Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517/228b9f3f-9b6f-3ba3-94ea-ecafab68c1ca.roa
File:                     228b9f3f-9b6f-3ba3-94ea-ecafab68c1ca.roa (raw, json)
Hash identifier:          sDw2zRd4D0edi6vmPHrnGqfi9XIy+3qCoG8RFWJBF5k=
Subject key identifier:   34:DC:31:0A:4E:65:3F:E7:9D:D9:6B:19:2D:EE:52:0C:FC:D0:73:F0
Certificate issuer:       /CN=6fb1732e-723b-4926-bfae-2f7334753517
Certificate serial:       010D0C9F4328584BB45D125ABFA3D0D19AE61000
Authority key identifier: D1:52:3C:44:A6:FB:62:61:9F:6C:6A:D6:E0:2B:00:CF:02:8D:E1:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517/228b9f3f-9b6f-3ba3-94ea-ecafab68c1ca.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     399971
IP address blocks:        23.247.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517/6fb1732e-723b-4926-bfae-2f7334753517.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517/6fb1732e-723b-4926-bfae-2f7334753517.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:12:5a:bf:a3:d0:d1:9a:e6:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb1732e-723b-4926-bfae-2f7334753517
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=4b2f0f4d-e358-4ecb-8efb-28e96f01a5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:25:f6:5e:c2:4c:6c:0b:b0:09:cb:d4:17:ba:
                    5b:df:0e:ee:10:79:ce:73:78:01:c0:fc:13:d4:0b:
                    ea:e0:19:6f:9e:1a:9b:ce:c9:6e:44:1a:51:ea:99:
                    3f:57:2a:46:f5:21:b3:a2:e5:8f:a2:26:6b:4a:62:
                    b3:12:58:af:1d:41:49:c9:df:43:8c:76:76:3a:3d:
                    ba:15:0a:e3:f9:0b:64:9a:13:fb:23:40:93:1a:68:
                    47:38:a6:b4:12:ae:fd:e8:86:f0:6e:71:ed:a1:3e:
                    3e:ac:70:57:ee:46:df:11:4e:79:bd:af:74:9c:c6:
                    b3:4e:0e:23:d9:83:74:56:99:d4:4a:34:72:a3:95:
                    95:b7:35:ab:83:40:dc:c1:2b:7d:4e:63:d3:e9:a9:
                    f3:59:bf:d8:e0:0d:a5:ab:a7:c3:63:31:da:a3:ef:
                    b4:9b:9f:71:6d:0f:e6:7e:cc:e1:f7:e7:80:e7:e8:
                    2e:26:9f:35:53:82:5c:ab:a1:5a:6b:54:98:75:32:
                    5a:6f:3f:1c:77:42:7e:85:05:e2:1b:4b:b1:44:1c:
                    52:5c:f6:8f:fe:8a:7c:91:75:74:d1:e6:16:a7:5b:
                    0c:7f:12:66:87:c9:2d:b1:b1:db:c6:35:7b:e0:62:
                    a5:27:41:79:ac:c2:c1:ac:45:c4:52:ca:b2:9d:f1:
                    7c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DC:31:0A:4E:65:3F:E7:9D:D9:6B:19:2D:EE:52:0C:FC:D0:73:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517/228b9f3f-9b6f-3ba3-94ea-ecafab68c1ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517/6fb1732e-723b-4926-bfae-2f7334753517.crl

            X509v3 Authority Key Identifier:
