Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/b23bc881-8b25-3c26-8e95-80bf92a0ec33.roa
File:                     b23bc881-8b25-3c26-8e95-80bf92a0ec33.roa (raw, json)
Hash identifier:          OjxHELGu7KpdSs7ZIj8xkNY1NmC4QknPbFq//OQfuSs=
Subject key identifier:   57:6D:2E:20:96:D6:8A:01:E7:96:4A:E9:2C:8C:F4:06:F8:82:18:25
Certificate issuer:       /CN=c0aed97d-7073-4206-b05c-18a84d3f256d
Certificate serial:       010D0C9F4328584B03168DDBC19B2D8FBCBE18E0
Authority key identifier: 89:7F:03:30:67:E4:3D:E8:6D:FC:A9:72:8E:4B:37:8F:AF:87:0C:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/b23bc881-8b25-3c26-8e95-80bf92a0ec33.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     209242
IP address blocks:        199.34.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:8d:db:c1:9b:2d:8f:bc:be:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0aed97d-7073-4206-b05c-18a84d3f256d
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=43931e91-f3e7-4239-88a9-bde5eecaba34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:0a:9a:c6:ed:85:42:43:6d:0c:d8:dd:ef:
                    38:e9:da:0e:4f:92:d0:71:08:ff:29:52:46:d1:1b:
                    c7:67:83:d6:e8:3d:1a:e6:96:e2:e5:68:a9:e2:b7:
                    2b:06:f0:56:af:94:5d:51:19:15:97:94:5c:42:fe:
                    e5:3a:01:6a:74:ea:b4:3b:b6:04:71:4b:b4:e5:09:
                    00:c3:29:8a:f0:df:66:de:2a:3c:00:c7:4a:da:5b:
                    e9:22:3d:75:39:69:45:46:19:04:f2:42:fe:fb:23:
                    7c:85:fb:d3:b4:e1:59:41:98:db:fd:35:29:d1:5a:
                    b6:08:23:05:e6:d3:3e:0a:5e:b6:37:5c:52:3e:a0:
                    8d:c4:c3:09:b8:6a:a1:1a:98:39:ae:f5:f5:65:8b:
                    f0:9f:e3:f2:ca:c4:51:63:bc:10:05:1d:18:27:29:
                    e1:95:30:5a:ea:b5:2b:92:12:56:b0:2a:20:6a:94:
                    c9:06:f7:4e:ad:a3:28:93:f5:a0:02:35:61:be:d3:
                    96:5b:c1:06:f4:86:02:58:4a:6a:88:1b:f6:17:90:
                    b2:f9:cb:b6:25:3c:4b:6e:1c:3c:18:41:a5:5d:73:
                    73:9b:0b:42:3d:d6:d7:e4:48:37:d4:55:18:3e:88:
                    33:f6:ac:2f:82:b3:8f:08:df:53:43:ff:2b:ae:a5:
                    03:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6D:2E:20:96:D6:8A:01:E7:96:4A:E9:2C:8C:F4:06:F8:82:18:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/b23bc881-8b25-3c26-8e95-80bf92a0ec33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.crl

            X509v3 Authority Key Identifier:
                keyid:89:7F:03:30:67:E4:3D:E8:6D:FC:A9:72:8E:4B:37:8F:AF:87:0C:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:6a:0c:de:49:f3:47:fa:d9:1a:76:8c:d3:21:9a:35:9d:08:
