Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/cfa9268d-50e6-3e9b-a249-1910607c366e.roa
File:                     cfa9268d-50e6-3e9b-a249-1910607c366e.roa (raw, json)
Hash identifier:          595mFB9pHhfq8eccvrfQC5HdjA7hqPfz5gLSBogmFc4=
Subject key identifier:   87:69:CE:B4:2A:4D:70:2A:7F:6A:E1:D6:EA:46:32:90:A3:30:28:3B
Certificate issuer:       /CN=093d143f-009a-4f7c-beb4-ce9c73352417
Certificate serial:       010D0C9F4328584B103549E868B2F7BD62521E80
Authority key identifier: C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/cfa9268d-50e6-3e9b-a249-1910607c366e.roa
Signing time:             Fri 22 Aug 2025 01:00:33 +0000
ROA not before:           Fri 22 Aug 2025 01:00:33 +0000
ROA not after:            Thu 20 Nov 2025 02:00:33 +0000
asID:                     33755
IP address blocks:        23.164.56.0/24 maxlen: 24
                          23.164.57.0/24 maxlen: 24
                          192.100.5.0/24 maxlen: 24
                          2602:f974::/36 maxlen: 36
                          2602:f974:fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:10:35:49:e8:68:b2:f7:bd:62:52:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093d143f-009a-4f7c-beb4-ce9c73352417
        Validity
            Not Before: Aug 22 01:00:33 2025 GMT
            Not After : Nov 20 02:00:33 2025 GMT
        Subject: CN=7c6f89f6-fb17-4318-acb4-46bef040b64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:89:62:0a:d9:94:fb:3b:e8:70:84:85:28:4a:
                    ad:9f:ad:15:51:6d:d2:07:e9:86:50:ea:55:1e:52:
                    4a:45:9a:73:50:ab:b7:97:37:8a:ef:3a:e6:2d:e8:
                    1d:e5:c8:c6:35:6e:b6:fd:49:e1:ff:9c:51:e4:48:
                    54:01:10:a3:70:b7:bb:34:b4:59:98:eb:9c:e8:7d:
                    e1:df:fc:7d:36:28:c7:c2:88:a6:a4:45:e1:55:61:
                    43:4a:ab:97:29:55:8f:25:63:36:5f:a1:6a:7b:0b:
                    46:4a:b5:1b:69:43:0e:57:18:52:b1:bc:3b:94:66:
                    24:70:2a:dd:95:05:c5:35:61:18:6b:ba:e2:ff:3f:
                    1f:43:a8:68:f0:a8:54:c5:63:bd:3e:06:47:8d:37:
                    87:78:c0:92:b6:6d:b9:d2:38:e5:fa:d9:7c:c6:f9:
                    07:5c:a7:bb:89:b0:ad:a0:56:c8:f1:16:b7:15:9b:
                    d6:b7:35:a3:1c:4e:e7:86:c4:2b:79:57:d0:4f:65:
                    66:ae:85:80:f9:06:be:2a:03:04:aa:5f:f1:30:48:
                    76:ec:77:8e:76:99:e2:5c:a6:4a:89:c4:93:86:de:
                    57:13:42:68:0e:c0:db:05:d9:d9:48:da:4e:4f:83:
                    83:15:fd:a6:7a:d2:cc:76:70:0c:9c:20:76:87:f0:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:69:CE:B4:2A:4D:70:2A:7F:6A:E1:D6:EA:46:32:90:A3:30:28:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/cfa9268d-50e6-3e9b-a249-1910607c366e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.crl

            X509v3 Authority Key Identifier:
