Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/1603cbf9-6136-3a09-b863-4ccf1942a0c5.roa
File:                     1603cbf9-6136-3a09-b863-4ccf1942a0c5.roa (raw, json)
Hash identifier:          DKbheyK2yjj15IXg7UWugwo5vv4v/gOP0hEFjufN908=
Subject key identifier:   59:E6:7F:44:9A:DF:F0:84:FE:76:A4:5A:92:FE:6B:21:59:F1:33:C0
Certificate issuer:       /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
Certificate serial:       010D0C9F4328584A6DBB45C8F9B51288E52C6A80
Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/1603cbf9-6136-3a09-b863-4ccf1942a0c5.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        23.162.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:45:c8:f9:b5:12:88:e5:2c:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=82054359-fd9e-4ff9-ba55-57f2b42b9025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bb:d4:e0:a7:40:61:31:8e:79:90:4a:ee:1f:
                    b5:b7:51:4b:49:4f:09:65:43:66:b2:a9:df:3d:16:
                    6e:15:78:8f:d7:a7:8e:9c:cb:f2:ec:9d:76:ef:5d:
                    cd:3d:03:fb:94:5e:24:8f:38:11:d7:ff:4b:8b:fb:
                    b2:37:01:fb:06:b1:1a:a9:69:59:8e:77:08:5d:41:
                    9c:ce:ef:60:d0:0a:19:05:3d:65:dd:62:de:45:b2:
                    cc:a7:da:d7:6c:5d:40:b3:4c:11:27:15:a5:bd:7c:
                    e7:ae:ee:5d:e5:4c:25:e0:42:81:ae:c6:7e:d9:18:
                    90:7f:50:0b:f9:45:9e:d9:80:fa:77:84:96:6f:c0:
                    eb:f0:59:0d:1a:fb:04:e4:36:2c:93:0c:70:cd:cb:
                    ea:85:0a:35:e6:a8:53:18:d2:4d:ef:68:93:35:c7:
                    56:dd:2d:17:49:5a:40:fb:a5:3c:6a:d1:fd:af:28:
                    1b:34:0f:86:a7:75:26:18:bb:27:41:82:a9:44:43:
                    93:fb:08:77:ef:c3:37:3e:dc:de:35:38:37:b7:bb:
                    e2:b3:f8:90:ce:67:6f:fa:61:1e:83:d9:18:88:05:
                    48:16:5d:12:99:38:79:86:75:37:36:a6:a7:6c:b5:
                    e1:3d:5b:27:4d:c2:7a:76:3a:7a:9c:c3:b3:ef:da:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E6:7F:44:9A:DF:F0:84:FE:76:A4:5A:92:FE:6B:21:59:F1:33:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/1603cbf9-6136-3a09-b863-4ccf1942a0c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl

            X509v3 Authority Key Identifier:
                keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:71:19:29:98:05:62:44:10:b1:1e:01:e7:87:4d:0c:b5:bd:
         73:6e:4b:5f:c4:45:95:e3:e1:b3:12:2b:6f:74:8b:78:ce:e6:
         5d:8f:b1:da:e8:82:6d:40:f2:e6:e7:aa:01:4f:21:e1:d7:53:
         ca:d9:6f:37:43:02:02:7d:23:dc:6d:7c:6f:91:af:47:c4:7e:
         c5:53:69:25:0c:97:0a:b8:6c:97:93:8f:99:23:d0:e8:b8:c0:
         a7:c0:f2:34:1e:df:0f:fd:0a:f6:05:86:ed:bb:25:32:f2:7a:
         1e:d7:4d:66:89:2e:ce:79:96:6c:5d:59:fc:ea:f0:0f:bb:11:
         c2:3a:9b:f9:9e:85:70:8d:6a:97:a6:ca:fd:c3:94:98:75:4f:
         c8:7b:88:a1:58:3e:62:e2:f9:04:15:0e:9d:99:86:f1:7b:8c:
         3a:11:62:c6:69:e8:b6:6e:1e:5f:a9:08:de:56:e4:93:c9:8a:
         ca:06:fc:42:f4:08:7b:1a:04:80:85:58:ce:09:03:c5:a4:a5:
         e5:93:8c:a0:dd:51:30:9f:7c:0d:f4:e1:fd:fd:74:fb:c7:ca:
         4c:60:e1:e5:1c:84:54:e0:ef:58:bc:06:07:a3:06:18:a7:d5:
         7a:23:5f:37:c9:c4:52:f8:2b:5e:e2:bb:c5:c6:9a:14:79:97:
         1b:03:6e:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu0XI+bUSiOUsaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGZmNTVmYmUtMzljMi00NWI0LTlhYTItNjAxNjJkNGUy
OTMyMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
ODIwNTQzNTktZmQ5ZS00ZmY5LWJhNTUtNTdmMmI0MmI5MDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbvU4KdAYTGOeZBK7h+1t1FLSU8JZUNmsqnf
PRZuFXiP16eOnMvy7J12713NPQP7lF4kjzgR1/9Li/uyNwH7BrEaqWlZjncIXUGc
zu9g0AoZBT1l3WLeRbLMp9rXbF1As0wRJxWlvXznru5d5Uwl4EKBrsZ+2RiQf1AL
+UWe2YD6d4SWb8Dr8FkNGvsE5DYskwxwzcvqhQo15qhTGNJN72iTNcdW3S0XSVpA
+6U8atH9rygbNA+Gp3UmGLsnQYKpREOT+wh378M3PtzeNTg3t7vis/iQzmdv+mEe
g9kYiAVIFl0SmTh5hnU3NqanbLXhPVsnTcJ6djp6nMOz79rgBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFnmf0Sa3/CE/nakWpL+ayFZ8TPAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZmY1
NWZiZS0zOWMyLTQ1YjQtOWFhMi02MDE2MmQ0ZTI5MzIvMTYwM2NiZjktNjEzNi0z
YTA5LWI4NjMtNGNjZjE5NDJhMGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGZmNTVmYmUtMzljMi00NWI0LTlh
YTItNjAxNjJkNGUyOTMyLzRmZjU1ZmJlLTM5YzItNDViNC05YWEyLTYwMTYyZDRl
MjkzMi5jcmwwHwYDVR0jBBgwFoAUHP9AdpG2YPFJ/JUDj4ksEk1MAVswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZmY1NWZiZS0zOWMyLTQ1YjQtOWFhMi02MDE2
MmQ0ZTI5MzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6K4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHRxGSmYBWJEELEeAeeHTQy1vXNuS1/ERZXj4bMSK290i3jO5l2Psdro
gm1A8ubnqgFPIeHXU8rZbzdDAgJ9I9xtfG+Rr0fEfsVTaSUMlwq4bJeTj5kj0Oi4
wKfA8jQe3w/9CvYFhu27JTLyeh7XTWaJLs55lmxdWfzq8A+7EcI6m/mehXCNapem
yv3DlJh1T8h7iKFYPmLi+QQVDp2ZhvF7jDoRYsZp6LZuHl+pCN5W5JPJisoG/EL0
CHsaBICFWM4JA8WkpeWTjKDdUTCffA304f39dPvHykxg4eUchFTg71i8BgejBhin
1XojXzfJxFL4K17iu8XGmhR5lxsDbtw=
-----END CERTIFICATE-----
Generated at Wed Jul 9 20:42:33 2025 by rpki-client