         c6:b6:6b:40:30:e9:ec:e8:18:d1:89:e8:5a:8b:ae:69:17:dd:
         a7:7f:a1:a6:0e:82:20:00:70:ba:08:f6:8f:61:93:3a:c4:17:
         92:35:ee:71:fe:46:36:a9:86:0c:32:18:32:ce:8b:35:23:1e:
         3f:3c:87:3f:56:55:b7:37:6d:9e:52:71:5e:38:a5:ce:f1:af:
         45:22:ce:f2:27:c1:8b:00:7c:be:3d:32:e1:03:b3:ed:e3:3b:
         69:59:29:5a:25:7b:32:a6:d4:ae:0d:1b:16:58:7d:eb:64:5a:
         0a:4d:00:b2:d5:6a:34:1a:e3:ba:2c:20:33:10:b0:18:8d:60:
         58:21:e5:96:cc:64:6f:0d:b4:4e:d9:12:65:fe:33:58:9e:9e:
         5f:d1:94:05:78:92:19:a4:ba:57:15:66:aa:0d:5c:73:d1:63:
         fd:98:18:ce:1d:6a:d3:a2:24:8d:98:eb:2a:d0:d1:fa:8c:0b:
         0e:23:cb:66:da:00:55:6b:c8:03:3d:1e:58:8c:e3:bd:4d:89:
         ba:c4:d3:2b:8a:98:a3:f9:a7:ee:ac:cd:20:a8:f3:61:d7:b0:
         88:88:bd:99:2b:07:da:e6:55:0e:0c:b6:0b:56:e1:47:6c:ac:
         13:84:43:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDFo3bwZstj7y+GOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzBhZWQ5N2QtNzA3My00MjA2LWIwNWMtMThhODRkM2Yy
NTZkMB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk
NDM5MzFlOTEtZjNlNy00MjM5LTg4YTktYmRlNWVlY2FiYTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9EKmsbthUJDbQzY3e846doOT5LQcQj/KVJG
0RvHZ4PW6D0a5pbi5Wip4rcrBvBWr5RdURkVl5RcQv7lOgFqdOq0O7YEcUu05QkA
wymK8N9m3io8AMdK2lvpIj11OWlFRhkE8kL++yN8hfvTtOFZQZjb/TUp0Vq2CCMF
5tM+Cl62N1xSPqCNxMMJuGqhGpg5rvX1ZYvwn+PyysRRY7wQBR0YJynhlTBa6rUr
khJWsCogapTJBvdOraMok/WgAjVhvtOWW8EG9IYCWEpqiBv2F5Cy+cu2JTxLbhw8
GEGlXXNzmwtCPdbX5Eg31FUYPogz9qwvgrOPCN9TQ/8rrqUDmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFdtLiCW1ooB55ZK6SyM9Ab4ghglMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMGFl
ZDk3ZC03MDczLTQyMDYtYjA1Yy0xOGE4NGQzZjI1NmQvYjIzYmM4ODEtOGIyNS0z
YzI2LThlOTUtODBiZjkyYTBlYzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzBhZWQ5N2QtNzA3My00MjA2LWIw
NWMtMThhODRkM2YyNTZkL2MwYWVkOTdkLTcwNzMtNDIwNi1iMDVjLTE4YTg0ZDNm
MjU2ZC5jcmwwHwYDVR0jBBgwFoAUiX8DMGfkPeht/Klyjks3j6+HDPkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMGFlZDk3ZC03MDczLTQyMDYtYjA1Yy0xOGE4
NGQzZjI1NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyLkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF5qDN5J80f62Rp2jNMhmjWdCMa2a0Aw6ezoGNGJ6FqLrmkX3ad/oaYO
giAAcLoI9o9hkzrEF5I17nH+RjaphgwyGDLOizUjHj88hz9WVbc3bZ5ScV44pc7x
r0UizvInwYsAfL49MuEDs+3jO2lZKVolezKm1K4NGxZYfetkWgpNALLVajQa47os
IDMQsBiNYFgh5ZbMZG8NtE7ZEmX+M1ienl/RlAV4khmkulcVZqoNXHPRY/2YGM4d
atOiJI2Y6yrQ0fqMCw4jy2baAFVryAM9HliM471NibrE0yuKmKP5p+6szSCo82HX
sIiIvZkrB9rmVQ4MtgtW4UdsrBOEQ2c=
-----END CERTIFICATE-----
Generated at Wed Sep 17 23:19:40 2025 by rpki-client