Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/56cebf3f-21de-3b49-865b-dac41843ab3d.roa
File:                     56cebf3f-21de-3b49-865b-dac41843ab3d.roa (raw, json)
Hash identifier:          2116MlQJ0gG+6ELJtqaa3B4244fE02Dq6ochx+7YxPc=
Subject key identifier:   BD:C5:17:B9:E9:56:E8:2E:95:47:31:1C:22:6D:DD:8E:67:42:2A:8D
Certificate issuer:       /CN=c5c851da-daf3-4388-8104-40baa3dc3939
Certificate serial:       010D0C9F4328584AF7EBDC6B11D0A100FB20DEA0
Authority key identifier: A6:C4:8B:86:65:14:F3:B2:66:77:64:A4:DE:C5:2C:8D:CB:35:13:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/56cebf3f-21de-3b49-865b-dac41843ab3d.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     23459
IP address blocks:        23.176.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:dc:6b:11:d0:a1:00:fb:20:de:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5c851da-daf3-4388-8104-40baa3dc3939
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=95958f53-68e2-4e30-905f-b19b5a1c581b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:89:7f:e2:66:bd:84:54:af:6d:4f:53:d4:0f:
                    3a:4e:6d:40:5a:8c:2f:73:dc:cd:31:e9:9e:51:5d:
                    3a:d2:24:8f:44:1d:7f:8e:35:69:4a:84:e8:f5:eb:
                    13:cc:b9:33:00:87:84:d4:ee:14:4a:a4:a6:32:4c:
                    58:3e:44:81:b6:80:2e:eb:79:7e:34:07:f1:77:f1:
                    96:82:00:8c:88:0a:db:32:72:e8:22:4b:67:a3:ce:
                    1c:af:1e:95:fb:06:e8:32:63:85:96:ee:43:e1:02:
                    aa:c9:91:af:ff:28:af:61:d4:04:65:24:55:4e:60:
                    57:6d:52:b2:a3:eb:9d:72:4c:fa:98:e7:0e:d9:6f:
                    a1:40:ad:aa:da:c4:46:01:9e:66:df:30:2e:10:87:
                    40:9a:84:24:44:48:a1:ed:38:13:86:f7:4e:20:dc:
                    c1:da:02:b0:42:b0:a9:85:12:15:e5:68:4d:6c:60:
                    a7:28:aa:0c:6c:1c:c7:97:41:b4:52:c3:69:af:5d:
                    d8:5e:37:8d:38:d5:3b:a7:7c:a8:d4:3d:db:3b:ff:
                    89:9a:98:29:e4:ba:cc:f1:89:53:2b:ad:e8:d9:42:
                    2d:fe:2d:c7:14:2a:7d:0a:70:4a:da:88:04:df:34:
                    b6:be:fa:73:08:5d:1c:60:f4:ac:ab:bc:84:6e:ac:
                    51:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C5:17:B9:E9:56:E8:2E:95:47:31:1C:22:6D:DD:8E:67:42:2A:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/56cebf3f-21de-3b49-865b-dac41843ab3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C4:8B:86:65:14:F3:B2:66:77:64:A4:DE:C5:2C:8D:CB:35:13:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:96:6a:3f:0d:a1:0e:e9:85:1a:d4:73:55:16:40:c8:6c:16:
