Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b56e8198-c493-4fb7-a2ef-50c65a5e6613/e764e052-9331-3420-ab08-22960797672c.roa
File:                     e764e052-9331-3420-ab08-22960797672c.roa (raw, json)
Hash identifier:          9rjuKv0vvlg4P5NzAwKwimskYw3UZoNZzNGG7wfG7xg=
Subject key identifier:   C7:DB:6E:7A:03:39:3D:98:80:74:4A:B4:1A:28:8C:BA:60:A5:40:72
Certificate issuer:       /CN=b56e8198-c493-4fb7-a2ef-50c65a5e6613
Certificate serial:       010D0C9F4328584AC78862A008B8F9EF15678980
Authority key identifier: 30:F7:32:08:9F:6D:8B:80:D8:94:A4:C1:0C:04:46:DF:E1:8E:C1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b56e8198-c493-4fb7-a2ef-50c65a5e6613.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b56e8198-c493-4fb7-a2ef-50c65a5e6613/e764e052-9331-3420-ab08-22960797672c.roa
Signing time:             Thu 07 Aug 2025 17:01:25 +0000
ROA not before:           Thu 07 Aug 2025 17:01:25 +0000
ROA not after:            Wed 05 Nov 2025 18:01:25 +0000
asID:                     152179
IP address blocks:        23.141.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b56e8198-c493-4fb7-a2ef-50c65a5e6613/b56e8198-c493-4fb7-a2ef-50c65a5e6613.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b56e8198-c493-4fb7-a2ef-50c65a5e6613/b56e8198-c493-4fb7-a2ef-50c65a5e6613.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b56e8198-c493-4fb7-a2ef-50c65a5e6613.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:88:62:a0:08:b8:f9:ef:15:67:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56e8198-c493-4fb7-a2ef-50c65a5e6613
        Validity
            Not Before: Aug  7 17:01:25 2025 GMT
            Not After : Nov  5 18:01:25 2025 GMT
        Subject: CN=a14eda7a-ac92-4b3a-b67c-1e11dd9e2575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:23:d1:9a:0f:ed:fa:fd:06:22:94:28:07:
                    8c:2f:0b:72:4b:7a:68:ee:e1:f5:1c:32:91:8e:b4:
                    fe:31:ec:8d:b8:d2:44:5a:6a:a2:4b:94:6e:90:31:
                    2d:cb:21:13:16:66:41:62:97:74:8e:15:a3:a4:25:
                    01:b0:88:38:e5:e0:ac:2b:57:c2:41:c0:28:63:34:
                    8e:c9:1b:61:8a:a7:fb:4c:69:d8:3d:a1:ae:60:a3:
                    a0:0b:2a:a9:85:49:59:13:ae:2e:0e:8a:c4:93:cd:
                    51:c1:28:99:89:29:0e:60:d0:4f:09:1e:c4:99:d7:
                    52:15:48:52:48:ed:0b:28:d9:52:be:14:f7:5d:a8:
                    b1:be:e8:b5:14:30:bb:b3:b4:fb:39:82:49:cf:9d:
                    f3:86:28:e8:3b:89:9b:8e:4d:c0:c6:f4:55:70:db:
                    77:34:dc:4d:66:2a:06:51:4d:b6:44:08:a2:bc:ed:
                    ca:e2:36:32:88:d3:ca:29:8b:b7:ce:f1:27:53:2e:
                    0e:52:b1:5a:59:24:33:9f:45:f5:fa:ec:0d:73:a8:
                    e2:ba:64:2e:59:f7:53:63:97:0a:a1:a9:cb:78:8c:
                    f3:0e:26:da:fa:ae:76:9c:c4:6d:71:47:40:83:51:
                    29:ba:65:1a:d6:e6:c4:cd:76:84:5e:48:4e:d1:e0:
                    9b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DB:6E:7A:03:39:3D:98:80:74:4A:B4:1A:28:8C:BA:60:A5:40:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b56e8198-c493-4fb7-a2ef-50c65a5e6613/e764e052-9331-3420-ab08-22960797672c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b56e8198-c493-4fb7-a2ef-50c65a5e6613/b56e8198-c493-4fb7-a2ef-50c65a5e6613.crl

