    b5:7f:78:a8:57:ea:a3:d6:b3:89:45:72:c8:c0:61:
                    b1:85:3d:d5:55:8e:82:e5:2c:27:21:df:b6:d4:68:
                    06:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B3:E1:E8:83:67:A9:2A:F7:3B:C7:FC:25:16:20:84:AA:4F:08:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b73525c-9423-3893-bf4c-78f46756d60e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.199.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:9e:01:1b:8a:e8:6b:91:72:7e:51:17:2e:95:86:9e:0c:10:
         c3:0d:e6:96:74:8f:85:ff:67:d9:ca:79:54:e6:b3:97:9a:a7:
         46:e2:7b:54:19:21:31:72:d5:a2:3e:c3:d5:87:49:7f:89:97:
         ef:80:bb:7b:07:39:ff:1f:eb:d9:eb:d1:ff:3b:a8:95:ba:55:
         88:6e:79:10:0a:13:37:07:06:f1:d1:93:8d:89:41:a4:42:14:
         4d:83:45:8a:4d:6b:12:bb:cb:be:02:95:a2:7b:b6:3a:30:98:
         dd:6f:29:b0:14:32:f0:6d:24:06:46:f1:31:2e:92:5a:cc:58:
         9f:e1:3a:9c:95:f6:80:2e:b6:ff:16:53:c1:a0:3e:4a:d0:68:
         cf:60:7b:6c:cf:ae:35:a9:c4:b4:f5:a6:45:0f:81:90:9a:c4:
         a1:9a:a9:b2:4b:d9:b3:a9:36:56:e6:35:c7:f0:47:12:a7:1a:
         08:0a:20:43:f6:27:1b:07:1e:57:53:a1:f6:7a:a1:2d:1a:a0:
         0e:7f:55:fc:b2:b7:a1:35:88:78:de:69:36:06:08:2f:f5:20:
         e3:66:2e:07:8f:11:d9:72:1e:8c:82:ff:93:f6:df:ff:d8:d8:
         d2:ff:37:da:b3:88:f9:3f:e5:ef:c2:28:6a:d7:68:02:bc:db:
         ef:45:d4:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEplWzYIIauZWnW4L2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcwMzEzMDEwNFoXDTI1MTAwMTEzMDEwNFowLzEtMCsGA1UEAxMk
YmJjZjEyMDMtMTc5OC00NDRkLWFkODQtYzlhNmMxM2RhYzhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGIs3VPD3PL7TyO46RU4P+zV1g7fMnYaWHGm
hF5RvvHEK/BSxCYGIiWuQ2CmjEjXGZTmSvkxgC7q5xMzS7OqVFQvZ+JHpnyVfZcm
QD0gx8CfR1xCgqBIfEGDx56/+wLIqdgmXSt9kNjyF/sw7Soy9hnmqwviqFDGwmJ0
ifylFHoy7V/KXhW/bOR0mHsx8jYG94L4MnQTqOgHSvq6HM78SRrA2bwkr33yoEmd
W8GXTPjzB5GpfPrYI6/3o5zrhXmUg49Q4rHmB7tM767Ob+kS5dmhblVtIoHTd86D
dSU/8Ti1f3ioV+qj1rOJRXLIwGGxhT3VVY6C5SwnId+21GgGvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNqz4eiDZ6kq9zvH/CUWIISqTwjHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWI3MzUyNWMtOTQyMy0z
ODkzLWJmNGMtNzhmNDY3NTZkNjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8cMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIOeARuK6GuRcn5RFy6Vhp4MEMMN5pZ0j4X/Z9nKeVTms5eap0bie1QZ
ITFy1aI+w9WHSX+Jl++Au3sHOf8f69nr0f87qJW6VYhueRAKEzcHBvHRk42JQaRC
FE2DRYpNaxK7y74ClaJ7tjowmN1vKbAUMvBtJAZG8TEuklrMWJ/hOpyV9oAutv8W
U8GgPkrQaM9ge2zPrjWpxLT1pkUPgZCaxKGaqbJL2bOpNlbmNcfwRxKnGggKIEP2
JxsHHldTofZ6oS0aoA5/Vfyyt6E1iHjeaTYGCC/1IONmLgePEdlyHoyC/5P23//Y
2NL/N9qziPk/5e/CKGrXaAK82+9F1Ac=
-----END CERTIFICATE-----
Generated at Wed Jul 23 01:30:16 2025 by rpki-client