Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/af328904-d764-39ee-a186-96c8bedcee04.roa
File:                     af328904-d764-39ee-a186-96c8bedcee04.roa (raw, json)
Hash identifier:          aW0ZMmfZGKTWU+aCxAGtORBCi/AH1gxLvNUEToBLOgY=
Subject key identifier:   96:39:C7:BB:C1:92:9F:20:CE:C3:96:93:E2:9F:45:82:45:3B:D0:6D
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584B98723C0C541EC11DA217A380
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/af328904-d764-39ee-a186-96c8bedcee04.roa
Signing time:             Tue 21 Oct 2025 13:00:39 +0000
ROA not before:           Tue 21 Oct 2025 13:00:39 +0000
ROA not after:            Mon 19 Jan 2026 14:00:39 +0000
asID:                     153371
IP address blocks:        23.165.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:72:3c:0c:54:1e:c1:1d:a2:17:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Oct 21 13:00:39 2025 GMT
            Not After : Jan 19 14:00:39 2026 GMT
        Subject: CN=7764b2ad-6f88-4097-ac38-9f48412284dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:92:a3:a5:07:1d:57:1c:98:67:e2:74:79:
                    8b:b8:5e:4b:a5:fb:7c:e4:8a:41:02:18:44:f3:f0:
                    3c:89:a5:bf:1c:d4:a6:06:4f:5f:91:86:71:6e:1d:
                    a0:a7:d2:51:7e:a0:e6:1d:71:f3:06:bc:e1:45:5c:
                    b6:fc:9a:dc:b2:eb:28:a1:55:f0:0c:4b:47:9b:bc:
                    82:e0:83:ac:e0:2c:df:d7:09:bf:fa:eb:87:5f:44:
                    9a:78:c6:74:72:1a:90:00:1b:07:a0:36:3a:90:64:
                    95:70:52:0f:80:d8:93:82:c1:9e:6a:07:50:57:ca:
                    d0:86:73:8c:ae:73:3d:1c:1e:94:c0:15:0f:7b:b1:
                    1c:29:94:f3:ee:0f:65:11:0c:0d:61:bb:f6:7e:bb:
                    05:ae:61:1c:62:5e:67:bd:03:cb:ea:8b:43:6d:5a:
                    82:63:d5:9f:8b:bb:25:0a:14:53:92:d0:d8:72:c9:
                    c4:1a:ef:9c:28:1e:ec:b3:53:a3:f9:ab:33:29:25:
                    2a:62:e8:db:d7:1b:b1:0e:40:e5:3b:dd:db:32:46:
                    75:3d:fd:ac:4b:74:27:27:ca:16:45:90:3a:15:40:
                    95:f3:3c:3b:66:1d:7b:65:86:3e:23:e7:38:c7:0c:
                    22:4a:cc:dd:80:08:26:77:bc:2e:de:67:53:33:a3:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:39:C7:BB:C1:92:9F:20:CE:C3:96:93:E2:9F:45:82:45:3B:D0:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/af328904-d764-39ee-a186-96c8bedcee04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c5:7d:71:e8:a8:cb:f2:53:27:e6:f9:9a:db:ef:49:2f:dc:
         fa:68:db:e0:21:61:8b:74:c1:05:6f:43:0d:d5:c1:d3:28:aa:
         c0:e6:47:71:a5:17:54:86:c1:93:b7:67:44:42:0c:41:a0:9f:
         09:39:1f:df:43:e4:b3:37:43:44:1e:21:ae:53:a9:8c:e8:4a:
         83:60:03:c9:5e:9c:20:55:28:7a:bb:4c:05:05:80:30:08:61:
         3b:c1:89:77:76:32:e9:97:12:71:3f:00:08:5f:e8:d3:6a:89:
         67:ea:d6:d4:76:2a:b8:78:2a:02:7f:fa:ea:07:e7:45:0d:81:
         52:e7:0c:a1:4b:12:67:08:3f:74:c2:d8:48:fc:d5:dc:ec:04:
         c1:bf:ed:f7:f7:c0:4d:bf:1e:da:b3:8b:84:f9:70:d9:85:25:
         d8:05:66:fd:35:ff:d8:ab:61:b7:ef:90:45:04:fd:1d:9f:f1:
         3b:38:c4:e6:19:bb:0f:61:83:b4:56:4e:34:5e:31:c6:00:a8:
         bb:6e:17:e0:e4:66:35:78:d8:d5:48:17:73:60:bc:c7:12:a3:
         a1:3e:3a:ee:21:7f:c1:4d:a5:3b:ca:bb:98:41:c1:56:8b:84:
         82:84:ae:73:b6:f8:5c:95:3f:13:bb:ac:69:0e:15:d3:81:18:
         f9:85:53:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYcjwMVB7BHaIXo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2Ew
NjZjMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk
Nzc2NGIyYWQtNmY4OC00MDk3LWFjMzgtOWY0ODQxMjI4NGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubmSo6UHHVccmGfidHmLuF5Lpft85IpBAhhE
8/A8iaW/HNSmBk9fkYZxbh2gp9JRfqDmHXHzBrzhRVy2/JrcsusooVXwDEtHm7yC
4IOs4Czf1wm/+uuHX0SaeMZ0chqQABsHoDY6kGSVcFIPgNiTgsGeagdQV8rQhnOM
rnM9HB6UwBUPe7EcKZTz7g9lEQwNYbv2frsFrmEcYl5nvQPL6otDbVqCY9Wfi7sl
ChRTktDYcsnEGu+cKB7ss1Oj+aszKSUqYujb1xuxDkDlO93bMkZ1Pf2sS3QnJ8oW
RZA6FUCV8zw7Zh17ZYY+I+c4xwwiSszdgAgmd7wu3mdTM6NapQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJY5x7vBkp8gzsOWk+KfRYJFO9BtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0
NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvYWYzMjg5MDQtZDc2NC0z
OWVlLWExODYtOTZjOGJlZGNlZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTIzNDY0OWQtYWI0OS00NThiLWE1
ZTMtNzc2NWZlN2EwNjZjL2EyMzQ2NDlkLWFiNDktNDU4Yi1hNWUzLTc3NjVmZTdh
MDY2Yy5jcmwwHwYDVR0jBBgwFoAUnwPnGl9Cgsne7AuhH5BI9Fd9oZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1
ZmU3YTA2NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6W4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXFfXHoqMvyUyfm+Zrb70kv3Ppo2+AhYYt0wQVvQw3VwdMoqsDmR3Gl
F1SGwZO3Z0RCDEGgnwk5H99D5LM3Q0QeIa5TqYzoSoNgA8lenCBVKHq7TAUFgDAI
YTvBiXd2MumXEnE/AAhf6NNqiWfq1tR2Krh4KgJ/+uoH50UNgVLnDKFLEmcIP3TC
2Ej81dzsBMG/7ff3wE2/Htqzi4T5cNmFJdgFZv01/9irYbfvkEUE/R2f8Ts4xOYZ
uw9hg7RWTjReMcYAqLtuF+DkZjV42NVIF3NgvMcSo6E+Ou4hf8FNpTvKu5hBwVaL
hIKErnO2+FyVPxO7rGkOFdOBGPmFU84=
-----END CERTIFICATE-----
Generated at Wed Oct 22 19:00:28 2025 by rpki-client