Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/91115247-b441-3259-a41f-3fbc5e5d5de0.roa
File:                     91115247-b441-3259-a41f-3fbc5e5d5de0.roa (raw, json)
Hash identifier:          5uWSfaxXMPOKhVy8vKrGNIWgX29RhpkxLDnzsPhzYH4=
Subject key identifier:   F1:B6:08:A6:0D:52:A3:58:D8:14:77:57:99:47:C8:E8:08:EE:AE:8C
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584AC2E0E6D106922F05005E57F8
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/91115247-b441-3259-a41f-3fbc5e5d5de0.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     209
IP address blocks:        64.192.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:e6:d1:06:92:2f:05:00:5e:57:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=929d4f55-e578-4118-8181-01aa6c2ed2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:33:ad:28:77:01:f1:b6:d4:ad:66:1a:0a:e1:
                    db:60:89:67:a8:6d:30:4f:51:d4:92:89:71:6b:be:
                    bd:d8:13:c3:10:f0:8d:d4:12:e2:34:55:97:81:b2:
                    7d:13:65:17:22:82:01:63:b0:1c:2a:ae:c6:b4:17:
                    c1:71:a3:90:f1:28:99:72:98:5f:00:62:7c:c6:7a:
                    77:6b:d2:9e:b0:ea:d1:95:28:ac:cb:f6:83:eb:f4:
                    3b:23:2b:e3:cc:6c:5a:82:c8:1c:3d:85:04:70:44:
                    42:02:14:33:0d:53:f2:88:1e:dd:d5:6a:39:2d:b8:
                    77:1c:60:34:fc:c1:9c:80:6c:55:90:eb:b5:05:43:
                    98:ab:b7:13:6e:66:c7:2e:12:70:1b:e1:9b:72:40:
                    ac:1b:b1:df:89:76:28:15:74:6e:78:36:dd:91:4e:
                    83:d1:97:c2:12:67:08:fe:0c:7b:50:4f:2f:04:25:
                    78:8c:0c:40:30:99:4d:f6:16:cd:cd:4b:b3:6a:80:
                    2d:ed:0e:79:3b:4f:23:50:84:cb:93:af:2c:56:7a:
                    04:af:60:d4:76:02:c9:69:d4:3c:45:36:34:ba:2b:
                    b2:81:d2:ce:87:7c:15:07:2e:f7:90:37:b0:ce:65:
                    52:a3:da:ba:e7:a3:92:bf:85:2d:0b:48:12:07:ec:
                    7e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B6:08:A6:0D:52:A3:58:D8:14:77:57:99:47:C8:E8:08:EE:AE:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/91115247-b441-3259-a41f-3fbc5e5d5de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.192.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:91:b2:a9:22:50:aa:91:fc:e6:9c:bf:f1:dc:d3:2d:75:bb:
         c7:e5:61:b5:82:ad:58:8e:43:6a:70:47:88:cc:50:01:e0:5a:
         74:c1:6b:eb:00:0f:73:06:9c:85:d7:32:84:e6:af:6e:dc:40:
         a2:87:c6:ac:d8:0d:4a:45:5c:d9:e2:76:b0:fc:60:b4:ff:21:
         18:a4:65:de:f7:47:88:b5:32:b3:9c:30:15:37:89:da:09:0a:
         f5:ca:69:7b:12:5c:bf:d1:b7:5c:b3:bc:59:c3:63:88:57:7c:
         2f:33:52:ef:17:ef:6c:c8:a0:3e:11:66:99:0e:46:61:3c:29:
         f3:f3:11:33:ea:a3:c1:21:78:ed:e9:60:24:3f:0c:50:aa:83:
         c6:05:f9:7a:ec:46:99:2b:82:d1:db:a4:6c:61:d2:c0:ea:f0:
         9c:f4:80:53:9d:76:9e:da:f0:9d:bb:bd:d6:53:c2:3f:0b:c9:
         32:24:e6:b4:fc:10:c2:71:2e:86:8f:67:7b:ac:1b:50:66:da:
         65:8c:3a:1e:a4:63:52:3f:46:46:d8:f4:03:01:8c:c3:4e:df:
         a5:5f:35:89:8a:f7:58:2d:5d:b2:b1:20:93:fd:b0:49:33:0c:
         94:28:d1:16:a4:c4:5b:94:79:59:bd:86:00:bf:27:5a:43:8e:
         ad:d6:e6:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4ObRBpIvBQBeV/gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
OTI5ZDRmNTUtZTU3OC00MTE4LTgxODEtMDFhYTZjMmVkMmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTOtKHcB8bbUrWYaCuHbYIlnqG0wT1HUkolx
a7692BPDEPCN1BLiNFWXgbJ9E2UXIoIBY7AcKq7GtBfBcaOQ8SiZcphfAGJ8xnp3
a9KesOrRlSisy/aD6/Q7IyvjzGxagsgcPYUEcERCAhQzDVPyiB7d1Wo5Lbh3HGA0
/MGcgGxVkOu1BUOYq7cTbmbHLhJwG+GbckCsG7HfiXYoFXRueDbdkU6D0ZfCEmcI
/gx7UE8vBCV4jAxAMJlN9hbNzUuzaoAt7Q55O08jUITLk68sVnoEr2DUdgLJadQ8
RTY0uiuygdLOh3wVBy73kDewzmVSo9q656OSv4UtC0gSB+x+iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPG2CKYNUqNY2BR3V5lHyOgI7q6MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOTExMTUyNDctYjQ0MS0z
MjU5LWE0MWYtM2ZiYzVlNWQ1ZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMBfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJiRsqkiUKqR/Oacv/Hc0y11u8flYbWCrViOQ2pwR4jMUAHgWnTBa+sA
D3MGnIXXMoTmr27cQKKHxqzYDUpFXNnidrD8YLT/IRikZd73R4i1MrOcMBU3idoJ
CvXKaXsSXL/Rt1yzvFnDY4hXfC8zUu8X72zIoD4RZpkORmE8KfPzETPqo8EheO3p
YCQ/DFCqg8YF+XrsRpkrgtHbpGxh0sDq8Jz0gFOddp7a8J27vdZTwj8LyTIk5rT8
EMJxLoaPZ3usG1Bm2mWMOh6kY1I/RkbY9AMBjMNO36VfNYmK91gtXbKxIJP9sEkz
DJQo0RakxFuUeVm9hgC/J1pDjq3W5kw=
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:22:05 2025 by rpki-client