Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/d20a987f-18e0-34af-a31d-c7adaa75767b.roa
File:                     d20a987f-18e0-34af-a31d-c7adaa75767b.roa (raw, json)
Hash identifier:          8vHbHo0m3q0DyrGwTarbomzrrvESgrXhV4NakfiO1NA=
Subject key identifier:   23:BA:F2:0E:C1:6C:12:C9:6A:73:2B:40:A2:2A:13:8D:D0:CF:D7:48
Certificate issuer:       /CN=10fa2500-375d-430f-932e-9e2080243439
Certificate serial:       010D0C9F4328584AA160E20B1B4D383D79B77780
Authority key identifier: EC:2E:E1:0E:27:6F:DE:AD:2C:F8:2D:F1:A7:18:49:8C:CB:EC:DB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/d20a987f-18e0-34af-a31d-c7adaa75767b.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     23261
IP address blocks:        136.175.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/10fa2500-375d-430f-932e-9e2080243439.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/10fa2500-375d-430f-932e-9e2080243439.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:e2:0b:1b:4d:38:3d:79:b7:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fa2500-375d-430f-932e-9e2080243439
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=932028dc-85ca-4ea9-a7ac-cde5732b7a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:67:54:75:93:ba:3d:81:b4:3b:7b:12:a8:51:
                    b9:5b:49:c8:05:8b:c4:b6:a3:18:9d:58:1a:33:19:
                    57:e3:34:d0:0e:3a:37:dc:e0:c4:3e:fe:e2:01:5e:
                    fe:82:61:fa:1d:0b:7a:0f:79:83:45:4e:3e:53:46:
                    01:04:f1:12:8e:48:1b:94:9a:19:9a:d5:e4:a3:ab:
                    51:b6:f0:32:6e:a4:24:eb:12:ca:c3:50:58:8d:c5:
                    50:04:74:12:f2:d3:b6:67:65:d9:69:6b:9c:ba:c7:
                    e9:26:93:72:c3:92:83:4a:dc:f5:b7:7a:2a:94:43:
                    49:3d:e5:ef:92:5c:fc:3c:b1:27:52:ee:d5:27:ee:
                    87:9a:a7:09:b0:88:b3:b1:e2:e5:3c:8c:be:03:fb:
                    da:f5:0b:c2:41:66:03:89:bf:de:00:fd:35:3e:84:
                    ce:35:42:05:b5:03:29:e4:0e:33:a5:2f:41:38:96:
                    b5:81:eb:64:4f:d2:f5:16:8f:7e:37:1d:a3:fe:cc:
                    b1:0c:b2:9f:8d:10:4b:88:fa:bb:cc:05:e4:5e:ad:
                    d8:db:4b:cf:7c:93:46:a7:20:32:ee:5c:7f:66:5d:
                    d6:ab:3b:89:8f:af:64:46:09:f5:b6:6a:ae:7f:54:
                    08:80:ae:ee:12:6e:a9:89:f5:b4:72:6f:ea:b4:73:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BA:F2:0E:C1:6C:12:C9:6A:73:2B:40:A2:2A:13:8D:D0:CF:D7:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/d20a987f-18e0-34af-a31d-c7adaa75767b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/10fa2500-375d-430f-932e-9e2080243439.crl

            X509v3 Authority Key Identifier:
