Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/b9390863-5768-389d-9641-597ee1febed8.roa
File:                     b9390863-5768-389d-9641-597ee1febed8.roa (raw, json)
Hash identifier:          DVnO7nu1NrbKtrFragHquKkcKCpNRFvr7b+KtjwmvG0=
Subject key identifier:   F2:9E:97:5D:C0:66:BB:D4:40:E6:83:76:7D:FA:44:AC:20:3D:34:9F
Certificate issuer:       /CN=285991ba-0db5-48fe-92ff-d202c357d86d
Certificate serial:       010D0C9F4328584A268ABC40F800EE1D79233A00
Authority key identifier: 86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/b9390863-5768-389d-9641-597ee1febed8.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     31998
IP address blocks:        23.164.80.0/24 maxlen: 32
                          104.224.60.0/22 maxlen: 32
                          206.168.176.0/22 maxlen: 32
                          208.70.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:bc:40:f8:00:ee:1d:79:23:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285991ba-0db5-48fe-92ff-d202c357d86d
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=b78ef406-159a-4c07-9696-0a112e4c7250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:17:ae:dc:56:6d:0b:be:b2:f7:b3:18:88:ef:
                    37:62:4f:80:c6:1f:c8:51:e6:f0:aa:dd:4e:34:37:
                    4f:90:cb:74:b4:66:ae:53:6b:57:52:4e:4c:e0:bb:
                    21:43:2d:ae:03:40:7c:17:40:2d:6b:d6:80:cc:24:
                    b4:b6:c6:46:75:f7:da:8f:97:a6:c0:d2:c9:3d:77:
                    1f:df:97:3f:11:b1:e8:36:5c:86:f2:ad:a6:e6:1c:
                    6a:a9:85:4e:c9:91:56:86:05:5b:cf:34:8b:3c:74:
                    fd:6d:e8:e6:2d:ec:06:4d:e0:97:70:85:db:f9:8c:
                    08:cb:bf:36:27:f2:a3:73:38:65:6e:f1:c0:f3:d8:
                    73:c6:62:aa:f3:f3:f8:a8:9c:f1:1c:32:ea:c8:c0:
                    ed:6f:3d:cd:a0:5b:1e:da:50:e5:6c:e2:6d:0c:1d:
                    bb:43:59:54:5e:2e:8f:1c:14:02:ec:16:48:6a:1f:
                    d5:8d:dd:83:3d:af:62:aa:c8:f8:cb:58:ee:4d:c3:
                    17:3b:50:b2:05:46:7b:e8:a1:db:ba:a2:72:9b:ba:
                    fc:a5:d7:7c:6d:99:55:03:e4:75:cb:4f:44:5f:bf:
                    4e:64:82:b6:c5:5c:35:c7:4f:e0:3e:a6:01:9d:23:
                    8f:bc:5d:56:76:d7:b3:46:53:13:9e:3d:c2:e2:12:
                    a2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9E:97:5D:C0:66:BB:D4:40:E6:83:76:7D:FA:44:AC:20:3D:34:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/b9390863-5768-389d-9641-597ee1febed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl

            X509v3 Authority Key Identifier:
                keyid:86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.80.0/24
                  104.224.60.0/22
                  206.168.176.0/22
