Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/fecede73-15dd-3b30-832e-a5ba02a421c0.roa
File:                     fecede73-15dd-3b30-832e-a5ba02a421c0.roa (raw, json)
Hash identifier:          emFuKnlOADAWVBKHFjUHCjcif9dC45Cmn6oq8tK9leg=
Subject key identifier:   A7:4C:5F:AB:18:BB:0B:48:71:BF:90:81:60:24:19:D0:24:CD:A5:95
Certificate issuer:       /CN=6e06ea72-258e-41f1-b216-af309f471233
Certificate serial:       010D0C9F4328584B87B5F8D3ED12616950934680
Authority key identifier: B8:55:DA:F1:60:3E:8F:4D:17:5A:B2:71:D0:18:D6:F7:3A:DD:63:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/fecede73-15dd-3b30-832e-a5ba02a421c0.roa
Signing time:             Wed 15 Oct 2025 13:08:29 +0000
ROA not before:           Wed 15 Oct 2025 13:08:29 +0000
ROA not after:            Tue 13 Jan 2026 14:08:29 +0000
asID:                     1405
IP address blocks:        23.144.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/6e06ea72-258e-41f1-b216-af309f471233.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/6e06ea72-258e-41f1-b216-af309f471233.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b5:f8:d3:ed:12:61:69:50:93:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e06ea72-258e-41f1-b216-af309f471233
        Validity
            Not Before: Oct 15 13:08:29 2025 GMT
            Not After : Jan 13 14:08:29 2026 GMT
        Subject: CN=0b0d4fd9-5c68-4756-bba0-844f26e692ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:25:36:72:dd:6b:49:b9:ca:64:e3:85:45:3a:
                    32:02:77:e4:5c:01:4c:53:ba:19:a7:f3:89:fb:a4:
                    0f:d0:07:30:a2:10:a5:4e:6d:3e:5d:45:74:5c:bf:
                    8a:f3:2a:5e:21:73:77:e3:df:dc:fa:ba:1e:79:6d:
                    7c:17:20:ee:15:2a:31:2c:ea:4f:33:2d:03:b1:f1:
                    3a:f1:98:c8:56:dd:25:1b:a2:1d:89:71:3d:6e:8a:
                    6f:e4:c7:60:57:36:cb:ad:80:c0:2d:42:a3:11:5f:
                    23:a6:f4:b1:a7:ce:e8:63:30:16:a8:f3:52:66:7c:
                    2d:f9:9b:20:0f:d0:3a:09:73:f8:76:6e:f2:40:72:
                    43:60:f2:67:bf:05:eb:ab:1f:17:16:5b:ec:ae:a5:
                    04:27:9a:cb:24:5d:29:ab:24:2f:ac:4e:89:ce:b1:
                    61:1c:a8:c4:c1:cf:5f:b4:b2:ae:34:aa:c3:e8:dd:
                    f8:cf:12:3b:ac:30:99:f2:b4:e0:c2:cf:5e:24:f1:
                    af:19:5e:fa:f0:63:1c:aa:7c:87:fa:55:7f:f4:ae:
                    ec:b2:9c:d4:3e:b2:16:c4:3f:01:35:8d:cd:4c:ed:
                    17:96:c5:1b:68:fc:0c:29:70:b3:05:86:85:59:f9:
                    c5:d1:f9:3f:d3:fa:ea:31:0c:07:71:7b:2d:8e:41:
                    ea:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4C:5F:AB:18:BB:0B:48:71:BF:90:81:60:24:19:D0:24:CD:A5:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/fecede73-15dd-3b30-832e-a5ba02a421c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/6e06ea72-258e-41f1-b216-af309f471233.crl

