Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/17369805-816a-403b-8152-a524c5c6d7b0/982bbf69-ac15-3649-8e1e-8eeeca3c118b.roa
File:                     982bbf69-ac15-3649-8e1e-8eeeca3c118b.roa (raw, json)
Hash identifier:          05MGoCQbZfNCas2+A9MReTOn1jW9Y8e6i3q2ccW4Ti4=
Subject key identifier:   85:10:48:15:95:05:CD:D7:B9:88:1B:05:D7:C3:A6:A8:D9:62:A0:36
Certificate issuer:       /CN=17369805-816a-403b-8152-a524c5c6d7b0
Certificate serial:       010D0C9F4328584AF95141C5D23213F9F91D6B00
Authority key identifier: DE:0F:BA:7D:B5:FA:F9:22:A1:F1:0A:69:CA:D4:49:7E:64:A4:AE:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/17369805-816a-403b-8152-a524c5c6d7b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/17369805-816a-403b-8152-a524c5c6d7b0/982bbf69-ac15-3649-8e1e-8eeeca3c118b.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     1015
IP address blocks:        23.136.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/17369805-816a-403b-8152-a524c5c6d7b0/17369805-816a-403b-8152-a524c5c6d7b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/17369805-816a-403b-8152-a524c5c6d7b0/17369805-816a-403b-8152-a524c5c6d7b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/17369805-816a-403b-8152-a524c5c6d7b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:41:c5:d2:32:13:f9:f9:1d:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17369805-816a-403b-8152-a524c5c6d7b0
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=f26e03c1-2241-4903-b835-9fc1942eab78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:64:a8:a1:29:52:e7:84:32:f5:5b:1d:ef:
                    16:68:50:6b:1c:d1:3a:98:ff:b8:ed:49:60:89:a6:
                    8e:ef:99:c0:0e:09:3f:5d:8a:6a:83:67:b7:45:dc:
                    47:b4:0d:38:65:b5:47:57:b9:de:3f:e9:da:89:7a:
                    b7:fd:f6:91:fb:08:73:5a:8b:9e:41:92:5a:36:d6:
                    cf:da:64:89:1f:7c:0a:88:52:12:82:de:fb:ee:72:
                    6e:ac:77:c2:f7:c9:4c:d5:5e:80:58:bf:32:fa:93:
                    8e:32:a8:98:d8:78:f4:de:4a:2f:0b:f6:31:8e:05:
                    ce:0e:cb:71:a0:55:ea:08:42:0b:63:69:ca:04:d1:
                    af:27:8d:75:b4:a1:de:ba:7a:04:25:f7:9a:c2:a2:
                    9c:9b:f0:ef:5b:cd:54:4d:16:de:f3:0b:10:ba:d1:
                    e6:0e:28:2c:49:e3:f7:fb:8f:36:a5:f3:8d:da:17:
                    f1:e1:70:0c:b3:40:85:ce:62:4a:80:ab:a5:fa:ae:
                    3e:66:62:73:a4:16:2d:16:60:71:9b:7e:99:06:ad:
                    a8:1d:1e:89:b5:5b:70:27:ff:6c:d0:6c:2e:8b:2c:
                    f1:89:63:2f:fd:bf:fd:d4:73:78:be:6f:ee:a6:7a:
                    d2:1f:88:c4:78:73:39:aa:a9:52:a7:8d:ca:6b:64:
                    50:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:10:48:15:95:05:CD:D7:B9:88:1B:05:D7:C3:A6:A8:D9:62:A0:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/17369805-816a-403b-8152-a524c5c6d7b0/982bbf69-ac15-3649-8e1e-8eeeca3c118b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/17369805-816a-403b-8152-a524c5c6d7b0/17369805-816a-403b-8152-a524c5c6d7b0.crl

