Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa
File:                     c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa (raw, json)
Hash identifier:          iffEEDlHPXZBVLOkxbyzO2kvAPU+8IyBiec/mWLjcg8=
Subject key identifier:   7E:5C:31:32:65:41:84:0D:0C:02:12:2C:29:77:3A:E0:10:B4:AF:10
Certificate issuer:       /CN=cf96d190-5b35-4b24-ac78-599aa0e50405
Certificate serial:       010D0C9F4328584B0CDC1C5BAD5C38596FB0EB80
Authority key identifier: 56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     400655
IP address blocks:        23.191.184.0/24 maxlen: 24
                          2602:f7e4::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:1c:5b:ad:5c:38:59:6f:b0:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf96d190-5b35-4b24-ac78-599aa0e50405
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=c6436527-4d36-4c6d-b195-4cbde5ec8e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:02:f1:42:2f:b8:a7:74:03:d6:88:55:67:
                    84:bd:a8:32:02:aa:08:cb:aa:b6:df:7b:0c:ce:27:
                    3f:b6:9d:79:f7:59:6e:ec:ad:f3:8f:a3:0f:86:1b:
                    45:a5:55:9c:39:8e:4a:4a:18:03:ce:84:f2:ae:e4:
                    04:7f:49:f9:21:90:3a:8d:4c:bb:a2:70:01:0a:14:
                    cb:c2:ab:53:20:cc:21:9c:50:4f:c8:01:9d:99:56:
                    6a:01:6b:a0:ed:bd:5c:43:c3:56:3a:be:da:50:39:
                    1c:db:c4:5b:07:01:8b:24:5b:bd:59:a7:4c:b3:be:
                    ab:c1:fe:78:9d:e3:96:29:d1:ec:96:d0:0d:44:eb:
                    da:1a:e7:f5:d1:98:c3:d6:56:b4:ea:fb:0f:9f:f0:
                    f2:2e:4e:dc:85:dc:2f:b2:07:79:27:01:a1:22:14:
                    e2:1f:5a:86:44:1c:5c:40:61:af:89:f6:26:08:cb:
                    f5:7d:de:db:6c:62:4e:c8:19:1e:94:d1:a0:cd:7b:
                    ff:0e:81:64:45:20:cb:e2:d2:c6:47:77:e1:e2:b2:
                    93:52:e6:47:4a:cc:52:c0:c6:03:be:a4:af:40:37:
                    a1:10:af:1d:65:ff:7e:d5:25:73:ee:39:81:ed:17:
                    80:4f:3c:b6:77:88:54:3d:80:fe:df:47:47:b4:ff:
                    fc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5C:31:32:65:41:84:0D:0C:02:12:2C:29:77:3A:E0:10:B4:AF:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl

            X509v3 Authority Key Identifier:
                keyid:56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.184.0/24
                IPv6:
                  2602:f7e4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:45:b7:0b:eb:d5:85:ee:62:20:ee:48:30:37:64:bb:55:e0:
         26:8d:0f:60:f0:4c:aa:a3:7a:f3:94:61:8d:6c:36:95:ad:cf:
         79:ee:40:55:ab:39:15:bd:86:06:34:34:76:b7:2c:6e:71:5c:
         c9:57:98:89:1b:7a:ae:9e:13:1b:3f:41:8b:95:3d:46:3b:87:
         4c:91:1f:5b:8f:38:73:cf:7d:de:56:d7:0b:28:b1:64:c3:15:
         d5:c8:26:0a:09:0a:85:1b:65:e1:93:b5:e6:43:57:54:82:ce:
         50:c3:ab:9f:b5:d5:9d:39:67:65:fb:35:bf:c2:a4:3f:39:37:
         b8:a8:2d:ce:d7:64:cb:87:8c:20:ee:37:41:e3:b9:8c:13:5b:
         0d:bc:2d:b0:c6:07:83:75:c5:85:b5:2e:c8:39:0c:93:4a:37:
         3f:57:8b:65:42:81:65:60:a3:95:48:c1:c3:37:77:b1:b3:24:
         dd:85:d1:81:85:3c:26:da:f7:58:13:5b:64:a1:f9:69:67:fa:
         81:36:45:a2:f1:af:8e:06:ac:80:34:f8:7b:74:93:03:99:c2:
         aa:1a:63:15:2e:89:8b:44:ac:ba:c0:1b:ef:6e:44:7a:4d:c6:
         f5:5f:da:cb:34:34:38:de:51:d8:11:48:b2:68:d9:bd:9e:aa:
         48:39:a3:85
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsM3BxbrVw4WW+w64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2Y5NmQxOTAtNWIzNS00YjI0LWFjNzgtNTk5YWEwZTUw
NDA1MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk
YzY0MzY1MjctNGQzNi00YzZkLWIxOTUtNGNiZGU1ZWM4ZTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv94C8UIvuKd0A9aIVWeEvagyAqoIy6q233sM
zic/tp1591lu7K3zj6MPhhtFpVWcOY5KShgDzoTyruQEf0n5IZA6jUy7onABChTL
wqtTIMwhnFBPyAGdmVZqAWug7b1cQ8NWOr7aUDkc28RbBwGLJFu9WadMs76rwf54
neOWKdHsltANROvaGuf10ZjD1la06vsPn/DyLk7chdwvsgd5JwGhIhTiH1qGRBxc
QGGvifYmCMv1fd7bbGJOyBkelNGgzXv/DoFkRSDL4tLGR3fh4rKTUuZHSsxSwMYD
vqSvQDehEK8dZf9+1SVz7jmB7ReATzy2d4hUPYD+30dHtP/8KwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFH5cMTJlQYQNDAISLCl3OuAQtK8QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZjk2
ZDE5MC01YjM1LTRiMjQtYWM3OC01OTlhYTBlNTA0MDUvYzc4MDJhMmItZjEwZC0z
ZjlmLWI0YjUtNWY4NWNjYjkzM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Y5NmQxOTAtNWIzNS00YjI0LWFj
NzgtNTk5YWEwZTUwNDA1L2NmOTZkMTkwLTViMzUtNGIyNC1hYzc4LTU5OWFhMGU1
MDQwNS5jcmwwHwYDVR0jBBgwFoAUVpcdu5PTUs4VYZuBIrKntkJR+6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZjk2ZDE5MC01YjM1LTRiMjQtYWM3OC01OTlh
YTBlNTA0MDUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7+4MA4E
AgACMAgDBgAmAvfkADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCdRbcL69WF7mIg7kgwN2S7VeAmjQ9g8Eyq
o3rzlGGNbDaVrc957kBVqzkVvYYGNDR2tyxucVzJV5iJG3qunhMbP0GLlT1GO4dM
kR9bjzhzz33eVtcLKLFkwxXVyCYKCQqFG2Xhk7XmQ1dUgs5Qw6uftdWdOWdl+zW/
wqQ/OTe4qC3O12TLh4wg7jdB47mME1sNvC2wxgeDdcWFtS7IOQyTSjc/V4tlQoFl
YKOVSMHDN3exsyTdhdGBhTwm2vdYE1tkoflpZ/qBNkWi8a+OBqyANPh7dJMDmcKq
GmMVLomLRKy6wBvvbkR6Tcb1X9rLNDQ43lHYEUiyaNm9nqpIOaOF
-----END CERTIFICATE-----
Generated at Thu Sep 18 03:02:36 2025 by rpki-client