Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/67afccfc-971d-3664-bda2-59ef795c9140.roa
File:                     67afccfc-971d-3664-bda2-59ef795c9140.roa (raw, json)
Hash identifier:          HWD2814ZIFgylSCehSCMr+1ubf5VZ0qXZzd8McsKMxU=
Subject key identifier:   58:8C:C1:CB:2F:2C:FC:4D:8F:8E:24:79:CF:DD:05:08:DF:DD:58:59
Certificate issuer:       /CN=344c647c-2bcf-4b84-a292-fe7e96b86354
Certificate serial:       010D0C9F4328584BAA97A7DC30906D5191FCE580
Authority key identifier: B6:11:09:F6:41:4B:57:A8:D7:2F:88:E1:72:4E:FE:DC:8A:AA:6B:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/67afccfc-971d-3664-bda2-59ef795c9140.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     63150
IP address blocks:        23.187.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:a7:dc:30:90:6d:51:91:fc:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344c647c-2bcf-4b84-a292-fe7e96b86354
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=881eeebb-b50a-4a49-b69d-6aa926df7809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:22:69:b2:85:f5:61:a4:7d:f2:ed:a3:c8:11:
                    f8:83:e1:df:23:44:27:ff:20:13:48:1c:1f:ae:b6:
                    7e:f5:20:05:b9:03:3d:af:98:de:68:ff:8e:d3:fd:
                    5d:b9:a5:1d:82:f2:ee:45:1e:f1:dd:29:37:2b:79:
                    99:98:84:70:87:d6:5f:b5:67:ed:3d:0d:3d:8f:85:
                    c0:94:35:b8:c1:0a:c0:0f:d0:f3:8f:dd:a0:42:c6:
                    f2:ab:fc:6e:f5:ec:98:93:04:21:12:b2:e4:62:55:
                    d8:67:b2:30:9f:95:d3:75:a9:62:66:f1:7a:a5:8f:
                    42:ab:fb:8b:bb:b2:20:94:1d:5f:5a:99:52:a8:0f:
                    9e:df:cf:a2:00:c3:69:50:43:15:84:c1:3e:ff:eb:
                    7a:d0:5c:b6:62:67:ab:66:51:d3:1a:c9:72:80:c1:
                    9d:5a:e2:54:f6:e9:84:af:2d:6c:74:70:0d:6e:47:
                    e1:cf:f6:da:bd:3c:5c:f1:08:37:69:26:ff:fe:85:
                    4d:52:09:e2:bf:5b:b9:fa:c3:3b:2d:e3:63:c9:29:
                    01:91:00:82:7e:7c:65:22:43:0f:77:fe:c7:0b:f3:
                    c0:0a:22:80:84:d6:71:47:24:0f:66:7e:4f:f6:a3:
                    94:4f:a5:45:25:eb:df:56:56:b3:90:5f:8c:5c:80:
                    94:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8C:C1:CB:2F:2C:FC:4D:8F:8E:24:79:CF:DD:05:08:DF:DD:58:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/67afccfc-971d-3664-bda2-59ef795c9140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.crl

            X509v3 Authority Key Identifier:
                keyid:B6:11:09:F6:41:4B:57:A8:D7:2F:88:E1:72:4E:FE:DC:8A:AA:6B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:89:e6:05:12:0b:74:13:44:23:62:7d:85:e8:ee:9d:60:99:
