Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/3dbc7752-ae3c-30e0-a1b3-8c0a432af74c.roa
File:                     3dbc7752-ae3c-30e0-a1b3-8c0a432af74c.roa (raw, json)
Hash identifier:          C61FSw6JgkE1exeTp3lOWpQcZbDlqV2SACV9GJh27nU=
Subject key identifier:   D7:2A:CB:71:C9:3E:0C:7D:C6:CA:48:D4:51:23:19:23:CF:F2:6D:8B
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584BA667A189F5BD24F411516A80
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/3dbc7752-ae3c-30e0-a1b3-8c0a432af74c.roa
Signing time:             Sun 26 Oct 2025 13:00:38 +0000
ROA not before:           Sun 26 Oct 2025 13:00:38 +0000
ROA not after:            Sat 24 Jan 2026 14:00:38 +0000
asID:                     396982
IP address blocks:        23.227.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a6:67:a1:89:f5:bd:24:f4:11:51:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Oct 26 13:00:38 2025 GMT
            Not After : Jan 24 14:00:38 2026 GMT
        Subject: CN=4358e483-77b5-450c-8766-70b7e9129fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:cc:63:12:18:bd:3c:54:e6:62:60:c9:e9:
                    e0:3c:f7:4e:25:54:2d:a4:05:f0:01:28:13:2f:46:
                    54:39:73:a3:61:7b:79:ee:6c:79:84:96:b5:76:20:
                    86:18:5e:22:12:a6:07:28:9e:4f:11:0a:f4:df:36:
                    eb:33:0a:d7:bc:72:e7:40:89:5a:c3:49:63:cb:3f:
                    d7:36:53:33:99:95:fc:7e:94:6d:16:a3:44:57:7a:
                    1c:1a:ac:15:18:a2:d9:c8:54:c2:e8:ab:ac:d1:3c:
                    76:65:26:64:a1:00:74:66:92:c4:d5:4f:df:30:b8:
                    06:a4:61:ca:10:38:39:0c:1a:aa:b5:70:64:24:14:
                    4c:3c:27:b7:66:bc:7d:8e:9e:99:1d:de:8c:3f:af:
                    c6:34:62:27:4e:db:a0:e2:50:65:6e:df:2b:de:a6:
                    d8:90:07:25:0a:f2:88:7f:e9:50:d0:23:94:07:2f:
                    18:7c:52:46:fb:d0:4f:2d:c0:b4:a9:1d:1a:97:e4:
                    17:fb:88:e9:cc:02:3c:73:63:d9:ab:6a:fb:c7:4f:
                    bf:34:82:b5:bc:6e:6c:4e:75:7b:33:8d:82:b8:51:
                    08:86:b0:8e:19:e1:dd:2e:22:f7:20:2d:be:b6:6d:
                    2c:80:36:37:e6:ec:9e:b1:08:13:93:a0:8e:22:dd:
                    9b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2A:CB:71:C9:3E:0C:7D:C6:CA:48:D4:51:23:19:23:CF:F2:6D:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/3dbc7752-ae3c-30e0-a1b3-8c0a432af74c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:88:25:a0:4d:fd:97:77:04:f3:58:d3:64:7a:76:1d:49:54:
         96:99:39:ba:b6:49:32:e3:28:d6:95:4f:f3:27:27:d3:e5:3d:
         49:5f:c6:34:89:f5:1d:be:fe:94:98:30:e7:aa:5b:5f:4c:88:
         df:51:bf:ee:b6:bb:d8:2a:56:c1:44:1e:7c:96:71:5b:05:89:
         8e:01:f4:44:db:1c:fb:bd:92:d8:24:1f:58:f1:ac:ec:2b:8f:
         58:ee:08:68:30:91:d2:61:a0:ad:4f:68:a1:49:05:48:60:83:
         af:85:4d:ac:77:ba:b6:67:aa:fc:0e:fb:63:bb:c9:55:57:4a:
         a9:6a:15:8a:9b:0d:e2:70:5c:07:dd:7a:62:4a:61:d0:9c:07:
         74:dc:a0:c6:7c:2f:e7:b2:37:c6:80:21:42:b7:9d:05:16:58:
         17:42:c5:64:6b:dd:8a:b4:5e:42:aa:3e:81:b6:e3:49:f4:0d:
         39:84:81:6f:ed:88:de:ce:8b:03:5b:75:76:bd:47:75:3a:74:
         74:58:e6:cd:74:97:a8:b3:ea:5c:45:24:26:ac:92:72:33:11:
         e7:15:41:36:42:2f:0f:c2:53:9b:3f:c0:71:6f:cb:4c:7c:a1:
         ab:79:69:64:5b:5c:75:e2:47:69:f4:4f:51:22:64:a5:b3:ed:
         58:f7:92:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6GJ9b0k9BFRaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ1NGIzNmEtYzcyNS00YzE4LTkzZTEtODI1YWZjNjQ1
ZTJjMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk
NDM1OGU0ODMtNzdiNS00NTBjLTg3NjYtNzBiN2U5MTI5ZmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4zMYxIYvTxU5mJgyengPPdOJVQtpAXwASgT
L0ZUOXOjYXt57mx5hJa1diCGGF4iEqYHKJ5PEQr03zbrMwrXvHLnQIlaw0ljyz/X
NlMzmZX8fpRtFqNEV3ocGqwVGKLZyFTC6Kus0Tx2ZSZkoQB0ZpLE1U/fMLgGpGHK
EDg5DBqqtXBkJBRMPCe3Zrx9jp6ZHd6MP6/GNGInTtug4lBlbt8r3qbYkAclCvKI
f+lQ0COUBy8YfFJG+9BPLcC0qR0al+QX+4jpzAI8c2PZq2r7x0+/NIK1vG5sTnV7
M42CuFEIhrCOGeHdLiL3IC2+tm0sgDY35uyesQgTk6COIt2b9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNcqy3HJPgx9xspI1FEjGSPP8m2LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0
YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVhZmM2NDVlMmMvM2RiYzc3NTItYWUzYy0z
MGUwLWExYjMtOGMwYTQzMmFmNzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmQ1NGIzNmEtYzcyNS00YzE4LTkz
ZTEtODI1YWZjNjQ1ZTJjLzZkNTRiMzZhLWM3MjUtNGMxOC05M2UxLTgyNWFmYzY0
NWUyYy5jcmwwHwYDVR0jBBgwFoAUOFjVJZUYEHsaUpZxvbiCe8GGfbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVh
ZmM2NDVlMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+M2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABeIJaBN/Zd3BPNY02R6dh1JVJaZObq2STLjKNaVT/MnJ9PlPUlfxjSJ
9R2+/pSYMOeqW19MiN9Rv+62u9gqVsFEHnyWcVsFiY4B9ETbHPu9ktgkH1jxrOwr
j1juCGgwkdJhoK1PaKFJBUhgg6+FTax3urZnqvwO+2O7yVVXSqlqFYqbDeJwXAfd
emJKYdCcB3TcoMZ8L+eyN8aAIUK3nQUWWBdCxWRr3Yq0XkKqPoG240n0DTmEgW/t
iN7OiwNbdXa9R3U6dHRY5s10l6iz6lxFJCasknIzEecVQTZCLw/CU5s/wHFvy0x8
oat5aWRbXHXiR2n0T1EiZKWz7Vj3kgE=
-----END CERTIFICATE-----
Generated at Mon Nov 3 21:51:04 2025 by rpki-client