                keyid:EC:2E:E1:0E:27:6F:DE:AD:2C:F8:2D:F1:A7:18:49:8C:CB:EC:DB:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:8a:f3:eb:e0:8d:86:f0:a8:e0:dd:29:6d:86:24:e9:bd:58:
         45:58:bd:9d:31:80:7e:4b:b4:a8:56:2e:66:d5:fa:1b:53:5d:
         76:b6:c4:4d:64:b9:ad:7b:48:e3:e0:20:0b:5f:82:10:d3:c7:
         5e:87:25:da:a3:67:eb:4a:0a:f9:49:47:a2:46:f2:04:1d:1b:
         78:0e:ff:43:b4:04:5c:2c:a7:50:91:80:d8:a7:cb:9a:57:88:
         1e:ee:9d:0a:68:34:ea:2b:90:5b:77:e7:46:13:70:9a:c6:2f:
         f7:c6:ed:d6:84:cc:ac:9d:35:03:5f:bb:57:08:9a:74:59:b9:
         94:fe:0d:7b:cb:63:2d:72:31:9b:22:b2:6d:78:f2:1b:a4:00:
         c0:e5:24:20:89:8f:cd:8d:d4:30:5e:ba:8c:b3:4c:58:d0:4a:
         78:a8:c7:7d:4e:35:ad:39:a3:c2:d1:d4:0e:7c:21:18:ad:54:
         03:97:9f:c4:6a:f9:bb:0c:cc:39:df:63:a2:3e:45:9c:54:30:
         e0:1a:fc:dd:b4:e7:9f:84:b0:be:0c:af:8c:0b:5b:6d:ad:7d:
         34:2e:92:ae:d9:71:e2:db:84:64:c6:7d:4d:8d:12:3c:e5:80:
         71:bb:0c:01:19:99:f7:76:be:91:b6:1f:e0:0a:ec:07:f9:2e:
         e1:a8:54:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYOILG004PXm3d4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTBmYTI1MDAtMzc1ZC00MzBmLTkzMmUtOWUyMDgwMjQz
NDM5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
OTMyMDI4ZGMtODVjYS00ZWE5LWE3YWMtY2RlNTczMmI3YTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2dUdZO6PYG0O3sSqFG5W0nIBYvEtqMYnVga
MxlX4zTQDjo33ODEPv7iAV7+gmH6HQt6D3mDRU4+U0YBBPESjkgblJoZmtXko6tR
tvAybqQk6xLKw1BYjcVQBHQS8tO2Z2XZaWucusfpJpNyw5KDStz1t3oqlENJPeXv
klz8PLEnUu7VJ+6HmqcJsIizseLlPIy+A/va9QvCQWYDib/eAP01PoTONUIFtQMp
5A4zpS9BOJa1getkT9L1Fo9+Nx2j/syxDLKfjRBLiPq7zAXkXq3Y20vPfJNGpyAy
7lx/Zl3WqzuJj69kRgn1tmquf1QIgK7uEm6pifW0cm/qtHP6uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCO68g7BbBLJanMrQKIqE43Qz9dIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMGZh
MjUwMC0zNzVkLTQzMGYtOTMyZS05ZTIwODAyNDM0MzkvZDIwYTk4N2YtMThlMC0z
NGFmLWEzMWQtYzdhZGFhNzU3NjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTBmYTI1MDAtMzc1ZC00MzBmLTkz
MmUtOWUyMDgwMjQzNDM5LzEwZmEyNTAwLTM3NWQtNDMwZi05MzJlLTllMjA4MDI0
MzQzOS5jcmwwHwYDVR0jBBgwFoAU7C7hDidv3q0s+C3xpxhJjMvs25AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMGZhMjUwMC0zNzVkLTQzMGYtOTMyZS05ZTIw
ODAyNDM0MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiK90MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGyK8+vgjYbwqODdKW2GJOm9WEVYvZ0xgH5LtKhWLmbV+htTXXa2xE1k
ua17SOPgIAtfghDTx16HJdqjZ+tKCvlJR6JG8gQdG3gO/0O0BFwsp1CRgNiny5pX
iB7unQpoNOorkFt350YTcJrGL/fG7daEzKydNQNfu1cImnRZuZT+DXvLYy1yMZsi
sm148hukAMDlJCCJj82N1DBeuoyzTFjQSniox31ONa05o8LR1A58IRitVAOXn8Rq
+bsMzDnfY6I+RZxUMOAa/N2055+EsL4Mr4wLW22tfTQukq7ZceLbhGTGfU2NEjzl
gHG7DAEZmfd2vpG2H+AK7Af5LuGoVAw=
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:56 2025 by rpki-client