Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/1603cbf9-6136-3a09-b863-4ccf1942a0c5.roa
File:                     1603cbf9-6136-3a09-b863-4ccf1942a0c5.roa (raw, json)
Hash identifier:          5s1TUb3eeYwc2D0IeO5ASMl3soyXhu98xkXC4f8PrRw=
Subject key identifier:   63:B5:65:BE:27:1D:E2:89:DE:A0:9C:2E:62:06:DD:F6:1A:C3:A5:00
Certificate issuer:       /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
Certificate serial:       010D0C9F4328584B4E7716755C32A13EF05FE200
Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/1603cbf9-6136-3a09-b863-4ccf1942a0c5.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        23.162.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:16:75:5c:32:a1:3e:f0:5f:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=def96150-0206-4477-8e64-2e18e10fd2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:c0:c2:f3:2b:c0:49:4b:9d:92:0e:f3:d8:
                    c2:bc:91:3f:52:79:34:7a:60:4e:1b:53:7b:f0:cb:
                    ef:b3:0d:65:6d:29:6b:dd:44:d3:cc:ac:9d:c5:a9:
                    8a:b5:36:5b:12:97:5f:bb:15:94:31:19:87:78:d1:
                    73:87:01:18:f7:2a:25:04:5d:db:5c:84:b1:02:dd:
                    1b:31:c1:b1:b3:5a:05:44:e9:d5:d4:da:05:a6:0c:
                    6a:cf:ff:69:05:4f:0f:3c:9d:b6:7b:5d:6d:e2:06:
                    d0:02:9b:f9:ad:99:73:e2:81:b2:7e:58:f6:95:d0:
                    d9:ff:ca:c2:92:cc:90:d5:09:0c:42:c8:15:9b:41:
                    09:8c:43:e7:84:a5:4a:07:95:4f:d6:30:ab:46:99:
                    4a:0a:09:69:6d:7e:5f:1f:55:21:45:5d:77:b9:2a:
                    b4:d2:89:8d:3e:7f:5d:fd:67:4e:aa:68:e6:3e:ef:
                    2b:80:b2:18:fa:15:25:f2:08:5c:ed:80:62:b6:31:
                    9b:4b:0e:af:ca:96:2b:f0:1d:a2:f9:1c:0d:cd:6b:
                    fc:99:57:28:b9:bb:f3:79:2a:9a:18:5b:dc:d2:47:
                    dd:e1:73:b0:8c:08:3d:a4:17:2b:f6:49:ce:b3:7c:
                    40:9b:a0:e9:09:1f:23:53:5e:c6:0f:44:3d:61:48:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B5:65:BE:27:1D:E2:89:DE:A0:9C:2E:62:06:DD:F6:1A:C3:A5:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/1603cbf9-6136-3a09-b863-4ccf1942a0c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl

            X509v3 Authority Key Identifier:
                keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:07:8d:f0:ab:af:c5:41:92:4b:c8:94:5f:ce:9f:2a:d1:80:
         18:54:f3:ed:81:c1:90:54:34:81:54:57:18:65:60:18:15:61:
         b7:fc:d0:fb:66:85:83:d3:7d:82:05:09:23:fd:1f:39:d4:45:
         41:0f:23:43:c9:cd:e2:1c:7b:05:0e:ff:de:d2:ca:dc:5f:54:
         07:50:f0:20:91:d0:ae:ea:de:f5:3d:06:57:85:38:aa:44:16:
         75:4e:78:4e:33:76:bc:4d:fb:b9:17:15:96:82:c1:df:c9:77:
         d2:18:cf:b8:25:3a:ca:be:8d:84:36:67:ca:54:6d:32:21:f9:
         f8:c8:8d:0d:5c:95:b9:d0:e5:01:d6:50:53:44:76:6d:b9:d7:
         c0:6c:02:f4:77:31:18:9e:68:97:5c:3a:0c:ce:6d:03:b9:0f:
         9e:03:84:09:ca:a7:4d:6c:0b:1a:8e:5a:9b:f4:87:86:4a:a0:
         df:29:c5:71:ce:f6:87:f9:c2:e0:4a:92:23:0e:68:00:73:2e:
         3c:78:aa:cc:75:1a:5f:69:6c:a4:61:b5:9c:09:24:30:3b:7d:
         7b:e3:58:f7:c5:0a:d3:ee:42:e0:31:86:f0:a1:74:42:1a:29:
         1d:75:28:22:46:24:4c:f6:39:94:56:fe:69:35:0e:6f:1f:d8:
         f7:13:57:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxZ1XDKhPvBf4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGZmNTVmYmUtMzljMi00NWI0LTlhYTItNjAxNjJkNGUy
OTMyMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk
ZGVmOTYxNTAtMDIwNi00NDc3LThlNjQtMmUxOGUxMGZkMmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLvAwvMrwElLnZIO89jCvJE/Unk0emBOG1N7
8Mvvsw1lbSlr3UTTzKydxamKtTZbEpdfuxWUMRmHeNFzhwEY9yolBF3bXISxAt0b
McGxs1oFROnV1NoFpgxqz/9pBU8PPJ22e11t4gbQApv5rZlz4oGyflj2ldDZ/8rC
ksyQ1QkMQsgVm0EJjEPnhKVKB5VP1jCrRplKCglpbX5fH1UhRV13uSq00omNPn9d
/WdOqmjmPu8rgLIY+hUl8ghc7YBitjGbSw6vypYr8B2i+RwNzWv8mVcoubvzeSqa
GFvc0kfd4XOwjAg9pBcr9knOs3xAm6DpCR8jU17GD0Q9YUjfBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGO1Zb4nHeKJ3qCcLmIG3fYaw6UAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZmY1
NWZiZS0zOWMyLTQ1YjQtOWFhMi02MDE2MmQ0ZTI5MzIvMTYwM2NiZjktNjEzNi0z
YTA5LWI4NjMtNGNjZjE5NDJhMGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGZmNTVmYmUtMzljMi00NWI0LTlh
YTItNjAxNjJkNGUyOTMyLzRmZjU1ZmJlLTM5YzItNDViNC05YWEyLTYwMTYyZDRl
MjkzMi5jcmwwHwYDVR0jBBgwFoAUHP9AdpG2YPFJ/JUDj4ksEk1MAVswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZmY1NWZiZS0zOWMyLTQ1YjQtOWFhMi02MDE2
MmQ0ZTI5MzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6K4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwHjfCrr8VBkkvIlF/OnyrRgBhU8+2BwZBUNIFUVxhlYBgVYbf80Ptm
hYPTfYIFCSP9HznURUEPI0PJzeIcewUO/97SytxfVAdQ8CCR0K7q3vU9BleFOKpE
FnVOeE4zdrxN+7kXFZaCwd/Jd9IYz7glOsq+jYQ2Z8pUbTIh+fjIjQ1clbnQ5QHW
UFNEdm2518BsAvR3MRieaJdcOgzObQO5D54DhAnKp01sCxqOWpv0h4ZKoN8pxXHO
9of5wuBKkiMOaABzLjx4qsx1Gl9pbKRhtZwJJDA7fXvjWPfFCtPuQuAxhvChdEIa
KR11KCJGJEz2OZRW/mk1Dm8f2PcTVyU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:52:37 2025 by rpki-client