Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/15d664b5-17e1-32df-bb65-4665ea1a0284.roa
File:                     15d664b5-17e1-32df-bb65-4665ea1a0284.roa (raw, json)
Hash identifier:          gw4y+5rtknAE55RFJ2Ca4iPd8JwJW4twHP9cy3tiHI4=
Subject key identifier:   D9:9A:7A:9C:52:4E:4B:36:B7:4F:BB:39:2F:0B:BB:F5:F3:F3:DD:62
Certificate issuer:       /CN=563a7f22-13a9-45ac-b309-56ee9c8904ce
Certificate serial:       010D0C9F4328584AC45B0424155B741CB4D1F780
Authority key identifier: 3E:6F:CB:F4:3B:06:63:F1:05:5C:AE:1A:2C:B7:BF:05:69:8D:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/15d664b5-17e1-32df-bb65-4665ea1a0284.roa
Signing time:             Wed 23 Jul 2025 02:11:51 +0000
ROA not before:           Wed 23 Jul 2025 02:11:51 +0000
ROA not after:            Tue 21 Oct 2025 02:11:51 +0000
asID:                     401840
IP address blocks:        23.143.108.0/24 maxlen: 24
                          2602:f5c6::/48 maxlen: 48
                          2602:f5c6:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/563a7f22-13a9-45ac-b309-56ee9c8904ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/563a7f22-13a9-45ac-b309-56ee9c8904ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c4:5b:04:24:15:5b:74:1c:b4:d1:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=563a7f22-13a9-45ac-b309-56ee9c8904ce
        Validity
            Not Before: Jul 23 02:11:51 2025 GMT
            Not After : Oct 21 02:11:51 2025 GMT
        Subject: CN=093d7e16-4c14-46c2-bd71-0e6a54cf612c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f5:fd:a4:63:c6:65:1f:68:97:e0:71:7d:62:
                    ce:a9:58:ee:ba:ae:87:8e:fb:6e:a8:7b:84:05:48:
                    33:c3:65:48:7a:c7:43:65:e3:b3:52:ce:1f:ed:19:
                    10:80:96:68:04:3c:5b:6a:1c:ff:ed:a4:fd:2f:43:
                    be:e0:d2:41:87:22:9b:28:31:e2:22:08:d1:ec:3e:
                    5c:e7:36:01:43:6d:66:17:8b:50:ac:7c:8a:dd:75:
                    ab:08:7b:54:ea:f1:34:8b:f9:78:2a:e9:07:2e:ad:
                    18:4a:9c:99:f2:ce:e7:0d:96:d1:3e:6b:4d:7d:3a:
                    8b:ea:48:8d:ff:c7:3f:27:3b:7f:a5:6d:d6:a0:6e:
                    77:56:af:b4:55:55:53:d9:a1:1e:7d:1c:70:4f:d4:
                    47:c5:89:4d:6b:9a:1a:ae:81:6e:ef:a7:cb:79:95:
                    c3:18:b0:b1:e9:f5:62:60:3a:79:5d:a3:e2:df:cd:
                    5b:ff:b4:13:c0:5a:71:26:d8:f9:af:f5:b4:26:c2:
                    6f:2a:00:15:3f:f7:a6:dc:93:46:7b:47:60:2c:f6:
                    78:79:95:4d:c0:7a:58:3f:93:ba:d6:a2:2e:1b:18:
                    19:8a:f3:96:9b:f9:da:21:7e:88:f5:9a:15:ca:22:
                    fb:1a:7e:c9:84:b7:d7:d3:e3:09:98:af:f3:4d:26:
                    29:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9A:7A:9C:52:4E:4B:36:B7:4F:BB:39:2F:0B:BB:F5:F3:F3:DD:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/15d664b5-17e1-32df-bb65-4665ea1a0284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/563a7f22-13a9-45ac-b309-56ee9c8904ce.crl

