Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b26fc97f-e871-3a2c-b162-3c09f65fe0f1.roa
File:                     b26fc97f-e871-3a2c-b162-3c09f65fe0f1.roa (raw, json)
Hash identifier:          NjlVF/A8FjQUwkWBy8JZ26PDvHDo8iNkswqI5w8UfqE=
Subject key identifier:   BA:87:36:15:A1:05:28:27:C2:37:0A:DE:E8:49:59:C5:E2:18:86:8E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849C76A0ADF4D803DD3E82FAA00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b26fc97f-e871-3a2c-b162-3c09f65fe0f1.roa
Signing time:             Wed 07 May 2025 23:13:21 +0000
ROA not before:           Wed 07 May 2025 23:13:21 +0000
ROA not after:            Tue 05 Aug 2025 23:13:21 +0000
asID:                     19157
IP address blocks:        23.86.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:6a:0a:df:4d:80:3d:d3:e8:2f:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  7 23:13:21 2025 GMT
            Not After : Aug  5 23:13:21 2025 GMT
        Subject: CN=15ae7ada-6bd1-4745-a270-ed1874f4b3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:4d:92:8f:af:29:f7:43:59:36:84:cd:95:
                    2b:fe:d2:e2:8a:09:a7:5d:84:a8:99:51:d8:d3:b7:
                    19:44:a6:7f:85:ce:23:88:cf:28:bc:59:e1:50:cc:
                    cc:61:49:88:e4:33:1e:6a:63:dc:91:68:23:11:52:
                    59:29:96:05:c3:db:44:33:80:76:4f:c3:d6:81:1f:
                    0d:6a:32:47:02:dd:9e:f8:36:f4:8d:d9:ae:58:fb:
                    e2:1b:a8:9e:8f:b1:38:3c:7e:75:d0:e5:08:4f:00:
                    e4:34:05:8b:f8:d6:82:4a:27:58:7a:ce:82:8a:50:
                    cb:48:dd:4e:9d:e8:1c:90:c3:1e:ac:05:89:2f:4f:
                    48:dd:bd:bf:55:2c:bf:71:f1:83:0f:db:22:93:4a:
                    70:8f:c1:10:f1:bf:85:0a:b0:8b:d7:f0:ac:c0:1a:
                    69:fe:d2:1e:76:c5:0c:a3:a4:85:63:fd:06:e2:cc:
                    1e:0d:57:11:08:af:1b:82:02:a3:e2:3a:00:a5:62:
                    0c:0f:0a:19:ee:ed:1d:3c:0e:71:53:7b:65:0e:2e:
                    da:84:b4:12:4b:70:40:f9:81:ea:6b:58:95:43:5d:
                    80:4f:fa:bb:2a:1c:6f:b5:15:55:f6:9a:44:3e:08:
                    33:48:47:42:39:f9:e0:b0:69:4a:30:50:ae:e0:6b:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:87:36:15:A1:05:28:27:C2:37:0A:DE:E8:49:59:C5:E2:18:86:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b26fc97f-e871-3a2c-b162-3c09f65fe0f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0c:62:ec:b0:37:d0:ef:30:e8:8f:9c:14:92:b8:86:b8:ad:
         09:9c:e4:65:82:9b:99:a7:e5:1c:d9:25:10:0b:49:5b:64:c9:
         ce:4a:53:96:00:fd:a5:45:90:c2:91:83:df:3f:39:00:b1:1b:
         77:9d:3d:dd:04:df:e6:bb:e3:a1:7e:e2:bc:f9:22:07:55:dc:
         c7:b9:f3:31:b8:94:13:f6:8b:68:e8:ac:6b:65:33:6a:d8:68:
         0d:e0:33:bb:ca:0f:8e:bc:c1:e4:d6:d5:11:d0:4b:8c:a3:11:
         57:36:f8:bb:12:66:7e:7a:8b:19:51:b8:9c:ee:ad:d6:5b:ef:
         e4:76:20:4d:df:79:e6:93:54:66:87:a9:ad:9d:1f:39:fe:f2:
         1b:fe:20:51:88:e3:00:98:06:dc:a2:b8:ab:57:15:82:7e:2d:
         c9:0b:cd:d4:76:b8:a7:a8:b8:c6:c1:60:e7:d5:1f:9b:9a:ed:
         27:aa:8f:f2:05:ae:36:8e:03:d8:43:ba:a1:d7:f3:85:21:a9:
         99:8f:ea:6b:4a:8f:93:b8:af:ee:f2:88:d7:d8:a9:d5:56:0a:
         45:f0:c3:5c:95:c0:20:3c:2a:75:5b:7f:99:a9:5a:4f:97:24:
         df:09:a4:51:0b:ef:72:c1:b8:b2:90:a9:40:a8:61:6d:0f:80:
         48:88:e6:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHagrfTYA90+gvqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNzIzMTMyMVoXDTI1MDgwNTIzMTMyMVowLzEtMCsGA1UEAxMk
MTVhZTdhZGEtNmJkMS00NzQ1LWEyNzAtZWQxODc0ZjRiM2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYVNko+vKfdDWTaEzZUr/tLiigmnXYSomVHY
07cZRKZ/hc4jiM8ovFnhUMzMYUmI5DMeamPckWgjEVJZKZYFw9tEM4B2T8PWgR8N
ajJHAt2e+Db0jdmuWPviG6iej7E4PH510OUITwDkNAWL+NaCSidYes6CilDLSN1O
negckMMerAWJL09I3b2/VSy/cfGDD9sik0pwj8EQ8b+FCrCL1/CswBpp/tIedsUM
o6SFY/0G4sweDVcRCK8bggKj4joApWIMDwoZ7u0dPA5xU3tlDi7ahLQSS3BA+YHq
a1iVQ12AT/q7KhxvtRVV9ppEPggzSEdCOfngsGlKMFCu4GsKnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqHNhWhBSgnwjcK3uhJWcXiGIaOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYjI2ZmM5N2YtZTg3MS0z
YTJjLWIxNjItM2MwOWY2NWZlMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF1YOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYMYuywN9DvMOiPnBSSuIa4rQmc5GWCm5mn5RzZJRALSVtkyc5KU5YA
/aVFkMKRg98/OQCxG3edPd0E3+a746F+4rz5IgdV3Me58zG4lBP2i2jorGtlM2rY
aA3gM7vKD468weTW1RHQS4yjEVc2+LsSZn56ixlRuJzurdZb7+R2IE3feeaTVGaH
qa2dHzn+8hv+IFGI4wCYBtyiuKtXFYJ+LckLzdR2uKeouMbBYOfVH5ua7Seqj/IF
rjaOA9hDuqHX84UhqZmP6mtKj5O4r+7yiNfYqdVWCkXww1yVwCA8KnVbf5mpWk+X
JN8JpFEL73LBuLKQqUCoYW0PgEiI5ic=
-----END CERTIFICATE-----
Generated at Wed Jun 4 10:32:20 2025 by rpki-client