                keyid:D1:52:3C:44:A6:FB:62:61:9F:6C:6A:D6:E0:2B:00:CF:02:8D:E1:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:a7:54:a5:04:bb:33:75:82:c3:11:53:f2:41:c3:73:ea:ce:
         6f:6c:be:29:da:7d:6a:f0:52:9b:70:c2:48:a6:72:93:c5:af:
         19:22:7e:3d:ae:f2:df:7f:8b:1f:11:4a:4b:a2:ed:df:61:fd:
         df:58:24:f6:b1:d9:89:5f:2d:90:49:9c:74:20:65:64:04:ff:
         0e:e0:48:bd:19:43:cc:61:3e:fc:26:91:01:a1:74:91:88:91:
         8c:96:b0:57:c6:48:83:e9:c5:a4:2f:b8:f0:17:15:e2:d0:fd:
         60:67:08:2d:a3:c9:95:2b:7e:f3:50:c8:13:25:7b:65:55:e7:
         fd:e7:ba:18:c0:da:67:7e:36:76:04:d5:aa:59:ec:25:59:40:
         1d:c2:68:0a:1f:76:45:a7:77:10:54:31:5e:0e:e2:a6:93:4a:
         fa:58:f1:79:8e:93:cc:76:26:f5:10:f1:19:54:c4:56:ba:9f:
         55:17:bd:e6:8d:2d:2b:a6:c4:d7:c5:f3:84:48:2f:2a:b4:b8:
         b8:17:04:ae:fc:a8:eb:f7:55:48:40:57:26:bf:41:b9:83:06:
         ee:d9:f2:52:39:5d:ee:5b:a6:89:89:59:59:4c:0d:57:0e:1c:
         bc:7b:82:98:50:1a:92:71:83:47:f3:62:c9:59:6a:92:0b:2b:
         ab:84:12:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRJav6PQ0ZrmEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmZiMTczMmUtNzIzYi00OTI2LWJmYWUtMmY3MzM0NzUz
NTE3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
NGIyZjBmNGQtZTM1OC00ZWNiLThlZmItMjhlOTZmMDFhNWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSX2XsJMbAuwCcvUF7pb3w7uEHnOc3gBwPwT
1Avq4BlvnhqbzsluRBpR6pk/VypG9SGzouWPoiZrSmKzElivHUFJyd9DjHZ2Oj26
FQrj+QtkmhP7I0CTGmhHOKa0Eq796IbwbnHtoT4+rHBX7kbfEU55va90nMazTg4j
2YN0VpnUSjRyo5WVtzWrg0DcwSt9TmPT6anzWb/Y4A2lq6fDYzHao++0m59xbQ/m
fszh9+eA5+guJp81U4Jcq6Faa1SYdTJabz8cd0J+hQXiG0uxRBxSXPaP/op8kXV0
0eYWp1sMfxJmh8ktsbHbxjV74GKlJ0F5rMLBrEXEUsqynfF82QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTcMQpOZT/nndlrGS3uUgz80HPwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ZmIx
NzMyZS03MjNiLTQ5MjYtYmZhZS0yZjczMzQ3NTM1MTcvMjI4YjlmM2YtOWI2Zi0z
YmEzLTk0ZWEtZWNhZmFiNjhjMWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmZiMTczMmUtNzIzYi00OTI2LWJm
YWUtMmY3MzM0NzUzNTE3LzZmYjE3MzJlLTcyM2ItNDkyNi1iZmFlLTJmNzMzNDc1
MzUxNy5jcmwwHwYDVR0jBBgwFoAU0VI8RKb7YmGfbGrW4CsAzwKN4egwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82ZmIxNzMyZS03MjNiLTQ5MjYtYmZhZS0yZjcz
MzQ3NTM1MTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/fgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALanVKUEuzN1gsMRU/JBw3Pqzm9svinafWrwUptwwkimcpPFrxkifj2u
8t9/ix8RSkui7d9h/d9YJPax2YlfLZBJnHQgZWQE/w7gSL0ZQ8xhPvwmkQGhdJGI
kYyWsFfGSIPpxaQvuPAXFeLQ/WBnCC2jyZUrfvNQyBMle2VV5/3nuhjA2md+NnYE
1apZ7CVZQB3CaAofdkWndxBUMV4O4qaTSvpY8XmOk8x2JvUQ8RlUxFa6n1UXveaN
LSumxNfF84RILyq0uLgXBK78qOv3VUhAVya/QbmDBu7Z8lI5Xe5bpomJWVlMDVcO
HLx7gphQGpJxg0fzYslZapILK6uEEu4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:14:04 2025 by rpki-client