            X509v3 Authority Key Identifier:
                keyid:3E:6F:CB:F4:3B:06:63:F1:05:5C:AE:1A:2C:B7:BF:05:69:8D:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.108.0/24
                IPv6:
                  2602:f5c6::/48
                  2602:f5c6:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:3c:da:d7:22:a5:45:b0:f7:69:93:80:37:54:63:49:66:bd:
         82:7b:6d:16:06:76:10:a9:1e:33:f8:82:7e:1f:25:01:16:20:
         6e:75:dd:48:b7:df:f7:cc:3a:14:72:74:26:be:a7:ec:00:0d:
         83:b3:e8:2b:ae:04:1d:8b:4c:b0:b4:07:07:41:b3:c3:06:4d:
         4f:b6:7d:c0:e4:04:63:c9:a4:21:f5:dd:38:bb:3f:4d:fe:08:
         95:c9:10:62:5c:6f:71:e7:7d:2b:b4:02:5e:38:22:90:49:52:
         4d:ce:8f:21:d6:bb:ad:74:33:6e:c5:62:9c:3e:09:15:16:b6:
         34:40:01:92:dd:81:69:12:85:16:a1:8f:d1:b4:74:be:40:53:
         c6:53:c3:23:1c:ea:86:f9:f1:16:6b:60:bc:e8:e0:2b:35:d1:
         16:9e:46:df:dd:2a:88:59:05:87:b1:96:9e:b4:32:d1:cc:68:
         4a:e8:5a:40:a6:0d:b7:06:53:49:7e:f7:68:21:4e:64:f0:01:
         5f:76:ea:58:c6:77:8e:a8:04:4b:f0:47:d1:de:ee:9d:24:71:
         98:34:09:7a:d0:5b:22:53:63:41:5b:c5:3d:36:20:00:32:10:
         f2:1e:27:b6:58:65:28:2c:3a:74:fb:50:e4:b6:85:a9:48:69:
         89:73:b3:ad
-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWErEWwQkFVt0HLTR94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTYzYTdmMjItMTNhOS00NWFjLWIzMDktNTZlZTljODkw
NGNlMB4XDTI1MDcyMzAyMTE1MVoXDTI1MTAyMTAyMTE1MVowLzEtMCsGA1UEAxMk
MDkzZDdlMTYtNGMxNC00NmMyLWJkNzEtMGU2YTU0Y2Y2MTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfX9pGPGZR9ol+BxfWLOqVjuuq6HjvtuqHuE
BUgzw2VIesdDZeOzUs4f7RkQgJZoBDxbahz/7aT9L0O+4NJBhyKbKDHiIgjR7D5c
5zYBQ21mF4tQrHyK3XWrCHtU6vE0i/l4KukHLq0YSpyZ8s7nDZbRPmtNfTqL6kiN
/8c/Jzt/pW3WoG53Vq+0VVVT2aEefRxwT9RHxYlNa5oaroFu76fLeZXDGLCx6fVi
YDp5XaPi381b/7QTwFpxJtj5r/W0JsJvKgAVP/em3JNGe0dgLPZ4eZVNwHpYP5O6
1qIuGxgZivOWm/naIX6I9ZoVyiL7Gn7JhLfX0+MJmK/zTSYpFQIDAQABo4IDbzCC
A2swHQYDVR0OBBYEFNmaepxSTks2t0+7OS8Lu/Xz891iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81NjNh
N2YyMi0xM2E5LTQ1YWMtYjMwOS01NmVlOWM4OTA0Y2UvMTVkNjY0YjUtMTdlMS0z
MmRmLWJiNjUtNDY2NWVhMWEwMjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTYzYTdmMjItMTNhOS00NWFjLWIz
MDktNTZlZTljODkwNGNlLzU2M2E3ZjIyLTEzYTktNDVhYy1iMzA5LTU2ZWU5Yzg5
MDRjZS5jcmwwHwYDVR0jBBgwFoAUPm/L9DsGY/EFXK4aLLe/BWmNd1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81NjNhN2YyMi0xM2E5LTQ1YWMtYjMwOS01NmVl
OWM4OTA0Y2UuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAF49sMBgE
AgACMBIDBwAmAvXGAAADBwAmAvXGABAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFzza1yKlRbD3aZOAN1Rj
SWa9gnttFgZ2EKkeM/iCfh8lARYgbnXdSLff98w6FHJ0Jr6n7AANg7PoK64EHYtM
sLQHB0GzwwZNT7Z9wOQEY8mkIfXdOLs/Tf4IlckQYlxvced9K7QCXjgikElSTc6P
Ida7rXQzbsVinD4JFRa2NEABkt2BaRKFFqGP0bR0vkBTxlPDIxzqhvnxFmtgvOjg
KzXRFp5G390qiFkFh7GWnrQy0cxoSuhaQKYNtwZTSX73aCFOZPABX3bqWMZ3jqgE
S/BH0d7unSRxmDQJetBbIlNjQVvFPTYgADIQ8h4ntlhlKCw6dPtQ5LaFqUhpiXOz
rQ==
-----END CERTIFICATE-----
Generated at Wed Aug 20 07:39:02 2025 by rpki-client