                  208.70.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e9:a6:01:05:ac:75:93:15:a0:3d:11:63:99:48:2c:d8:77:
         3a:f9:83:aa:5a:89:d5:13:61:89:63:6e:af:34:62:a2:df:cd:
         aa:e9:d3:d5:d3:46:29:e2:b6:ac:85:a4:0b:32:86:61:8c:eb:
         cf:46:9f:71:f4:67:a3:04:7e:b9:23:0b:9c:95:93:a4:55:62:
         ab:9d:74:90:51:b2:44:85:ea:5e:56:90:16:2b:90:d5:5b:84:
         68:b1:d8:bc:48:72:33:33:43:7f:c6:f1:bb:51:b5:c8:4b:85:
         3b:82:06:91:d3:0a:a3:ce:65:ca:9f:95:69:56:d8:cb:ab:6c:
         13:24:d0:3a:0e:fc:59:a1:fb:6e:cf:15:9f:25:4b:bc:c4:bf:
         b7:83:ca:99:67:8d:55:3e:ac:55:e6:a9:76:45:64:29:e5:42:
         55:c2:b1:61:9d:2b:ec:50:9e:60:bc:72:c1:89:05:50:9d:81:
         9d:52:be:8a:80:8f:91:cb:fc:3f:d2:2e:45:49:d6:96:bc:cc:
         87:7d:6c:71:b3:a8:e0:6a:77:bb:5b:ac:8d:00:58:7e:0a:d5:
         95:25:7a:fa:8f:f7:1a:74:96:d9:44:24:66:51:f0:da:77:b2:
         95:09:83:7f:25:52:48:ae:88:93:8b:b0:88:08:34:7b:37:7a:
         91:15:13:f6
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEomirxA+ADuHXkjOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg1OTkxYmEtMGRiNS00OGZlLTkyZmYtZDIwMmMzNTdk
ODZkMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk
Yjc4ZWY0MDYtMTU5YS00YzA3LTk2OTYtMGExMTJlNGM3MjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmReu3FZtC76y97MYiO83Yk+Axh/IUebwqt1O
NDdPkMt0tGauU2tXUk5M4LshQy2uA0B8F0Ata9aAzCS0tsZGdffaj5emwNLJPXcf
35c/EbHoNlyG8q2m5hxqqYVOyZFWhgVbzzSLPHT9bejmLewGTeCXcIXb+YwIy782
J/KjczhlbvHA89hzxmKq8/P4qJzxHDLqyMDtbz3NoFse2lDlbOJtDB27Q1lUXi6P
HBQC7BZIah/Vjd2DPa9iqsj4y1juTcMXO1CyBUZ76KHbuqJym7r8pdd8bZlVA+R1
y09EX79OZIK2xVw1x0/gPqYBnSOPvF1WdtezRlMTnj3C4hKi3QIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFPKel13AZrvUQOaDdn36RKwgPTSfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yODU5
OTFiYS0wZGI1LTQ4ZmUtOTJmZi1kMjAyYzM1N2Q4NmQvYjkzOTA4NjMtNTc2OC0z
ODlkLTk2NDEtNTk3ZWUxZmViZWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjg1OTkxYmEtMGRiNS00OGZlLTky
ZmYtZDIwMmMzNTdkODZkLzI4NTk5MWJhLTBkYjUtNDhmZS05MmZmLWQyMDJjMzU3
ZDg2ZC5jcmwwHwYDVR0jBBgwFoAUhmmOSco8aoME1RojxGFir6wBQq8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yODU5OTFiYS0wZGI1LTQ4ZmUtOTJmZi1kMjAy
YzM1N2Q4NmQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAF6RQAwQC
aOA8AwQCzqiwAwQC0EYMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBADHppgEFrHWTFaA9EWOZSCzYdzr5g6pa
idUTYYljbq80YqLfzarp09XTRinitqyFpAsyhmGM689Gn3H0Z6MEfrkjC5yVk6RV
YquddJBRskSF6l5WkBYrkNVbhGix2LxIcjMzQ3/G8btRtchLhTuCBpHTCqPOZcqf
lWlW2MurbBMk0DoO/Fmh+27PFZ8lS7zEv7eDyplnjVU+rFXmqXZFZCnlQlXCsWGd
K+xQnmC8csGJBVCdgZ1SvoqAj5HL/D/SLkVJ1pa8zId9bHGzqOBqd7tbrI0AWH4K
1ZUlevqP9xp0ltlEJGZR8Np3spUJg38lUkiuiJOLsIgINHs3epEVE/Y=
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:14:04 2025 by rpki-client