Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3a26bc16-7afc-3fcb-b8db-830386abf560.roa
File:                     3a26bc16-7afc-3fcb-b8db-830386abf560.roa (raw, json)
Hash identifier:          LQFceP7nI6bB0S6ftRh/yPaEO8qQBM7gsSQKWQfB8t4=
Subject key identifier:   CB:BB:FA:B7:A8:ED:E9:EA:83:A0:68:57:C3:77:FE:32:B7:3E:E6:D7
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F4328584A4F05BF669E8AE10C0B00CA80
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3a26bc16-7afc-3fcb-b8db-830386abf560.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     397666
IP address blocks:        23.157.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:bf:66:9e:8a:e1:0c:0b:00:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=451c93d5-f090-413d-a4ef-ea7987b2120c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ee:58:ab:9b:4a:95:3a:54:37:30:92:f0:9c:
                    fe:c2:08:1a:2c:6e:22:56:ec:fe:44:5d:0a:7b:eb:
                    03:4c:8f:5e:8d:f0:e6:bb:bb:45:ee:ad:08:08:f4:
                    62:1b:0f:92:4e:4e:4d:5f:01:56:ee:60:3d:16:6c:
                    51:68:ed:cd:3a:ac:ad:30:78:3e:12:c2:12:69:3f:
                    a6:79:aa:85:9c:56:08:0d:b8:f9:72:f7:ac:21:e3:
                    6d:df:b5:d0:ba:f0:92:fc:33:d0:fb:e7:dc:dc:4a:
                    c8:67:74:ac:a4:05:66:19:53:3c:7a:cd:03:7f:a3:
                    83:b4:a8:15:8d:18:87:0d:fe:ad:3d:81:ba:0f:f7:
                    b4:ad:c7:c3:de:fc:18:d4:58:4e:4b:5a:f7:1a:78:
                    1b:a1:85:59:f1:64:ee:c2:0f:a9:c1:95:9d:ea:4d:
                    f9:94:60:6a:88:54:2a:27:7b:df:5e:30:f5:ac:9b:
                    09:97:30:2b:e4:5c:ad:2d:7d:15:26:bb:67:b0:d9:
                    54:d6:9d:b9:63:dd:88:39:ed:a3:e3:a0:96:a1:a6:
                    10:4d:f0:c0:8a:4f:46:79:59:2b:6c:27:be:84:e8:
                    0c:37:6f:65:d3:2e:12:98:4b:72:db:76:3f:27:c4:
                    61:6d:fe:51:09:39:a8:69:be:b8:e5:5e:86:2e:3e:
                    d1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BB:FA:B7:A8:ED:E9:EA:83:A0:68:57:C3:77:FE:32:B7:3E:E6:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3a26bc16-7afc-3fcb-b8db-830386abf560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:87:36:81:e0:40:8d:e9:30:40:fa:32:7b:f8:38:5f:1b:11:
         5b:62:73:01:cf:fa:9b:8c:fd:4e:ff:1f:2a:f0:ac:70:c3:0e:
         f8:af:2b:32:86:64:91:1d:17:f4:f4:ba:23:da:5e:1f:1e:48:
         96:22:d5:c5:3d:c4:a7:1d:ee:11:da:71:42:ae:58:89:1d:57:
         5d:c9:0c:f8:d0:a1:86:20:49:f4:05:07:f0:ba:8f:e2:f0:d1:
         16:10:c8:88:33:4e:14:21:01:71:14:1d:dc:47:35:e2:11:c7:
         44:76:91:17:a3:09:0f:29:f5:d8:c3:6b:73:53:f4:64:d4:54:
         32:dc:3b:a2:bb:57:ef:8a:81:72:a3:69:86:f2:36:48:c9:e3:
         76:48:be:fe:ba:32:88:32:9e:77:d9:8a:7f:73:c4:76:5d:b6:
         3f:4d:5d:ff:ce:f9:ad:9b:52:65:4c:62:41:c8:d5:47:c3:20:
         d7:d4:45:74:d9:d5:be:cf:ce:f0:76:ae:d7:ed:a2:25:50:e1:
         b3:b1:e5:33:80:06:04:c3:d2:91:87:c5:bd:ca:85:0e:e6:1f:
         24:71:0b:74:c2:ff:02:29:97:2e:b3:b2:c4:c7:4c:6d:b8:bb:
         7f:25:4d:bc:b6:a5:6c:e1:50:4f:0b:10:ec:7c:26:46:da:a1:
         c9:fe:9c:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBb9mnorhDAsAyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4
M2RmMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk
NDUxYzkzZDUtZjA5MC00MTNkLWE0ZWYtZWE3OTg3YjIxMjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe5Yq5tKlTpUNzCS8Jz+wggaLG4iVuz+RF0K
e+sDTI9ejfDmu7tF7q0ICPRiGw+STk5NXwFW7mA9FmxRaO3NOqytMHg+EsISaT+m
eaqFnFYIDbj5cvesIeNt37XQuvCS/DPQ++fc3ErIZ3SspAVmGVM8es0Df6ODtKgV
jRiHDf6tPYG6D/e0rcfD3vwY1FhOS1r3GngboYVZ8WTuwg+pwZWd6k35lGBqiFQq
J3vfXjD1rJsJlzAr5FytLX0VJrtnsNlU1p25Y92IOe2j46CWoaYQTfDAik9GeVkr
bCe+hOgMN29l0y4SmEty23Y/J8Rhbf5RCTmoab645V6GLj7RuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMu7+reo7enqg6BoV8N3/jK3PubXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5
OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvM2EyNmJjMTYtN2FmYy0z
ZmNiLWI4ZGItODMwMzg2YWJmNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi
NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw
ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj
YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF52RMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCHNoHgQI3pMED6Mnv4OF8bEVticwHP+puM/U7/HyrwrHDDDvivKzKG
ZJEdF/T0uiPaXh8eSJYi1cU9xKcd7hHacUKuWIkdV13JDPjQoYYgSfQFB/C6j+Lw
0RYQyIgzThQhAXEUHdxHNeIRx0R2kRejCQ8p9djDa3NT9GTUVDLcO6K7V++KgXKj
aYbyNkjJ43ZIvv66MogynnfZin9zxHZdtj9NXf/O+a2bUmVMYkHI1UfDINfURXTZ
1b7PzvB2rtftoiVQ4bOx5TOABgTD0pGHxb3KhQ7mHyRxC3TC/wIply6zssTHTG24
u38lTby2pWzhUE8LEOx8Jkbaocn+nMM=
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:39 2025 by rpki-client