Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6999198-2e40-4b47-b19f-dd16e9814295/5fd3e881-c0a6-3b48-8a88-3dbc1ebaa0ac.roa
File:                     5fd3e881-c0a6-3b48-8a88-3dbc1ebaa0ac.roa (raw, json)
Hash identifier:          DIb1bErr4DwS75/bIb7Xn6uSLb8U8tpVqDGzE1T696c=
Subject key identifier:   50:E3:74:CF:02:F6:38:BA:0E:34:8A:D1:89:B8:06:54:D5:82:AA:F5
Certificate issuer:       /CN=b6999198-2e40-4b47-b19f-dd16e9814295
Certificate serial:       010D0C9F4328584A7085F0BEB1B05CA39F61DD80
Authority key identifier: 18:01:56:10:87:D0:2F:F5:7A:58:D7:ED:E1:94:03:1A:D7:BC:57:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6999198-2e40-4b47-b19f-dd16e9814295.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6999198-2e40-4b47-b19f-dd16e9814295/5fd3e881-c0a6-3b48-8a88-3dbc1ebaa0ac.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     397732
IP address blocks:        23.143.232.0/24 maxlen: 24
                          64.93.88.0/22 maxlen: 24
                          66.118.20.0/22 maxlen: 24
                          199.192.152.0/21 maxlen: 24
                          2604:b840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6999198-2e40-4b47-b19f-dd16e9814295/b6999198-2e40-4b47-b19f-dd16e9814295.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6999198-2e40-4b47-b19f-dd16e9814295/b6999198-2e40-4b47-b19f-dd16e9814295.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6999198-2e40-4b47-b19f-dd16e9814295.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:f0:be:b1:b0:5c:a3:9f:61:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6999198-2e40-4b47-b19f-dd16e9814295
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=c9794b7f-3a53-4d61-acdd-e35a0ee074cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:56:69:d5:44:c1:80:34:49:a6:07:df:36:c2:
                    19:2b:a5:91:9c:b8:a7:d2:68:ce:ee:35:49:ea:e5:
                    a9:ca:0f:74:9d:7f:f4:b7:03:26:03:b7:88:81:d7:
                    8b:72:68:7e:09:10:cd:3d:a1:c8:08:c8:a9:2c:66:
                    8d:4d:9d:2a:99:7a:c3:41:c2:ed:61:8b:d3:76:70:
                    f4:a7:dd:ba:e7:2a:3e:b9:96:f0:78:80:2d:b5:f2:
                    9e:8c:6a:00:ec:8c:82:e1:c2:b3:35:83:ab:fb:1b:
                    12:75:56:df:9e:ef:4c:1c:1d:96:33:97:3f:4f:57:
                    b3:fd:e3:52:0a:f1:21:d6:6f:83:2e:79:a7:2f:e7:
                    a6:86:df:c8:a0:c1:7e:81:5c:67:98:fd:04:72:03:
                    46:75:0d:a3:78:1b:a1:2a:37:e2:f0:df:45:7c:c4:
                    50:86:b8:bc:a9:2a:22:bd:c7:18:fd:20:39:e1:44:
                    4e:7b:c1:e1:06:59:66:31:f1:de:3d:26:2b:c1:b5:
                    b9:0f:8e:fc:23:09:90:83:58:88:af:7d:26:c6:9b:
                    43:e0:97:2d:ae:a3:10:0c:f4:ef:d0:ff:46:93:35:
                    52:99:0c:9f:9f:e1:11:b7:aa:18:a4:67:70:91:6d:
                    51:e1:9e:3b:cb:9d:a8:54:65:56:35:76:7f:8f:72:
                    ef:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E3:74:CF:02:F6:38:BA:0E:34:8A:D1:89:B8:06:54:D5:82:AA:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6999198-2e40-4b47-b19f-dd16e9814295/5fd3e881-c0a6-3b48-8a88-3dbc1ebaa0ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6999198-2e40-4b47-b19f-dd16e9814295/b6999198-2e40-4b47-b19f-dd16e9814295.crl