                keyid:C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.56.0/23
                  192.100.5.0/24
                IPv6:
                  2602:f974::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:86:74:78:f4:9c:99:99:b5:af:42:15:53:22:8c:4e:f4:c6:
         80:a5:e7:0f:53:ea:77:53:77:60:ff:1d:26:2a:14:38:f1:2e:
         58:b8:d3:f5:49:85:9f:8e:66:0e:e2:1e:11:5a:64:a6:ed:a1:
         f2:c9:c4:7f:5a:d3:8f:5f:af:9e:3e:cc:8d:c5:c2:06:bb:b2:
         df:13:35:c9:90:8a:df:f4:25:7d:4c:35:b2:82:03:2b:c0:3f:
         85:96:45:be:e7:91:db:49:9b:c0:5f:b7:6d:dd:d4:59:11:10:
         ff:96:15:70:da:60:58:59:54:79:a2:56:9d:0e:d4:0d:5f:08:
         8d:8c:60:42:1e:6b:91:95:ba:5b:0d:44:11:8a:5e:31:a7:29:
         fc:e0:eb:ef:91:b1:94:c0:dd:41:53:d3:57:60:5d:9c:a5:58:
         7e:62:29:b1:c1:2d:9d:40:73:45:73:9d:f5:13:25:f3:22:e8:
         4b:38:36:ce:3d:96:53:b4:ec:75:3d:3b:29:15:ba:d9:96:6a:
         9b:92:60:11:1e:40:dd:0a:9f:bb:bb:a4:f2:37:6b:f7:ec:b9:
         6f:7e:02:fb:8e:1b:ae:1a:6f:51:d5:44:b8:7d:43:50:9e:cd:
         3f:ea:2f:24:99:4c:7b:e9:81:78:fe:01:ef:ec:be:bd:62:49:
         bf:1a:34:89
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEsQNUnoaLL3vWJSHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDkzZDE0M2YtMDA5YS00ZjdjLWJlYjQtY2U5YzczMzUy
NDE3MB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk
N2M2Zjg5ZjYtZmIxNy00MzE4LWFjYjQtNDZiZWYwNDBiNjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIliCtmU+zvocISFKEqtn60VUW3SB+mGUOpV
HlJKRZpzUKu3lzeK7zrmLegd5cjGNW62/Unh/5xR5EhUARCjcLe7NLRZmOuc6H3h
3/x9NijHwoimpEXhVWFDSquXKVWPJWM2X6FqewtGSrUbaUMOVxhSsbw7lGYkcCrd
lQXFNWEYa7ri/z8fQ6ho8KhUxWO9PgZHjTeHeMCStm250jjl+tl8xvkHXKe7ibCt
oFbI8Ra3FZvWtzWjHE7nhsQreVfQT2VmroWA+Qa+KgMEql/xMEh27HeOdpniXKZK
icSTht5XE0JoDsDbBdnZSNpOT4ODFf2metLMdnAMnCB2h/CxNwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFIdpzrQqTXAqf2rh1upGMpCjMCg7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wOTNk
MTQzZi0wMDlhLTRmN2MtYmViNC1jZTljNzMzNTI0MTcvY2ZhOTI2OGQtNTBlNi0z
ZTliLWEyNDktMTkxMDYwN2MzNjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDkzZDE0M2YtMDA5YS00ZjdjLWJl
YjQtY2U5YzczMzUyNDE3LzA5M2QxNDNmLTAwOWEtNGY3Yy1iZWI0LWNlOWM3MzM1
MjQxNy5jcmwwHwYDVR0jBBgwFoAUwwrscmITHMiOguUvQ7Yv6opL3nQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wOTNkMTQzZi0wMDlhLTRmN2MtYmViNC1jZTlj
NzMzNTI0MTcuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBF6Q4AwQA
wGQFMA4EAgACMAgDBgQmAvl0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXhnR49JyZmbWvQhVTIoxO9MaA
pecPU+p3U3dg/x0mKhQ48S5YuNP1SYWfjmYO4h4RWmSm7aHyycR/WtOPX6+ePsyN
xcIGu7LfEzXJkIrf9CV9TDWyggMrwD+FlkW+55HbSZvAX7dt3dRZERD/lhVw2mBY
WVR5oladDtQNXwiNjGBCHmuRlbpbDUQRil4xpyn84OvvkbGUwN1BU9NXYF2cpVh+
YimxwS2dQHNFc531EyXzIuhLODbOPZZTtOx1PTspFbrZlmqbkmARHkDdCp+7u6Ty
N2v37LlvfgL7jhuuGm9R1US4fUNQns0/6i8kmUx76YF4/gHv7L69Ykm/GjSJ
-----END CERTIFICATE-----
Generated at Mon Sep 15 19:02:53 2025 by rpki-client