            X509v3 Authority Key Identifier:
                keyid:DE:0F:BA:7D:B5:FA:F9:22:A1:F1:0A:69:CA:D4:49:7E:64:A4:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/17369805-816a-403b-8152-a524c5c6d7b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ed:91:9b:93:00:65:c4:e6:a2:e3:3a:e0:59:d1:ca:49:01:
         95:13:78:b2:13:c5:30:f9:63:c6:32:b8:32:e5:7b:2d:f3:6e:
         aa:fc:b0:31:23:eb:f4:ee:f0:6b:13:35:5c:d8:fd:5a:e7:90:
         4c:ec:6e:bd:f6:77:7d:6e:d1:73:cc:33:31:77:1f:d8:59:ec:
         38:97:fe:e0:54:1b:47:6e:fb:33:ab:90:21:29:aa:86:7f:57:
         62:3d:23:23:01:fb:23:73:00:0c:f7:c0:af:ea:4e:f3:a4:83:
         25:03:29:18:b9:4b:2c:57:7b:bc:da:c0:56:bc:52:8f:e8:f7:
         aa:f3:18:1d:ae:73:7c:91:96:0d:3f:19:7f:95:cd:c1:90:d7:
         75:9c:31:b4:35:70:a1:9d:9f:3c:80:c4:3e:75:0c:9f:ed:63:
         f0:0e:c8:32:fc:95:aa:8e:a0:22:82:40:cf:d4:62:33:96:21:
         60:92:d3:d5:eb:f6:0e:83:6a:a2:ba:a9:8a:c1:e7:77:7b:31:
         5a:bd:79:9e:3c:b3:6a:03:3a:b1:d0:93:b1:18:88:98:13:e6:
         d5:3f:27:a2:a7:16:ec:4c:b7:62:b5:5c:9c:8e:50:c7:c1:7e:
         b8:ba:f9:a6:1f:b6:c2:6b:60:f0:75:52:73:b7:c0:de:85:ef:
         b0:a4:fc:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUHF0jIT+fkdawAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTczNjk4MDUtODE2YS00MDNiLTgxNTItYTUyNGM1YzZk
N2IwMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk
ZjI2ZTAzYzEtMjI0MS00OTAzLWI4MzUtOWZjMTk0MmVhYjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuptkqKEpUueEMvVbHe8WaFBrHNE6mP+47Ulg
iaaO75nADgk/XYpqg2e3RdxHtA04ZbVHV7neP+naiXq3/faR+whzWoueQZJaNtbP
2mSJH3wKiFISgt777nJurHfC98lM1V6AWL8y+pOOMqiY2Hj03kovC/YxjgXODstx
oFXqCEILY2nKBNGvJ411tKHeunoEJfeawqKcm/DvW81UTRbe8wsQutHmDigsSeP3
+482pfON2hfx4XAMs0CFzmJKgKul+q4+ZmJzpBYtFmBxm36ZBq2oHR6JtVtwJ/9s
0GwuiyzxiWMv/b/91HN4vm/upnrSH4jEeHM5qqlSp43Ka2RQwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIUQSBWVBc3XuYgbBdfDpqjZYqA2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xNzM2
OTgwNS04MTZhLTQwM2ItODE1Mi1hNTI0YzVjNmQ3YjAvOTgyYmJmNjktYWMxNS0z
NjQ5LThlMWUtOGVlZWNhM2MxMThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTczNjk4MDUtODE2YS00MDNiLTgx
NTItYTUyNGM1YzZkN2IwLzE3MzY5ODA1LTgxNmEtNDAzYi04MTUyLWE1MjRjNWM2
ZDdiMC5jcmwwHwYDVR0jBBgwFoAU3g+6fbX6+SKh8QppytRJfmSkrvUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xNzM2OTgwNS04MTZhLTQwM2ItODE1Mi1hNTI0
YzVjNmQ3YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4gcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABDtkZuTAGXE5qLjOuBZ0cpJAZUTeLITxTD5Y8YyuDLley3zbqr8sDEj
6/Tu8GsTNVzY/VrnkEzsbr32d31u0XPMMzF3H9hZ7DiX/uBUG0du+zOrkCEpqoZ/
V2I9IyMB+yNzAAz3wK/qTvOkgyUDKRi5SyxXe7zawFa8Uo/o96rzGB2uc3yRlg0/
GX+VzcGQ13WcMbQ1cKGdnzyAxD51DJ/tY/AOyDL8laqOoCKCQM/UYjOWIWCS09Xr
9g6DaqK6qYrB53d7MVq9eZ48s2oDOrHQk7EYiJgT5tU/J6KnFuxMt2K1XJyOUMfB
fri6+aYftsJrYPB1UnO3wN6F77Ck/Oo=
-----END CERTIFICATE-----
Generated at Tue Sep 9 07:48:57 2025 by rpki-client