Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e81600dd-2704-3d89-8317-ee83e7004455.roa
File:                     e81600dd-2704-3d89-8317-ee83e7004455.roa (raw, json)
Hash identifier:          9uBKfEMAlTl0j/rML10cps5NXhRpJULtxyXLUy812Ks=
Subject key identifier:   70:8E:9B:A0:39:20:17:B9:CA:EE:20:94:E9:06:47:02:75:9D:A9:0B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7D160EBDC52B3EF81DAA2A40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e81600dd-2704-3d89-8317-ee83e7004455.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     20940
IP address blocks:        23.216.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:16:0e:bd:c5:2b:3e:f8:1d:aa:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=49dd0df5-f770-4de3-94e6-86f14605f428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:13:fb:2e:df:15:d9:61:b0:b8:7b:6f:97:
                    ef:f5:78:95:52:05:59:bd:00:dd:7c:0d:33:0b:7e:
                    c9:7f:d5:81:42:37:6f:87:25:e7:35:2f:b1:4b:60:
                    24:5b:83:32:dd:89:8d:bb:7e:b2:ab:9e:0f:86:95:
                    34:a8:ad:09:db:6b:55:59:72:29:79:98:86:f1:71:
                    68:3b:f1:b7:57:2a:4c:96:c5:92:26:13:77:72:96:
                    b1:51:06:40:77:a0:ec:3e:e1:92:19:7c:e2:cb:5b:
                    db:63:aa:5e:c0:db:8f:0c:61:75:22:47:2a:bb:d3:
                    3c:7a:bb:b4:c0:63:9d:1a:f5:b9:18:55:08:97:cf:
                    1e:82:8c:6a:da:5d:75:91:4e:2d:86:7c:ca:4c:56:
                    fd:5d:7d:81:dc:c6:5e:b6:f2:02:05:4b:ac:77:93:
                    da:f3:8d:68:94:ec:1d:8d:da:6a:b2:16:e1:a6:c7:
                    93:62:32:a2:6b:cd:65:05:41:c6:f5:b4:bb:9c:8b:
                    57:79:95:d2:9d:06:10:ab:b9:b3:3d:51:30:e0:f7:
                    f0:5a:41:53:25:2e:fd:e5:d7:3e:a6:e7:2c:2e:46:
                    88:7c:bd:52:a8:08:6c:7b:ef:93:07:3b:22:7d:fd:
                    8d:d4:b0:8c:a8:cd:24:88:af:b2:71:0a:88:32:e6:
                    95:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8E:9B:A0:39:20:17:B9:CA:EE:20:94:E9:06:47:02:75:9D:A9:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e81600dd-2704-3d89-8317-ee83e7004455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.216.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:eb:da:f1:3c:47:07:ff:c3:20:b2:87:4a:46:73:f1:ff:09:
         67:bc:a5:c5:62:61:e9:43:cd:f1:1c:8e:cc:c7:1a:c7:15:1e:
         de:81:a7:44:22:62:b4:66:b8:59:72:c7:92:96:5e:df:08:a5:
         b3:91:c3:7a:f4:36:db:93:60:af:bb:21:b4:5a:b0:58:f8:62:
         41:2a:c3:3d:5d:5b:75:8f:13:44:3a:07:49:a3:d4:7e:f9:91:
         24:de:ae:dc:46:24:87:37:6a:eb:c7:90:f7:9a:70:44:92:27:
         14:5e:c6:c8:e6:d4:30:21:ff:03:b0:14:4e:3d:56:3d:1a:24:
         2e:da:2e:3e:ef:bd:ca:04:37:45:86:2c:33:cd:85:74:74:d7:
         c9:85:a6:ca:f5:e3:3c:33:31:7e:b4:32:25:02:41:4d:25:ec:
         11:22:c1:0c:98:ab:15:3e:0e:0a:4f:5e:6e:d4:87:43:41:90:
         aa:ac:bc:cd:5a:08:71:89:fb:f4:c1:eb:14:45:73:5e:bf:65:
         30:5e:2a:c3:f7:da:5f:44:d5:07:de:7b:05:da:2f:22:50:ed:
         3b:5b:b7:3b:8f:13:98:a8:03:c5:63:06:8d:a8:08:3c:e1:bc:
         77:df:fd:af:8e:26:35:ab:da:59:2f:b7:d5:96:c4:f0:62:c0:
         10:eb:b5:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9Fg69xSs++B2qKkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk
NDlkZDBkZjUtZjc3MC00ZGUzLTk0ZTYtODZmMTQ2MDVmNDI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNET+y7fFdlhsLh7b5fv9XiVUgVZvQDdfA0z
C37Jf9WBQjdvhyXnNS+xS2AkW4My3YmNu36yq54PhpU0qK0J22tVWXIpeZiG8XFo
O/G3VypMlsWSJhN3cpaxUQZAd6DsPuGSGXziy1vbY6pewNuPDGF1Ikcqu9M8eru0
wGOdGvW5GFUIl88egoxq2l11kU4thnzKTFb9XX2B3MZetvICBUusd5Pa841olOwd
jdpqshbhpseTYjKia81lBUHG9bS7nItXeZXSnQYQq7mzPVEw4PfwWkFTJS795dc+
pucsLkaIfL1SqAhse++TBzsiff2N1LCMqM0kiK+ycQqIMuaV3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHCOm6A5IBe5yu4glOkGRwJ1nakLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTgxNjAwZGQtMjcwNC0z
ZDg5LTgzMTctZWU4M2U3MDA0NDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9hCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHr2vE8Rwf/wyCyh0pGc/H/CWe8pcViYelDzfEcjszHGscVHt6Bp0Qi
YrRmuFlyx5KWXt8IpbORw3r0NtuTYK+7IbRasFj4YkEqwz1dW3WPE0Q6B0mj1H75
kSTertxGJIc3auvHkPeacESSJxRexsjm1DAh/wOwFE49Vj0aJC7aLj7vvcoEN0WG
LDPNhXR018mFpsr14zwzMX60MiUCQU0l7BEiwQyYqxU+DgpPXm7Uh0NBkKqsvM1a
CHGJ+/TB6xRFc16/ZTBeKsP32l9E1QfeewXaLyJQ7TtbtzuPE5ioA8VjBo2oCDzh
vHff/a+OJjWr2lkvt9WWxPBiwBDrtSA=
-----END CERTIFICATE-----
Generated at Wed Jul 23 01:41:02 2025 by rpki-client