         a6:e5:a3:f1:cf:14:56:d5:ad:b3:62:96:4f:f9:c3:06:b5:cf:
         56:9e:7f:b6:7b:17:39:8a:fc:e6:ad:7c:77:5c:db:4c:ab:69:
         1f:ac:03:95:f8:cd:77:bc:d6:67:0a:10:e4:10:50:ba:bf:6b:
         0d:df:be:c6:67:7d:29:d7:b6:61:b8:c7:b7:6a:f0:fd:c0:11:
         25:f3:1b:9f:93:e2:df:9a:ae:7d:f9:0b:a9:b2:00:01:40:70:
         56:1a:d9:5d:4d:ad:04:a0:3d:e8:7d:c7:3e:ec:cb:72:63:f3:
         50:d3:8d:f7:9e:ee:48:53:f0:92:e9:a5:4b:8c:d7:52:75:15:
         b9:57:fa:f0:18:c8:ff:61:95:04:b8:60:19:87:71:3b:96:56:
         11:cd:2d:e1:6e:07:32:24:8a:5d:99:2b:62:e6:c5:f5:c6:46:
         df:d6:99:74:71:45:94:76:98:f0:f1:2b:3d:55:ad:98:3c:5b:
         28:b1:0b:06:0e:0e:df:fc:ae:e1:a5:66:d9:7e:f9:6f:6e:ee:
         1b:29:bb:8e:ac:9a:6d:3c:f3:fa:46:88:4f:9c:82:8c:96:ab:
         72:d2:47:e7:f9:cb:72:51:5a:1b:52:ec:50:76:76:7e:64:21:
         ae:54:05:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369xrEdChAPsg3qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzVjODUxZGEtZGFmMy00Mzg4LTgxMDQtNDBiYWEzZGMz
OTM5MB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk
OTU5NThmNTMtNjhlMi00ZTMwLTkwNWYtYjE5YjVhMWM1ODFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlol/4ma9hFSvbU9T1A86Tm1AWowvc9zNMeme
UV060iSPRB1/jjVpSoTo9esTzLkzAIeE1O4USqSmMkxYPkSBtoAu63l+NAfxd/GW
ggCMiArbMnLoIktno84crx6V+wboMmOFlu5D4QKqyZGv/yivYdQEZSRVTmBXbVKy
o+udckz6mOcO2W+hQK2q2sRGAZ5m3zAuEIdAmoQkREih7TgThvdOINzB2gKwQrCp
hRIV5WhNbGCnKKoMbBzHl0G0UsNpr13YXjeNONU7p3yo1D3bO/+Jmpgp5LrM8YlT
K63o2UIt/i3HFCp9CnBK2ogE3zS2vvpzCF0cYPSsq7yEbqxRVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL3FF7npVugulUcxHCJt3Y5nQiqNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jNWM4
NTFkYS1kYWYzLTQzODgtODEwNC00MGJhYTNkYzM5MzkvNTZjZWJmM2YtMjFkZS0z
YjQ5LTg2NWItZGFjNDE4NDNhYjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzVjODUxZGEtZGFmMy00Mzg4LTgx
MDQtNDBiYWEzZGMzOTM5L2M1Yzg1MWRhLWRhZjMtNDM4OC04MTA0LTQwYmFhM2Rj
MzkzOS5jcmwwHwYDVR0jBBgwFoAUpsSLhmUU87Jmd2Sk3sUsjcs1E+YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jNWM4NTFkYS1kYWYzLTQzODgtODEwNC00MGJh
YTNkYzM5MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7DYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHOWaj8NoQ7phRrUc1UWQMhsFqblo/HPFFbVrbNilk/5wwa1z1aef7Z7
FzmK/OatfHdc20yraR+sA5X4zXe81mcKEOQQULq/aw3fvsZnfSnXtmG4x7dq8P3A
ESXzG5+T4t+arn35C6myAAFAcFYa2V1NrQSgPeh9xz7sy3Jj81DTjfee7khT8JLp
pUuM11J1FblX+vAYyP9hlQS4YBmHcTuWVhHNLeFuBzIkil2ZK2LmxfXGRt/WmXRx
RZR2mPDxKz1VrZg8WyixCwYODt/8ruGlZtl++W9u7hspu46smm088/pGiE+cgoyW
q3LSR+f5y3JRWhtS7FB2dn5kIa5UBTU=
-----END CERTIFICATE-----
Generated at Mon Aug 25 15:13:58 2025 by rpki-client