            X509v3 Authority Key Identifier:
                keyid:B8:55:DA:F1:60:3E:8F:4D:17:5A:B2:71:D0:18:D6:F7:3A:DD:63:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:41:14:9c:0f:3c:79:89:cb:c4:34:e3:5c:9f:a9:74:9c:e7:
         ca:d4:e3:4e:59:8a:03:db:13:f4:f7:c5:05:fe:aa:d8:dd:98:
         6c:66:10:a9:f3:e2:1a:f0:55:18:7e:7a:8f:a7:77:b4:b1:d7:
         63:6e:a3:12:5d:65:2f:fd:a0:e3:ad:6a:e9:46:10:6b:71:be:
         de:45:45:f1:82:9f:6f:2d:5d:a3:bc:85:9a:01:9f:32:c9:e9:
         a1:85:5d:39:91:98:1f:88:29:50:65:31:fb:43:2c:2f:58:74:
         28:b3:54:fa:1d:48:d3:37:3c:c4:b9:15:f6:e6:1d:4b:b4:15:
         92:db:52:08:e0:3e:86:d2:5d:c3:5a:65:5f:87:78:cf:5f:31:
         4c:64:d5:9e:08:ae:ce:8e:f6:ff:29:cb:4f:de:38:84:a8:50:
         30:a3:8b:e2:c7:88:f3:03:ed:d9:fb:70:ca:62:a7:13:07:86:
         c5:8c:e4:61:a1:49:63:20:37:1b:34:f0:dc:43:65:7c:b0:6b:
         20:1d:79:99:95:5c:19:88:cb:d4:df:64:0e:c6:cd:36:89:82:
         5b:07:a1:65:ae:e9:2b:81:3e:61:fa:e6:6a:0c:b1:b0:bb:dc:
         c8:0e:78:d6:41:fe:f7:c8:4d:a2:4f:8c:29:53:7c:3c:db:8f:
         d2:3b:ce:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHtfjT7RJhaVCTRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmUwNmVhNzItMjU4ZS00MWYxLWIyMTYtYWYzMDlmNDcx
MjMzMB4XDTI1MTAxNTEzMDgyOVoXDTI2MDExMzE0MDgyOVowLzEtMCsGA1UEAxMk
MGIwZDRmZDktNWM2OC00NzU2LWJiYTAtODQ0ZjI2ZTY5MmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliU2ct1rSbnKZOOFRToyAnfkXAFMU7oZp/OJ
+6QP0AcwohClTm0+XUV0XL+K8ypeIXN349/c+roeeW18FyDuFSoxLOpPMy0DsfE6
8ZjIVt0lG6IdiXE9bopv5MdgVzbLrYDALUKjEV8jpvSxp87oYzAWqPNSZnwt+Zsg
D9A6CXP4dm7yQHJDYPJnvwXrqx8XFlvsrqUEJ5rLJF0pqyQvrE6JzrFhHKjEwc9f
tLKuNKrD6N34zxI7rDCZ8rTgws9eJPGvGV768GMcqnyH+lV/9K7sspzUPrIWxD8B
NY3NTO0XlsUbaPwMKXCzBYaFWfnF0fk/0/rqMQwHcXstjkHqKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKdMX6sYuwtIcb+QgWAkGdAkzaWVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82ZTA2
ZWE3Mi0yNThlLTQxZjEtYjIxNi1hZjMwOWY0NzEyMzMvZmVjZWRlNzMtMTVkZC0z
YjMwLTgzMmUtYTViYTAyYTQyMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNmUwNmVhNzItMjU4ZS00MWYxLWIy
MTYtYWYzMDlmNDcxMjMzLzZlMDZlYTcyLTI1OGUtNDFmMS1iMjE2LWFmMzA5ZjQ3
MTIzMy5jcmwwHwYDVR0jBBgwFoAUuFXa8WA+j00XWrJx0BjW9zrdY+owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC82ZTA2ZWE3Mi0yNThlLTQxZjEtYjIxNi1hZjMw
OWY0NzEyMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5BMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACBBFJwPPHmJy8Q041yfqXSc58rU405ZigPbE/T3xQX+qtjdmGxmEKnz
4hrwVRh+eo+nd7Sx12NuoxJdZS/9oOOtaulGEGtxvt5FRfGCn28tXaO8hZoBnzLJ
6aGFXTmRmB+IKVBlMftDLC9YdCizVPodSNM3PMS5FfbmHUu0FZLbUgjgPobSXcNa
ZV+HeM9fMUxk1Z4Irs6O9v8py0/eOISoUDCji+LHiPMD7dn7cMpipxMHhsWM5GGh
SWMgNxs08NxDZXywayAdeZmVXBmIy9TfZA7GzTaJglsHoWWu6SuBPmH65moMsbC7
3MgOeNZB/vfITaJPjClTfDzbj9I7ziw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:07:56 2025 by rpki-client