Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/213982e2-eaa8-3db4-9a38-fbeaf7c34f9b.roa
File:                     213982e2-eaa8-3db4-9a38-fbeaf7c34f9b.roa (raw, json)
Hash identifier:          uXCSFMUTttsQOgKpqdCL2o+sY1Cs1M5ChRlIInKoO7k=
Subject key identifier:   BD:63:E6:CA:08:E3:2F:15:FC:45:DF:97:92:F9:AE:DA:CA:1F:1D:1C
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584A90A0B751E495ED9796AECCC0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/213982e2-eaa8-3db4-9a38-fbeaf7c34f9b.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     22469
IP address blocks:        8.41.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b7:51:e4:95:ed:97:96:ae:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=1381ae7a-7fb2-4a1a-aed5-7a4848bcd55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6b:c7:fb:67:fc:39:57:e6:d0:8a:ed:0e:40:
                    69:08:41:3d:b9:a2:aa:6b:0f:33:11:53:a7:88:cc:
                    6a:e3:9e:cb:ea:a4:8a:5b:21:9b:74:94:14:44:ff:
                    21:18:61:ec:49:bf:97:42:a7:0d:20:c0:91:f2:5c:
                    06:5d:3b:0d:1a:8b:5e:69:5a:81:fa:c6:a6:4c:bf:
                    8b:3c:50:ee:33:bb:4b:59:8a:8e:a0:6d:3a:bb:a3:
                    c7:e8:e7:b6:28:0d:d9:61:ca:5c:e3:b6:cc:4b:de:
                    44:fd:a1:bf:9f:ff:5f:d6:a5:fc:95:05:99:55:c8:
                    2e:21:0c:38:84:0e:f0:ce:9a:d1:11:29:d6:3f:c6:
                    c0:44:c3:af:3f:4a:fa:ac:49:6b:2a:b8:cf:69:2f:
                    d6:92:d0:80:88:79:e5:4b:ba:ee:b5:75:c3:78:46:
                    8c:ee:4e:2d:df:ae:91:bb:52:32:6f:ae:20:5d:b5:
                    a0:dc:b9:00:0c:03:3d:8a:4c:e7:bc:0c:da:8b:6c:
                    cf:ba:6b:f9:9a:c4:c6:e2:29:37:12:33:fe:e6:5c:
                    26:ef:97:4f:aa:65:98:df:b4:1c:31:1f:fa:74:4b:
                    31:a3:d1:c1:b9:66:93:b3:69:c9:ef:68:e9:03:ce:
                    ce:36:2d:ed:98:48:0a:35:89:9e:53:b0:dc:58:45:
                    14:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:63:E6:CA:08:E3:2F:15:FC:45:DF:97:92:F9:AE:DA:CA:1F:1D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/213982e2-eaa8-3db4-9a38-fbeaf7c34f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.41.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:81:5c:64:17:0f:3b:1f:59:26:fc:f5:ac:c6:15:40:7b:2e:
         c5:89:33:da:e4:83:e2:4b:02:2f:1e:27:2d:e4:8b:69:8b:5d:
         63:89:0d:15:ba:2d:e1:f9:72:78:6e:7a:b1:0d:5a:b9:79:e4:
         a7:56:cd:94:ab:ce:5a:29:33:a2:dc:13:8c:e1:29:a4:7c:3a:
         48:35:3a:dc:98:d5:2d:ad:07:03:e0:71:c1:45:63:62:08:b8:
         d6:ed:ad:d5:40:bf:ed:32:c6:0b:e1:b3:04:f9:9f:59:f2:c5:
         39:ec:73:ee:87:87:15:63:d9:52:87:3b:0e:0c:dd:f3:24:1f:
         5f:de:ef:f5:6e:7f:3a:74:6c:f1:ec:c8:c6:fa:5f:dd:57:58:
         46:33:d9:9b:2a:7a:cb:2d:4a:f9:7b:95:ff:03:64:34:4e:18:
         c9:d5:cc:d0:0b:ad:67:87:12:92:b0:49:56:aa:84:c8:75:20:
         5f:97:c2:2e:89:d9:17:ba:77:f4:7c:98:d7:f8:5b:0d:2f:ee:
         7b:ff:91:8e:ea:24:76:fc:f8:ff:75:12:48:4c:c9:da:91:89:
         d9:53:e5:b9:7d:bd:d9:84:6b:7d:02:08:bb:9f:42:b5:2e:32:
         cb:a8:36:b3:cd:f5:9c:4b:4f:44:e8:ab:32:46:6b:5d:17:5d:
         03:0d:c5:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLdR5JXtl5auzMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
MTM4MWFlN2EtN2ZiMi00YTFhLWFlZDUtN2E0ODQ4YmNkNTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGvH+2f8OVfm0IrtDkBpCEE9uaKqaw8zEVOn
iMxq457L6qSKWyGbdJQURP8hGGHsSb+XQqcNIMCR8lwGXTsNGoteaVqB+samTL+L
PFDuM7tLWYqOoG06u6PH6Oe2KA3ZYcpc47bMS95E/aG/n/9f1qX8lQWZVcguIQw4
hA7wzprRESnWP8bARMOvP0r6rElrKrjPaS/WktCAiHnlS7rutXXDeEaM7k4t366R
u1Iyb64gXbWg3LkADAM9ikznvAzai2zPumv5msTG4ik3EjP+5lwm75dPqmWY37Qc
MR/6dEsxo9HBuWaTs2nJ72jpA87ONi3tmEgKNYmeU7DcWEUUKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL1j5soI4y8V/EXfl5L5rtrKHx0cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMjEzOTgyZTItZWFhOC0z
ZGI0LTlhMzgtZmJlYWY3YzM0ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACClUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqBXGQXDzsfWSb89azGFUB7LsWJM9rkg+JLAi8eJy3ki2mLXWOJDRW6
LeH5cnhuerENWrl55KdWzZSrzlopM6LcE4zhKaR8Okg1OtyY1S2tBwPgccFFY2II
uNbtrdVAv+0yxgvhswT5n1nyxTnsc+6HhxVj2VKHOw4M3fMkH1/e7/Vufzp0bPHs
yMb6X91XWEYz2ZsqesstSvl7lf8DZDROGMnVzNALrWeHEpKwSVaqhMh1IF+Xwi6J
2Re6d/R8mNf4Ww0v7nv/kY7qJHb8+P91EkhMydqRidlT5bl9vdmEa30CCLufQrUu
MsuoNrPN9ZxLT0ToqzJGa10XXQMNxZI=
-----END CERTIFICATE-----
Generated at Thu Jul 31 07:33:44 2025 by rpki-client