Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/a40d3175-e2c6-390a-8bb8-4c2fc4bdb1b6.roa
File:                     a40d3175-e2c6-390a-8bb8-4c2fc4bdb1b6.roa (raw, json)
Hash identifier:          QKgiw+Zpp4qXG16mkiP0XkOO44ceeVXw2Lo/QSbPHP0=
Subject key identifier:   FF:9B:26:8A:0D:1D:41:A3:8C:E5:B8:99:95:65:B2:82:B8:73:F2:4F
Certificate issuer:       /CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Certificate serial:       010D0C9F4328584A768F4D31AA67146049327A40
Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/a40d3175-e2c6-390a-8bb8-4c2fc4bdb1b6.roa
Signing time:             Wed 09 Jul 2025 16:54:53 +0000
ROA not before:           Wed 09 Jul 2025 16:54:53 +0000
ROA not after:            Tue 07 Oct 2025 16:54:53 +0000
asID:                     16509
IP address blocks:        23.141.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:8f:4d:31:aa:67:14:60:49:32:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717
        Validity
            Not Before: Jul  9 16:54:53 2025 GMT
            Not After : Oct  7 16:54:53 2025 GMT
        Subject: CN=b58c6b2c-7c9d-4872-b300-3699e4d7c1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:46:5e:da:49:6b:ea:f0:6c:81:95:c8:99:90:
                    ae:a6:e2:f6:8a:3c:84:50:61:74:e1:b9:a7:f6:95:
                    0e:16:e8:0a:bd:11:01:21:da:29:06:df:fc:2f:6c:
                    9c:53:33:0f:c7:cc:cc:b5:69:28:5f:ad:ab:73:b8:
                    bf:8b:13:16:5f:ff:a5:27:8b:45:5f:93:fd:44:13:
                    dc:9e:44:f6:eb:1c:c9:db:0b:42:ec:c0:71:61:1d:
                    1a:5a:09:50:d7:02:5a:2a:d2:6f:ab:e4:53:25:57:
                    d8:23:ae:4a:f9:c6:05:6b:98:e8:f5:ce:33:06:b4:
                    12:6b:6f:34:05:d5:f2:04:76:b8:42:ae:03:8f:b7:
                    ce:e3:c8:3e:97:d2:f9:7d:90:f3:e9:4d:d8:9b:b7:
                    ba:5f:c3:84:4f:2a:7e:8e:ea:d0:62:e2:a1:4d:9a:
                    49:d5:64:a9:89:e8:01:56:8f:f6:1f:a6:e0:c5:e4:
                    67:33:f6:c1:49:cd:a8:4f:cd:d4:42:09:0e:5f:a1:
                    16:cb:db:02:42:e8:c8:32:d5:4f:f2:03:30:ca:d5:
                    36:20:1c:ff:1e:78:85:6d:bd:c6:8f:15:03:1f:54:
                    9b:ea:45:af:f1:a4:84:3a:76:d2:1e:52:75:66:7f:
                    05:a4:31:ed:4f:87:21:21:2b:83:5c:91:73:83:e6:
                    af:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9B:26:8A:0D:1D:41:A3:8C:E5:B8:99:95:65:B2:82:B8:73:F2:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/a40d3175-e2c6-390a-8bb8-4c2fc4bdb1b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl

            X509v3 Authority Key Identifier:
                keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:06:62:e4:80:33:6f:77:eb:dd:f6:15:de:85:99:99:f9:23:
