Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/8658644c-7a87-3f4a-b91e-78aa7f022055.roa
File:                     8658644c-7a87-3f4a-b91e-78aa7f022055.roa (raw, json)
Hash identifier:          a4L1sMpY3g01c8SON0K4lXM8lMbTnjSBX7fc9CQjRIE=
Subject key identifier:   AB:4A:5C:C7:5C:16:5C:6F:2B:22:8C:18:E1:24:95:77:A3:C6:87:E9
Certificate issuer:       /CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
Certificate serial:       010D0C9F4328584A5E6060BFF003CEE7008C9D80
Authority key identifier: 67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/8658644c-7a87-3f4a-b91e-78aa7f022055.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     216440
IP address blocks:        23.159.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:60:bf:f0:03:ce:e7:00:8c:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=9844ef72-f3cd-426b-8a10-c3ecd08d27ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:2b:c0:90:2d:c0:48:c4:66:4e:49:3e:ee:
                    8d:de:3c:39:f2:e4:db:fb:76:cf:39:49:68:d0:60:
                    32:71:c6:3b:68:7c:da:2c:5b:73:f6:34:95:a8:ac:
                    fa:e7:8a:0b:cc:72:fc:80:03:72:d8:00:2f:91:46:
                    46:c4:6e:f4:51:81:8d:0c:98:c4:a0:05:a3:b9:3d:
                    da:8f:d6:08:95:5a:96:89:95:f8:fe:09:f7:61:0f:
                    2b:c9:55:6a:8b:2e:fb:c2:9e:32:fd:35:2b:27:ee:
                    15:0f:a0:8b:8e:de:7b:8a:bb:f7:ee:d6:b4:1d:d2:
                    32:91:d7:eb:32:a0:e9:73:6d:1d:3e:e3:a1:3d:29:
                    b3:1d:15:18:f5:46:8d:69:37:be:2f:75:33:15:9e:
                    2d:72:13:d5:0a:28:c3:27:27:15:37:50:c8:8d:51:
                    34:d7:5b:7d:a8:66:6a:c8:79:0c:0d:4b:84:98:55:
                    e9:6a:9d:a5:e0:59:63:b0:a8:13:9b:01:d5:da:1c:
                    38:fc:b4:29:c0:31:38:49:28:98:91:10:22:68:13:
                    c2:32:54:ee:4d:d1:89:fb:78:da:8f:71:21:6a:8e:
                    5b:fa:ba:3e:28:6c:fd:c3:50:2d:7c:1b:05:4d:22:
                    bc:10:59:dc:2a:f3:97:23:06:38:43:4c:5a:b8:d9:
                    60:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4A:5C:C7:5C:16:5C:6F:2B:22:8C:18:E1:24:95:77:A3:C6:87:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/8658644c-7a87-3f4a-b91e-78aa7f022055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.crl

            X509v3 Authority Key Identifier:
                keyid:67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:2b:a7:4b:78:d4:6d:ca:07:28:38:eb:2d:d8:33:b8:79:67:
         4c:86:c9:a1:c7:de:77:90:12:fe:01:f8:1c:3b:af:7a:b6:90:
         cf:c7:69:ac:58:12:3c:75:3f:c9:27:ab:21:ec:0a:8f:80:46:
         72:c0:04:58:5d:15:67:16:1d:f6:fe:bd:c9:68:4b:47:3c:c8:
         df:d7:fd:2f:01:e0:ec:7a:98:8e:5b:e6:d5:a0:ef:fd:21:85:
         70:ed:76:98:66:fb:f9:31:84:06:a7:6b:59:b9:15:67:89:88:
         5e:00:d7:99:e0:7c:ce:ce:69:b2:cb:a1:ab:f4:d5:4d:a7:be:
         0e:21:c1:a1:49:6e:64:db:ef:cf:48:1b:89:1d:9c:b6:5c:20:
         77:e0:f2:ce:7d:0b:af:7c:c5:2f:d8:25:d7:51:8f:a0:fc:84:
         e4:4a:fe:e6:26:3c:f6:42:d0:7e:86:55:b9:dd:d1:7b:84:eb:
         7b:7b:7c:15:02:e5:3c:56:22:26:55:ec:24:e8:6a:d4:ab:12:
         b0:2a:72:5c:13:8e:cc:9f:28:b6:89:16:b2:7a:4b:b8:ab:c6:
         56:5f:d9:7c:52:bf:88:fc:b3:00:54:6a:d3:0b:67:6b:57:b7:
         cc:9a:d6:61:f0:8a:a3:1e:8e:81:6e:fd:c4:e7:b1:98:01:dc:
         22:60:27:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGC/8APO5wCMnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWY5ZmFkNWMtZWUxZi00NGJjLWEzYjItZmRhNmY2YzBi
NzQ0MB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk
OTg0NGVmNzItZjNjZC00MjZiLThhMTAtYzNlY2QwOGQyN2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDIrwJAtwEjEZk5JPu6N3jw58uTb+3bPOUlo
0GAyccY7aHzaLFtz9jSVqKz654oLzHL8gANy2AAvkUZGxG70UYGNDJjEoAWjuT3a
j9YIlVqWiZX4/gn3YQ8ryVVqiy77wp4y/TUrJ+4VD6CLjt57irv37ta0HdIykdfr
MqDpc20dPuOhPSmzHRUY9UaNaTe+L3UzFZ4tchPVCijDJycVN1DIjVE011t9qGZq
yHkMDUuEmFXpap2l4FljsKgTmwHV2hw4/LQpwDE4SSiYkRAiaBPCMlTuTdGJ+3ja
j3Ehao5b+ro+KGz9w1AtfBsFTSK8EFncKvOXIwY4Q0xauNlggQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKtKXMdcFlxvKyKMGOEklXejxofpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZjlm
YWQ1Yy1lZTFmLTQ0YmMtYTNiMi1mZGE2ZjZjMGI3NDQvODY1ODY0NGMtN2E4Ny0z
ZjRhLWI5MWUtNzhhYTdmMDIyMDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWY5ZmFkNWMtZWUxZi00NGJjLWEz
YjItZmRhNmY2YzBiNzQ0LzFmOWZhZDVjLWVlMWYtNDRiYy1hM2IyLWZkYTZmNmMw
Yjc0NC5jcmwwHwYDVR0jBBgwFoAUZy0sJCLbsL0mQZJNY6W2wrTvDeswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZjlmYWQ1Yy1lZTFmLTQ0YmMtYTNiMi1mZGE2
ZjZjMGI3NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5/pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOErp0t41G3KByg46y3YM7h5Z0yGyaHH3neQEv4B+Bw7r3q2kM/HaaxY
Ejx1P8knqyHsCo+ARnLABFhdFWcWHfb+vcloS0c8yN/X/S8B4Ox6mI5b5tWg7/0h
hXDtdphm+/kxhAana1m5FWeJiF4A15ngfM7OabLLoav01U2nvg4hwaFJbmTb789I
G4kdnLZcIHfg8s59C698xS/YJddRj6D8hORK/uYmPPZC0H6GVbnd0XuE63t7fBUC
5TxWIiZV7CToatSrErAqclwTjsyfKLaJFrJ6S7irxlZf2XxSv4j8swBUatMLZ2tX
t8ya1mHwiqMejoFu/cTnsZgB3CJgJ+A=
-----END CERTIFICATE-----
Generated at Wed Jul 30 14:44:28 2025 by rpki-client