Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/c7da233b-ef21-3e7e-be72-59a2cefd72bc.roa
File:                     c7da233b-ef21-3e7e-be72-59a2cefd72bc.roa (raw, json)
Hash identifier:          KJdAce56wR5maY+iHzZ9Y6NqaSNeY1Qla2zucsXfNqo=
Subject key identifier:   31:F1:5D:0B:88:0A:B8:46:82:21:15:28:E6:45:D9:81:0D:E5:3A:9B
Certificate issuer:       /CN=5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba
Certificate serial:       010D0C9F4328584AA6F62EA88549E790D4482300
Authority key identifier: E7:25:80:10:AC:E9:3C:2E:71:67:98:DD:74:69:33:AC:C5:77:87:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/c7da233b-ef21-3e7e-be72-59a2cefd72bc.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     133073
IP address blocks:        23.155.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:2e:a8:85:49:e7:90:d4:48:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=ddd5559a-a069-4150-8151-5f0b55349bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:93:b3:18:11:4f:1f:21:ed:7d:af:21:94:e7:
                    28:71:0e:cf:35:d8:9c:20:25:14:e7:7b:af:58:a9:
                    83:01:c8:c1:a2:3f:10:8f:34:40:0e:f1:8c:c2:a2:
                    f1:cc:6e:83:d6:70:91:bc:5d:22:8a:b7:30:14:68:
                    9d:15:db:96:6f:9e:a1:68:3d:65:24:7f:54:b6:ec:
                    40:cf:d4:f3:cb:5b:f4:4d:29:76:9d:16:c7:6e:0b:
                    46:87:a0:c4:c0:4f:6b:5e:91:40:73:40:64:40:5f:
                    8c:cc:95:2a:b1:d8:32:0c:e5:c7:03:1c:1e:94:b4:
                    0d:12:1a:a8:20:2b:84:6d:dc:50:cf:0c:9a:9c:2d:
                    4f:3b:0b:ad:e2:5e:4a:02:83:ff:c2:86:39:69:44:
                    b7:b6:f4:f4:9e:32:26:9d:0d:e0:53:9c:fd:63:71:
                    8d:fb:a9:3f:36:b9:f9:82:b3:48:f1:4a:87:79:a7:
                    ea:c1:fb:8d:c6:97:8f:f3:01:94:84:91:30:d8:7a:
                    29:1c:b1:32:b1:44:a2:b1:f7:90:86:67:7f:dd:01:
                    83:70:38:da:05:e4:dc:f2:12:cf:94:ee:e5:fd:fa:
                    55:1e:aa:05:77:98:67:63:bd:39:50:0c:0e:7e:b8:
                    f9:53:95:ef:7c:83:21:c7:12:b8:7c:08:04:9b:c2:
                    a7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F1:5D:0B:88:0A:B8:46:82:21:15:28:E6:45:D9:81:0D:E5:3A:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/c7da233b-ef21-3e7e-be72-59a2cefd72bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.crl

            X509v3 Authority Key Identifier:
                keyid:E7:25:80:10:AC:E9:3C:2E:71:67:98:DD:74:69:33:AC:C5:77:87:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:39:9a:30:1e:7e:21:7f:97:53:5d:86:a8:20:e5:bb:03:56:
         f6:aa:f6:19:22:94:f8:47:91:20:b4:6c:38:3f:d4:1a:92:4c:
         0f:41:43:b4:8b:38:b3:5a:dd:c5:b2:10:11:0a:fd:fa:73:be:
         9e:eb:36:31:f0:d6:23:f6:e7:4c:1d:17:62:6c:b6:91:1b:9c:
         ae:cc:6b:82:7b:3a:2a:a3:5a:a2:ae:2b:2f:e8:4c:98:cf:be:
         d7:fc:5a:8a:68:64:e4:08:19:cc:4b:22:5b:73:08:63:90:9e:
         96:18:83:b0:e6:1a:38:de:9a:74:56:7e:b1:74:3d:f1:d9:5b:
         03:ba:da:b6:71:c2:58:d3:04:fc:62:87:34:15:c1:5e:5e:9e:
         3e:0e:5f:dd:b6:4d:ea:13:34:25:0f:82:8c:5d:0a:3b:5c:fc:
         bd:14:ab:bb:1c:61:67:c0:40:49:58:a4:07:e4:d6:bd:0d:ca:
         ef:47:27:5d:3d:62:c5:3d:1f:f3:5f:36:65:f4:d7:51:db:c9:
         e6:19:4d:41:19:95:1b:9f:df:b6:2f:13:33:63:4b:b6:fb:80:
         a8:df:07:75:55:af:59:ad:19:51:7c:b1:8c:10:24:9c:95:e0:
         e8:48:4c:8c:e5:02:de:cc:fa:32:04:eb:1b:2e:b7:a8:80:1b:
         90:36:a1:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9i6ohUnnkNRIIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWEzYTg3ZjItYjlhZC00YzRmLWJiODgtNWNjMWUwZTU4
MGJhMB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk
ZGRkNTU1OWEtYTA2OS00MTUwLTgxNTEtNWYwYjU1MzQ5YmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJOzGBFPHyHtfa8hlOcocQ7PNdicICUU53uv
WKmDAcjBoj8QjzRADvGMwqLxzG6D1nCRvF0iircwFGidFduWb56haD1lJH9UtuxA
z9Tzy1v0TSl2nRbHbgtGh6DEwE9rXpFAc0BkQF+MzJUqsdgyDOXHAxwelLQNEhqo
ICuEbdxQzwyanC1POwut4l5KAoP/woY5aUS3tvT0njImnQ3gU5z9Y3GN+6k/Nrn5
grNI8UqHeafqwfuNxpeP8wGUhJEw2HopHLEysUSisfeQhmd/3QGDcDjaBeTc8hLP
lO7l/fpVHqoFd5hnY705UAwOfrj5U5XvfIMhxxK4fAgEm8KnVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDHxXQuICrhGgiEVKOZF2YEN5TqbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTNh
ODdmMi1iOWFkLTRjNGYtYmI4OC01Y2MxZTBlNTgwYmEvYzdkYTIzM2ItZWYyMS0z
ZTdlLWJlNzItNTlhMmNlZmQ3MmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWEzYTg3ZjItYjlhZC00YzRmLWJi
ODgtNWNjMWUwZTU4MGJhLzVhM2E4N2YyLWI5YWQtNGM0Zi1iYjg4LTVjYzFlMGU1
ODBiYS5jcmwwHwYDVR0jBBgwFoAU5yWAEKzpPC5xZ5jddGkzrMV3h8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTNhODdmMi1iOWFkLTRjNGYtYmI4OC01Y2Mx
ZTBlNTgwYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5toMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH05mjAefiF/l1Ndhqgg5bsDVvaq9hkilPhHkSC0bDg/1BqSTA9BQ7SL
OLNa3cWyEBEK/fpzvp7rNjHw1iP250wdF2JstpEbnK7Ma4J7OiqjWqKuKy/oTJjP
vtf8WopoZOQIGcxLIltzCGOQnpYYg7DmGjjemnRWfrF0PfHZWwO62rZxwljTBPxi
hzQVwV5enj4OX922TeoTNCUPgoxdCjtc/L0Uq7scYWfAQElYpAfk1r0Nyu9HJ109
YsU9H/NfNmX011HbyeYZTUEZlRuf37YvEzNjS7b7gKjfB3VVr1mtGVF8sYwQJJyV
4OhITIzlAt7M+jIE6xsut6iAG5A2oTA=
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:07:43 2025 by rpki-client