Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/d0fe400e-5bf5-36a8-a4aa-8fbc86a24126.roa
File:                     d0fe400e-5bf5-36a8-a4aa-8fbc86a24126.roa (raw, json)
Hash identifier:          CdTuLZc7QN50dpU97SdJ6xc4IsjQj006CgEuoYGmWsA=
Subject key identifier:   BE:A8:93:13:59:7F:D1:29:6D:7D:57:E2:5A:CC:6E:90:5E:68:E3:B8
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584BABFD02C06494A284B70BB580
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/d0fe400e-5bf5-36a8-a4aa-8fbc86a24126.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     396982
IP address blocks:        23.227.35.0/24 maxlen: 24
                          23.227.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:02:c0:64:94:a2:84:b7:0b:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=837e3e1c-1e6e-4c5a-9661-8e6380604aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9a:b0:7d:7e:d2:19:43:7f:35:68:88:34:6d:
                    39:4b:bd:3c:c6:01:04:13:31:29:0c:be:27:dd:11:
                    19:4e:e3:c0:6a:cb:7d:e0:55:84:b9:e0:4f:7b:c5:
                    45:5a:93:f1:b5:6f:44:0e:07:3f:33:49:48:35:9a:
                    05:f2:ef:87:fb:dc:37:f7:42:9b:53:c1:a2:8b:48:
                    7e:b9:2e:78:65:31:a9:86:2a:b8:73:9c:ae:26:0b:
                    a4:8e:d7:2c:65:bd:03:8d:44:7f:ed:5b:89:99:f0:
                    99:af:45:9b:f7:04:1b:4b:e4:a2:f4:3e:e6:b1:46:
                    e4:4e:80:a8:60:ee:89:b8:8e:50:b5:24:d7:39:35:
                    c6:a6:3c:98:fd:8f:7e:a9:aa:18:b0:76:3f:de:f2:
                    6e:8b:a8:a4:2b:de:2f:5d:9c:ce:d5:48:ea:37:78:
                    2e:5d:0b:94:6f:82:01:4d:e4:6b:03:0a:5f:2f:97:
                    13:e2:df:d0:c2:4e:35:df:56:08:dd:55:94:03:dd:
                    a4:57:e4:7c:53:0f:e7:a2:c1:43:ba:96:db:f8:1c:
                    3c:f8:e6:0c:b8:f8:d4:7a:d4:40:97:b8:85:59:fc:
                    93:3e:05:8a:a5:89:ed:b6:e0:0d:2d:b0:9e:25:63:
                    fb:7a:6e:94:1d:43:86:b2:48:d0:69:0a:53:b5:1e:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A8:93:13:59:7F:D1:29:6D:7D:57:E2:5A:CC:6E:90:5E:68:E3:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/d0fe400e-5bf5-36a8-a4aa-8fbc86a24126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.35.0-23.227.36.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:93:6e:78:a9:84:fb:c5:62:10:6c:9b:94:d5:83:68:09:79:
         81:ba:e4:49:27:d9:20:46:67:82:cd:36:15:16:c4:a3:b0:72:
         2c:7c:94:3e:2f:8e:95:1d:11:8e:77:c6:72:3d:89:07:81:f6:
         80:83:b8:b3:68:e6:a1:5e:fa:26:67:c6:3d:81:94:d2:2a:72:
         8f:9b:02:b3:2a:76:a5:9f:52:76:19:50:85:4c:bb:86:1a:c2:
         28:3e:54:2b:a5:48:73:d3:8b:31:99:bf:fc:8f:71:11:3c:67:
         50:bf:a5:a6:b6:c4:1d:69:d2:12:21:d6:c8:a8:10:b4:20:b0:
         b7:f8:e4:e0:a4:83:ff:ac:dc:a5:f1:d9:8c:bb:e9:b1:7a:7b:
         c4:08:c2:5e:94:34:6c:97:25:45:97:db:5e:7b:7a:ac:97:aa:
         1a:ec:8a:1b:86:72:c0:92:e6:7d:a6:ef:d9:fa:22:de:66:f5:
         12:35:c7:74:0b:1d:dc:24:5c:5c:37:7c:9b:7a:d1:cb:1c:c0:
         f3:22:2e:cd:0e:fa:7d:64:85:1d:25:db:3d:2b:a1:16:01:b8:
         ac:ac:ba:16:4f:10:43:fa:aa:fb:3e:8d:8e:71:e2:b3:9a:0d:
         b5:98:1f:94:4f:32:d2:dd:03:b7:c5:30:53:2f:77:89:7e:99:
         0a:7d:c9:c3
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEur/QLAZJSihLcLtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ1NGIzNmEtYzcyNS00YzE4LTkzZTEtODI1YWZjNjQ1
ZTJjMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk
ODM3ZTNlMWMtMWU2ZS00YzVhLTk2NjEtOGU2MzgwNjA0YWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5qwfX7SGUN/NWiING05S708xgEEEzEpDL4n
3REZTuPAast94FWEueBPe8VFWpPxtW9EDgc/M0lINZoF8u+H+9w390KbU8Gii0h+
uS54ZTGphiq4c5yuJgukjtcsZb0DjUR/7VuJmfCZr0Wb9wQbS+Si9D7msUbkToCo
YO6JuI5QtSTXOTXGpjyY/Y9+qaoYsHY/3vJui6ikK94vXZzO1UjqN3guXQuUb4IB
TeRrAwpfL5cT4t/Qwk4131YI3VWUA92kV+R8Uw/nosFDupbb+Bw8+OYMuPjUetRA
l7iFWfyTPgWKpYnttuANLbCeJWP7em6UHUOGskjQaQpTtR6aNwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFL6okxNZf9EpbX1X4lrMbpBeaOO4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0
YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVhZmM2NDVlMmMvZDBmZTQwMGUtNWJmNS0z
NmE4LWE0YWEtOGZiYzg2YTI0MTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmQ1NGIzNmEtYzcyNS00YzE4LTkz
ZTEtODI1YWZjNjQ1ZTJjLzZkNTRiMzZhLWM3MjUtNGMxOC05M2UxLTgyNWFmYzY0
NWUyYy5jcmwwHwYDVR0jBBgwFoAUOFjVJZUYEHsaUpZxvbiCe8GGfbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVh
ZmM2NDVlMmMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAX4yMD
BAAX4yQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAFpNueKmE+8ViEGyblNWDaAl5gbrkSSfZIEZngs02FRbE
o7ByLHyUPi+OlR0RjnfGcj2JB4H2gIO4s2jmoV76JmfGPYGU0ipyj5sCsyp2pZ9S
dhlQhUy7hhrCKD5UK6VIc9OLMZm//I9xETxnUL+lprbEHWnSEiHWyKgQtCCwt/jk
4KSD/6zcpfHZjLvpsXp7xAjCXpQ0bJclRZfbXnt6rJeqGuyKG4ZywJLmfabv2foi
3mb1EjXHdAsd3CRcXDd8m3rRyxzA8yIuzQ76fWSFHSXbPSuhFgG4rKy6Fk8QQ/qq
+z6NjnHis5oNtZgflE8y0t0Dt8UwUy93iX6ZCn3Jww==
-----END CERTIFICATE-----
Generated at Mon Nov 3 21:52:12 2025 by rpki-client