            X509v3 Authority Key Identifier:
                keyid:18:01:56:10:87:D0:2F:F5:7A:58:D7:ED:E1:94:03:1A:D7:BC:57:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6999198-2e40-4b47-b19f-dd16e9814295.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.232.0/24
                  64.93.88.0/22
                  66.118.20.0/22
                  199.192.152.0/21
                IPv6:
                  2604:b840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:11:5b:f5:58:93:20:c5:ae:65:a9:66:17:9b:38:3f:b7:9c:
         99:1d:58:91:e6:98:d1:16:ed:c3:7f:0b:f0:72:5d:2a:66:65:
         d7:7d:95:70:a7:e6:79:cd:9b:e6:d5:bc:a6:1a:31:70:80:50:
         9a:17:af:06:30:2b:c9:3a:45:a2:ee:6c:21:6c:5d:62:cd:f9:
         18:06:b6:a8:e7:95:2c:7d:92:6d:e2:fa:3c:4c:ec:dd:da:68:
         62:ab:72:5a:a1:41:8b:da:04:5e:65:65:0f:4e:49:19:6a:ca:
         5d:a9:0b:5e:92:b0:6c:36:eb:02:a5:fd:63:36:27:54:a8:3f:
         79:32:e3:bd:2f:eb:85:64:af:08:e0:22:31:0c:e5:39:a5:bc:
         77:4a:8d:af:0f:c7:07:01:55:47:76:52:19:1c:f0:14:01:fb:
         52:e9:e1:50:c6:f3:61:4e:2f:b5:76:1f:2e:80:21:8d:05:88:
         99:f5:18:1b:28:88:95:5f:c9:35:53:e4:10:7c:90:46:d5:e8:
         cf:c5:e0:89:29:03:a2:91:a7:29:8a:2e:e2:81:7f:0d:0f:80:
         7e:2f:68:33:eb:ed:1d:59:c1:12:7b:95:ba:71:c2:cd:08:2f:
         1f:68:69:46:8d:02:5d:d0:2d:cb:d2:29:37:a3:c6:b2:49:54:
         64:5e:40:6c
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEpwhfC+sbBco59h3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjY5OTkxOTgtMmU0MC00YjQ3LWIxOWYtZGQxNmU5ODE0
Mjk1MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk
Yzk3OTRiN2YtM2E1My00ZDYxLWFjZGQtZTM1YTBlZTA3NGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVZp1UTBgDRJpgffNsIZK6WRnLin0mjO7jVJ
6uWpyg90nX/0twMmA7eIgdeLcmh+CRDNPaHICMipLGaNTZ0qmXrDQcLtYYvTdnD0
p9265yo+uZbweIAttfKejGoA7IyC4cKzNYOr+xsSdVbfnu9MHB2WM5c/T1ez/eNS
CvEh1m+DLnmnL+emht/IoMF+gVxnmP0EcgNGdQ2jeBuhKjfi8N9FfMRQhri8qSoi
vccY/SA54UROe8HhBllmMfHePSYrwbW5D478IwmQg1iIr30mxptD4JctrqMQDPTv
0P9GkzVSmQyfn+ERt6oYpGdwkW1R4Z47y52oVGVWNXZ/j3LvqQIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFFDjdM8C9ji6DjSK0Ym4BlTVgqr1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNjk5
OTE5OC0yZTQwLTRiNDctYjE5Zi1kZDE2ZTk4MTQyOTUvNWZkM2U4ODEtYzBhNi0z
YjQ4LThhODgtM2RiYzFlYmFhMGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjY5OTkxOTgtMmU0MC00YjQ3LWIx
OWYtZGQxNmU5ODE0Mjk1L2I2OTk5MTk4LTJlNDAtNGI0Ny1iMTlmLWRkMTZlOTgx
NDI5NS5jcmwwHwYDVR0jBBgwFoAUGAFWEIfQL/V6WNft4ZQDGte8VzwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iNjk5OTE5OC0yZTQwLTRiNDctYjE5Zi1kZDE2
ZTk4MTQyOTUuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAF4/oAwQC
QF1YAwQCQnYUAwQDx8CYMA0EAgACMAcDBQAmBLhAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJoRW/VYkyDF
rmWpZhebOD+3nJkdWJHmmNEW7cN/C/ByXSpmZdd9lXCn5nnNm+bVvKYaMXCAUJoX
rwYwK8k6RaLubCFsXWLN+RgGtqjnlSx9km3i+jxM7N3aaGKrclqhQYvaBF5lZQ9O
SRlqyl2pC16SsGw26wKl/WM2J1SoP3ky470v64VkrwjgIjEM5TmlvHdKja8PxwcB
VUd2Uhkc8BQB+1Lp4VDG82FOL7V2Hy6AIY0FiJn1GBsoiJVfyTVT5BB8kEbV6M/F
4IkpA6KRpymKLuKBfw0PgH4vaDPr7R1ZwRJ7lbpxws0ILx9oaUaNAl3QLcvSKTej
xrJJVGReQGw=
-----END CERTIFICATE-----
Generated at Thu Aug 7 17:30:33 2025 by rpki-client