Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/78a9c919-48cd-37f4-9be8-5694de2388b6.roa
File:                     78a9c919-48cd-37f4-9be8-5694de2388b6.roa (raw, json)
Hash identifier:          gbZ/9+Ou1Xx3f82JAPNQzdxI/M9HEntPZ+6puIN5B/g=
Subject key identifier:   28:40:A5:1B:37:1B:1A:75:03:F6:3A:C2:41:E7:87:18:22:40:12:94
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584ABD4BA9D4DA58770B28BB3BD0
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/78a9c919-48cd-37f4-9be8-5694de2388b6.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     394996
IP address blocks:        24.144.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a9:d4:da:58:77:0b:28:bb:3b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=42e2a5e1-ba28-46e2-91bb-c6896e4f005f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:90:a1:19:0a:d9:49:af:2c:08:57:6f:5b:
                    36:6a:a9:5d:b7:b7:5f:63:ab:e3:05:a9:95:a8:f6:
                    d2:b9:c4:2d:d6:55:0b:aa:11:ff:30:ee:7b:1b:bd:
                    a0:a7:06:c7:ea:59:c7:ad:31:85:20:f3:24:d4:11:
                    68:c5:84:fb:64:d3:08:f6:5c:80:18:12:2a:95:b3:
                    ec:34:15:5e:a0:ad:ce:f3:67:49:7e:2a:d7:cb:80:
                    61:3e:74:b3:14:88:dc:d5:5c:b2:e4:48:67:00:9c:
                    b1:77:51:f8:82:2b:2f:30:8a:65:26:af:43:a1:ad:
                    56:69:42:d7:5a:f0:33:ff:44:96:9f:a8:33:26:88:
                    f7:d3:f8:0b:b9:50:fd:03:eb:ce:b4:5c:97:b2:70:
                    ec:5c:8a:8a:7d:e9:f6:01:64:c9:65:d1:11:7e:f8:
                    0c:5f:4d:00:f0:39:4c:2f:dc:21:36:be:a8:a5:73:
                    88:13:02:34:e9:db:26:1b:a5:7e:08:7b:95:09:a0:
                    21:bc:7c:f7:cf:ca:47:93:1f:a9:e3:a3:72:ed:8d:
                    64:5b:d5:46:7a:fd:d1:1e:f5:09:a7:a6:63:1c:ec:
                    50:0e:22:43:80:1b:7a:76:3a:b9:07:89:1c:43:f5:
                    b7:23:63:9d:8e:94:99:15:2e:6f:7e:c1:bd:be:a3:
                    e2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:40:A5:1B:37:1B:1A:75:03:F6:3A:C2:41:E7:87:18:22:40:12:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/78a9c919-48cd-37f4-9be8-5694de2388b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.144.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:7a:71:66:ed:40:fc:70:01:2e:67:2d:ec:d3:d6:be:dc:07:
         95:7c:93:24:2a:19:90:bc:3a:34:66:c0:95:ed:3f:1c:3d:eb:
         cb:f0:0c:7f:1b:fe:ed:9d:06:a2:6f:87:8e:3e:5c:f3:96:73:
         e4:34:e5:cb:e5:67:5c:14:06:3b:49:a7:7e:7a:cc:a9:ad:a7:
         a9:c0:ee:dc:ae:1b:3c:66:4a:19:f5:42:e6:3a:ac:c8:78:0e:
         c3:38:79:27:1c:36:82:f1:1d:b1:95:84:a3:ae:b2:a2:ac:d5:
         e2:38:80:47:fa:82:8d:8a:04:e5:50:97:3d:83:1e:87:af:4a:
         47:53:d9:33:47:f1:cd:54:68:63:3e:cc:69:ed:d5:50:1b:7a:
         66:7a:26:76:39:6b:01:b8:cb:62:26:51:b9:76:29:c7:fa:4d:
         15:a6:e5:16:05:22:f2:ab:e9:c5:bb:60:10:59:1e:54:a3:30:
         55:f6:3e:8e:fc:12:e5:ab:f0:55:dd:3a:24:67:a4:f1:df:05:
         d4:b5:e6:4e:b2:0a:c8:0c:ce:20:46:a6:63:f6:c8:78:de:f2:
         f0:09:78:e5:b2:1a:97:7f:ef:91:ee:c7:31:a1:75:66:94:e5:
         d3:d1:a9:80:f5:2c:29:29:9e:de:d0:1a:31:a4:f4:24:44:db:
         39:34:1e:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S6nU2lh3Cyi7O9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
NDJlMmE1ZTEtYmEyOC00NmUyLTkxYmItYzY4OTZlNGYwMDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttSQoRkK2UmvLAhXb1s2aqldt7dfY6vjBamV
qPbSucQt1lULqhH/MO57G72gpwbH6lnHrTGFIPMk1BFoxYT7ZNMI9lyAGBIqlbPs
NBVeoK3O82dJfirXy4BhPnSzFIjc1Vyy5EhnAJyxd1H4gisvMIplJq9Doa1WaULX
WvAz/0SWn6gzJoj30/gLuVD9A+vOtFyXsnDsXIqKfen2AWTJZdERfvgMX00A8DlM
L9whNr6opXOIEwI06dsmG6V+CHuVCaAhvHz3z8pHkx+p46Ny7Y1kW9VGev3RHvUJ
p6ZjHOxQDiJDgBt6djq5B4kcQ/W3I2OdjpSZFS5vfsG9vqPiuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFChApRs3Gxp1A/Y6wkHnhxgiQBKUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNzhhOWM5MTktNDhjZC0z
N2Y0LTliZTgtNTY5NGRlMjM4OGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGJBKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFR6cWbtQPxwAS5nLezT1r7cB5V8kyQqGZC8OjRmwJXtPxw968vwDH8b
/u2dBqJvh44+XPOWc+Q05cvlZ1wUBjtJp356zKmtp6nA7tyuGzxmShn1QuY6rMh4
DsM4eSccNoLxHbGVhKOusqKs1eI4gEf6go2KBOVQlz2DHoevSkdT2TNH8c1UaGM+
zGnt1VAbemZ6JnY5awG4y2ImUbl2Kcf6TRWm5RYFIvKr6cW7YBBZHlSjMFX2Po78
EuWr8FXdOiRnpPHfBdS15k6yCsgMziBGpmP2yHje8vAJeOWyGpd/75HuxzGhdWaU
5dPRqYD1LCkpnt7QGjGk9CRE2zk0Hq8=
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:37 2025 by rpki-client