         98:c9:11:cd:05:ef:d7:cf:00:a1:f9:15:a2:be:e3:6c:17:ff:
         19:4a:4e:b9:40:84:04:e2:ca:4b:29:7c:f2:3c:8a:9b:a1:79:
         40:36:3b:88:15:93:93:c0:e9:17:44:3b:fc:6a:04:ec:24:58:
         7b:e4:77:b8:dd:68:68:7a:d3:4d:2b:23:e4:cf:f7:0e:9f:b8:
         47:bf:19:7d:a2:ff:90:07:08:93:9a:4b:ba:15:0b:80:ed:f0:
         c3:bb:84:26:ec:c0:d1:4b:ad:1e:48:c8:d9:29:1a:fd:16:1e:
         1a:07:09:6c:a0:2d:b1:18:ca:2a:04:0b:1e:46:20:13:9b:b6:
         c3:b4:9e:fc:05:79:60:f2:6c:7c:c4:77:d5:ba:a6:b2:a0:da:
         c8:ea:06:9a:bc:69:bd:fb:76:c8:b5:48:2f:31:41:2a:e8:5d:
         b8:04:ed:ef:09:20:bc:48:7b:8a:0b:0d:ae:ca:bd:bd:9d:b6:
         b3:d6:7b:ac:b6:72:79:7d:b4:2e:42:26:c5:b5:ff:55:ce:bd:
         61:8e:5d:c4:c6:17:56:25:20:ec:c2:5a:a4:8d:02:a7:22:db:
         23:c7:91:c0:90:67:03:96:06:b9:b8:84:2e:9e:45:f3:a6:71:
         21:c2:31:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6fcMJBtUZH85YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ0YzY0N2MtMmJjZi00Yjg0LWEyOTItZmU3ZTk2Yjg2
MzU0MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk
ODgxZWVlYmItYjUwYS00YTQ5LWI2OWQtNmFhOTI2ZGY3ODA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCJpsoX1YaR98u2jyBH4g+HfI0Qn/yATSBwf
rrZ+9SAFuQM9r5jeaP+O0/1duaUdgvLuRR7x3Sk3K3mZmIRwh9ZftWftPQ09j4XA
lDW4wQrAD9Dzj92gQsbyq/xu9eyYkwQhErLkYlXYZ7Iwn5XTdaliZvF6pY9Cq/uL
u7IglB1fWplSqA+e38+iAMNpUEMVhME+/+t60Fy2YmerZlHTGslygMGdWuJU9umE
ry1sdHANbkfhz/bavTxc8Qg3aSb//oVNUgniv1u5+sM7LeNjySkBkQCCfnxlIkMP
d/7HC/PACiKAhNZxRyQPZn5P9qOUT6VFJevfVlazkF+MXICU6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFiMwcsvLPxNj44kec/dBQjf3VhZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNDRj
NjQ3Yy0yYmNmLTRiODQtYTI5Mi1mZTdlOTZiODYzNTQvNjdhZmNjZmMtOTcxZC0z
NjY0LWJkYTItNTllZjc5NWM5MTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzQ0YzY0N2MtMmJjZi00Yjg0LWEy
OTItZmU3ZTk2Yjg2MzU0LzM0NGM2NDdjLTJiY2YtNGI4NC1hMjkyLWZlN2U5NmI4
NjM1NC5jcmwwHwYDVR0jBBgwFoAUthEJ9kFLV6jXL4jhck7+3Iqqa4AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNDRjNjQ3Yy0yYmNmLTRiODQtYTI5Mi1mZTdl
OTZiODYzNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7tIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB2J5gUSC3QTRCNifYXo7p1gmZjJEc0F79fPAKH5FaK+42wX/xlKTrlA
hATiykspfPI8ipuheUA2O4gVk5PA6RdEO/xqBOwkWHvkd7jdaGh6000rI+TP9w6f
uEe/GX2i/5AHCJOaS7oVC4Dt8MO7hCbswNFLrR5IyNkpGv0WHhoHCWygLbEYyioE
Cx5GIBObtsO0nvwFeWDybHzEd9W6prKg2sjqBpq8ab37dsi1SC8xQSroXbgE7e8J
ILxIe4oLDa7Kvb2dtrPWe6y2cnl9tC5CJsW1/1XOvWGOXcTGF1YlIOzCWqSNAqci
2yPHkcCQZwOWBrm4hC6eRfOmcSHCMbM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:56:18 2025 by rpki-client