Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed36845a-1abe-3dcc-81ba-9f0abb2fd460.roa
File:                     ed36845a-1abe-3dcc-81ba-9f0abb2fd460.roa (raw, json)
Hash identifier:          INseOCVLEY58BKUiBC/H/VsZCyzT0jiTCSaivmVu07s=
Subject key identifier:   2C:A0:52:04:4D:97:92:64:80:CF:08:F6:3F:A5:37:CA:CD:EB:A6:13
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7BB0E4E754D309B9411718F0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed36845a-1abe-3dcc-81ba-9f0abb2fd460.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     20940
IP address blocks:        23.55.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:e4:e7:54:d3:09:b9:41:17:18:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=db7adf35-21f5-480d-9f52-d7b67a7607d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:5d:0c:b3:74:97:ac:4b:b0:b8:c6:6b:d9:
                    91:b2:90:2c:81:10:1b:04:e4:41:7b:bd:93:a3:9d:
                    03:6c:4f:39:4e:26:9c:d5:f4:e3:1f:29:2a:bb:a1:
                    a1:2e:26:d5:6c:41:ca:e2:54:10:a2:fe:f7:dc:36:
                    74:61:06:44:04:79:bd:27:02:c2:86:fa:b1:52:ca:
                    4f:d7:10:33:73:b3:f5:6c:81:fa:a1:da:cc:78:5b:
                    3f:d5:3e:7c:66:28:fb:05:e1:dd:1d:c3:6f:3b:f2:
                    96:1f:20:91:65:c0:6c:30:57:a4:a8:87:11:eb:b4:
                    89:c0:01:e9:a1:0a:7a:44:dc:8c:1b:b7:c8:71:77:
                    a8:6e:5f:04:0b:09:68:5e:9d:3b:6c:ab:3c:b6:95:
                    d7:6d:06:75:ca:b0:84:1d:c9:9d:e8:55:7c:9f:93:
                    09:43:be:b1:ab:92:97:77:c3:fb:10:ab:b1:a3:4b:
                    ea:2e:9d:d8:04:a9:97:3a:aa:90:07:3b:09:6f:e1:
                    49:c6:8d:ae:07:2d:7a:51:fd:ee:c3:75:b6:00:81:
                    dc:1d:d6:25:28:db:f6:10:36:59:eb:43:4c:95:a6:
                    fb:10:bb:39:bf:35:c4:75:82:f8:02:f4:af:af:58:
                    21:79:f1:3b:99:97:cc:33:13:e7:eb:51:0f:1a:75:
                    dc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A0:52:04:4D:97:92:64:80:CF:08:F6:3F:A5:37:CA:CD:EB:A6:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed36845a-1abe-3dcc-81ba-9f0abb2fd460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:cb:9a:c6:e5:f6:f2:9f:83:f5:27:04:ec:14:04:4b:7f:ab:
         b5:80:6f:f1:e4:58:39:a7:93:3d:f2:b5:59:25:1a:80:9d:29:
         65:db:bb:a5:79:91:d7:87:2f:94:7b:03:03:53:b7:61:0b:d7:
         1d:16:d0:c1:9e:b6:b7:75:7a:9e:f2:1b:84:cd:9f:1d:75:b3:
         b7:03:d8:8d:b8:74:e1:ce:cf:bc:8b:fd:ee:5b:ba:ba:f7:47:
         e8:e9:8d:0b:3e:96:51:29:93:41:cd:3b:66:86:ef:0f:f7:b4:
         8d:99:ff:a2:03:fd:5b:54:26:88:51:de:fb:32:ac:54:92:d5:
         c7:f8:57:7e:6a:d4:ec:a0:43:5e:c8:5a:f5:a4:cb:f7:3b:4b:
         25:42:74:d3:d7:48:18:e3:68:21:2e:cb:b3:e9:15:c5:32:41:
         ac:59:37:4d:11:4e:6f:d1:18:4c:09:d0:e2:fe:1b:c9:f2:77:
         fa:d1:a1:a4:59:c2:d9:14:e8:d7:02:6d:62:e0:e9:65:18:b6:
         a1:0a:53:ba:3b:56:16:de:bd:fd:99:31:db:4c:18:49:e3:81:
         35:da:41:a6:55:41:fa:ee:e1:5a:6c:23:4a:bf:69:30:e0:9c:
         ad:08:f3:fb:4b:1f:1b:60:fa:86:b3:0a:c9:eb:f9:15:c8:a6:
         f3:52:da:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sOTnVNMJuUEXGPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk
ZGI3YWRmMzUtMjFmNS00ODBkLTlmNTItZDdiNjdhNzYwN2Q3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF1dDLN0l6xLsLjGa9mRspAsgRAbBORBe72T
o50DbE85Tiac1fTjHykqu6GhLibVbEHK4lQQov733DZ0YQZEBHm9JwLChvqxUspP
1xAzc7P1bIH6odrMeFs/1T58Zij7BeHdHcNvO/KWHyCRZcBsMFekqIcR67SJwAHp
oQp6RNyMG7fIcXeobl8ECwloXp07bKs8tpXXbQZ1yrCEHcmd6FV8n5MJQ76xq5KX
d8P7EKuxo0vqLp3YBKmXOqqQBzsJb+FJxo2uBy16Uf3uw3W2AIHcHdYlKNv2EDZZ
60NMlab7ELs5vzXEdYL4AvSvr1ghefE7mZfMMxPn61EPGnXc2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCygUgRNl5JkgM8I9j+lN8rN66YTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWQzNjg0NWEtMWFiZS0z
ZGNjLTgxYmEtOWYwYWJiMmZkNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzfsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTLmsbl9vKfg/UnBOwUBEt/q7WAb/HkWDmnkz3ytVklGoCdKWXbu6V5
kdeHL5R7AwNTt2EL1x0W0MGetrd1ep7yG4TNnx11s7cD2I24dOHOz7yL/e5burr3
R+jpjQs+llEpk0HNO2aG7w/3tI2Z/6ID/VtUJohR3vsyrFSS1cf4V35q1OygQ17I
WvWky/c7SyVCdNPXSBjjaCEuy7PpFcUyQaxZN00RTm/RGEwJ0OL+G8nyd/rRoaRZ
wtkU6NcCbWLg6WUYtqEKU7o7Vhbevf2ZMdtMGEnjgTXaQaZVQfru4VpsI0q/aTDg
nK0I8/tLHxtg+oazCsnr+RXIpvNS2m4=
-----END CERTIFICATE-----
Generated at Thu Jul 24 00:05:52 2025 by rpki-client