         22:84:50:77:8f:11:da:c4:d9:a8:60:85:4d:26:6d:f9:4c:9d:
         2a:d3:59:d7:d6:fc:2f:a2:cf:c0:32:e2:a8:19:94:08:b1:a9:
         95:b8:a2:3a:74:02:cb:02:d2:7d:f7:9c:42:71:d2:3e:8b:c5:
         40:b9:5f:39:93:08:72:3d:43:b5:c6:f7:32:d0:00:49:b4:25:
         94:a4:6a:03:25:cb:c7:8b:1c:9c:49:93:8e:ed:39:41:06:f9:
         31:c4:8c:13:ca:5a:49:53:b3:4a:17:0f:ca:15:b4:4e:b5:59:
         fc:fd:03:c6:dd:72:b3:fb:84:52:81:56:39:ea:ef:30:3d:aa:
         b2:e0:4a:3b:39:87:fa:d0:64:bd:01:83:ef:18:41:56:7b:98:
         fd:86:5a:4d:18:f3:5b:d9:8d:e1:19:2a:80:3f:77:7a:3b:90:
         82:12:0b:71:16:56:32:da:84:ff:e0:a2:74:34:42:6c:75:a1:
         af:0e:a4:cd:94:47:85:d9:03:1e:c1:06:7a:8a:e3:c8:36:51:
         03:96:7e:4f:3b:7c:c2:84:99:d2:fb:24:fd:28:75:a5:75:9e:
         b2:d3:8d:7e:1a:ee:ab:55:7d:65:c6:27:5e:7b:e5:93:b7:38:
         82:b9:71:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2j00xqmcUYEkyekAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDA2ZDExNzQtNGJmNC00NjViLTlmMGItMTA5MTYzM2U2
NzE3MB4XDTI1MDcwOTE2NTQ1M1oXDTI1MTAwNzE2NTQ1M1owLzEtMCsGA1UEAxMk
YjU4YzZiMmMtN2M5ZC00ODcyLWIzMDAtMzY5OWU0ZDdjMWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkZe2klr6vBsgZXImZCupuL2ijyEUGF04bmn
9pUOFugKvREBIdopBt/8L2ycUzMPx8zMtWkoX62rc7i/ixMWX/+lJ4tFX5P9RBPc
nkT26xzJ2wtC7MBxYR0aWglQ1wJaKtJvq+RTJVfYI65K+cYFa5jo9c4zBrQSa280
BdXyBHa4Qq4Dj7fO48g+l9L5fZDz6U3Ym7e6X8OETyp+jurQYuKhTZpJ1WSpiegB
Vo/2H6bgxeRnM/bBSc2oT83UQgkOX6EWy9sCQujIMtVP8gMwytU2IBz/HniFbb3G
jxUDH1Sb6kWv8aSEOnbSHlJ1Zn8FpDHtT4chISuDXJFzg+avDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP+bJooNHUGjjOW4mZVlsoK4c/JPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZk
MTE3NC00YmY0LTQ2NWItOWYwYi0xMDkxNjMzZTY3MTcvYTQwZDMxNzUtZTJjNi0z
OTBhLThiYjgtNGMyZmM0YmRiMWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDA2ZDExNzQtNGJmNC00NjViLTlm
MGItMTA5MTYzM2U2NzE3L2QwNmQxMTc0LTRiZjQtNDY1Yi05ZjBiLTEwOTE2MzNl
NjcxNy5jcmwwHwYDVR0jBBgwFoAU9jj3atiqgLwTOxXzDa4QNzLQ0McwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZkMTE3NC00YmY0LTQ2NWItOWYwYi0xMDkx
NjMzZTY3MTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF43oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUGYuSAM2936932Fd6FmZn5IyKEUHePEdrE2ahghU0mbflMnSrTWdfW
/C+iz8Ay4qgZlAixqZW4ojp0AssC0n33nEJx0j6LxUC5XzmTCHI9Q7XG9zLQAEm0
JZSkagMly8eLHJxJk47tOUEG+THEjBPKWklTs0oXD8oVtE61Wfz9A8bdcrP7hFKB
Vjnq7zA9qrLgSjs5h/rQZL0Bg+8YQVZ7mP2GWk0Y81vZjeEZKoA/d3o7kIISC3EW
VjLahP/gonQ0Qmx1oa8OpM2UR4XZAx7BBnqK48g2UQOWfk87fMKEmdL7JP0odaV1
nrLTjX4a7qtVfWXGJ1575ZO3OIK5ce0=
-----END CERTIFICATE-----
Generated at Thu Jul 10 07:17:33 2025 by rpki-client