            X509v3 Authority Key Identifier:
                keyid:30:F7:32:08:9F:6D:8B:80:D8:94:A4:C1:0C:04:46:DF:E1:8E:C1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b56e8198-c493-4fb7-a2ef-50c65a5e6613.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:fc:7c:9b:86:7a:cd:25:88:20:d4:3a:89:ad:63:b9:f1:94:
         ce:42:d6:27:83:a8:7a:fe:4f:be:43:df:eb:e9:0d:33:3a:79:
         f9:c3:1b:d8:b4:39:10:91:2b:be:29:93:eb:e8:ef:03:2c:33:
         04:04:2e:2e:56:80:eb:cf:7b:cb:34:e4:bd:d9:a0:b9:a6:6b:
         2b:a5:e8:87:92:ed:00:11:28:2d:04:d6:94:8f:85:73:44:de:
         38:d5:83:e9:c4:c9:2f:15:c3:4e:76:cf:22:ad:62:dc:ff:70:
         ec:b3:9e:81:34:33:6f:c6:0a:38:19:e3:6b:68:9d:99:27:dc:
         6e:c9:69:19:7d:14:90:11:e6:a2:72:e5:ba:36:27:48:e6:35:
         13:a9:0d:47:c5:ab:e3:c3:ee:a9:3a:26:7a:95:98:02:f7:8b:
         f6:47:86:20:a2:03:ab:6e:7e:d0:8a:9d:da:15:95:01:b3:8c:
         1c:d1:92:7a:e3:ea:21:d3:61:e6:eb:19:e9:a1:5f:c2:dd:a2:
         29:f9:89:06:29:8d:0d:1a:83:c5:fe:71:dd:59:de:4a:58:c2:
         df:4f:dd:11:27:8c:9b:23:d4:ca:d2:6d:b9:6d:a5:89:90:d7:
         f4:dc:34:68:b9:1e:89:19:75:76:03:a9:4d:2e:70:7e:8b:da:
         71:84:2d:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHiGKgCLj57xVniYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZTgxOTgtYzQ5My00ZmI3LWEyZWYtNTBjNjVhNWU2
NjEzMB4XDTI1MDgwNzE3MDEyNVoXDTI1MTEwNTE4MDEyNVowLzEtMCsGA1UEAxMk
YTE0ZWRhN2EtYWM5Mi00YjNhLWI2N2MtMWUxMWRkOWUyNTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzMj0ZoP7fr9BiKUKAeMLwtyS3po7uH1HDKR
jrT+MeyNuNJEWmqiS5RukDEtyyETFmZBYpd0jhWjpCUBsIg45eCsK1fCQcAoYzSO
yRthiqf7TGnYPaGuYKOgCyqphUlZE64uDorEk81RwSiZiSkOYNBPCR7EmddSFUhS
SO0LKNlSvhT3Xaixvui1FDC7s7T7OYJJz53zhijoO4mbjk3AxvRVcNt3NNxNZioG
UU22RAiivO3K4jYyiNPKKYu3zvEnUy4OUrFaWSQzn0X1+uwNc6jiumQuWfdTY5cK
oanLeIzzDiba+q52nMRtcUdAg1EpumUa1ubEzXaEXkhO0eCbMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMfbbnoDOT2YgHRKtBoojLpgpUByMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iNTZl
ODE5OC1jNDkzLTRmYjctYTJlZi01MGM2NWE1ZTY2MTMvZTc2NGUwNTItOTMzMS0z
NDIwLWFiMDgtMjI5NjA3OTc2NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjU2ZTgxOTgtYzQ5My00ZmI3LWEy
ZWYtNTBjNjVhNWU2NjEzL2I1NmU4MTk4LWM0OTMtNGZiNy1hMmVmLTUwYzY1YTVl
NjYxMy5jcmwwHwYDVR0jBBgwFoAUMPcyCJ9ti4DYlKTBDARG3+GOwV4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9iNTZlODE5OC1jNDkzLTRmYjctYTJlZi01MGM2
NWE1ZTY2MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF41cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE78fJuGes0liCDUOomtY7nxlM5C1ieDqHr+T75D3+vpDTM6efnDG9i0
ORCRK74pk+vo7wMsMwQELi5WgOvPe8s05L3ZoLmmayul6IeS7QARKC0E1pSPhXNE
3jjVg+nEyS8Vw052zyKtYtz/cOyznoE0M2/GCjgZ42tonZkn3G7JaRl9FJAR5qJy
5bo2J0jmNROpDUfFq+PD7qk6JnqVmAL3i/ZHhiCiA6tuftCKndoVlQGzjBzRknrj
6iHTYebrGemhX8Ldoin5iQYpjQ0ag8X+cd1Z3kpYwt9P3REnjJsj1MrSbbltpYmQ
1/TcNGi5HokZdXYDqU0ucH6L2nGELaY=
-----END CERTIFICATE-----
Generated at Wed Aug 20 13:01:57 2025 by rpki-client