Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/f4c0447d-11a5-347b-823c-7dfbdf956cce.roa
File:                     f4c0447d-11a5-347b-823c-7dfbdf956cce.roa (raw, json)
Hash identifier:          lWp8sJb92d0KuZWcs4S4aJk8lCTFMvqhZOqnv+TFcG4=
Subject key identifier:   D1:15:3D:B7:77:DF:CD:61:6E:14:39:13:54:3F:CF:0B:59:B3:8F:5F
Certificate issuer:       /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial:       010D0C9F4328584A7E7B519F191635E1B0D41200
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/f4c0447d-11a5-347b-823c-7dfbdf956cce.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     393448
IP address blocks:        23.129.68.0/24 maxlen: 24
                          2602:f7a7::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:51:9f:19:16:35:e1:b0:d4:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=8338bba0-1d07-4250-8793-35104f2dcb3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0d:a8:51:d3:38:bb:de:d3:7c:f7:7f:01:ee:
                    3e:d9:92:bc:45:db:0a:1b:e9:76:aa:93:c4:3d:55:
                    3c:1a:6c:6a:4c:30:ed:53:16:be:99:18:ea:37:7a:
                    ca:22:94:4e:de:b7:ca:b3:c5:ac:a1:d0:0d:0b:43:
                    6b:df:cc:21:ae:07:6f:ed:07:5d:4a:88:5c:57:31:
                    90:fb:1a:99:95:e1:86:63:37:9e:65:ae:81:a8:54:
                    3f:d4:53:d4:52:71:c7:5f:e4:27:88:e7:3f:de:f3:
                    c3:d3:17:96:42:72:ce:f4:f7:02:90:4a:0f:32:34:
                    22:79:7c:de:c1:d1:e6:2f:19:a4:2d:02:13:0a:79:
                    6e:1e:d6:d7:68:b3:4f:78:dd:c0:5b:36:73:4b:2c:
                    d9:33:95:8b:30:14:8b:86:f9:bb:6e:54:bb:6f:42:
                    82:ed:97:d0:f0:02:72:27:ef:c0:fa:cd:9f:ee:7c:
                    59:9d:d5:19:54:0d:63:01:5a:c5:4d:b8:c3:a9:d2:
                    cd:4f:03:b2:5a:7b:49:a1:fd:71:75:aa:92:ae:8a:
                    2a:8b:7c:c4:dd:e9:41:62:b3:c4:a2:df:49:5c:51:
                    de:07:2f:c3:e0:8f:17:6e:b7:55:63:e8:54:f6:b2:
                    71:b8:f4:84:00:e4:06:0a:3d:f0:db:28:26:20:0e:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:15:3D:B7:77:DF:CD:61:6E:14:39:13:54:3F:CF:0B:59:B3:8F:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/f4c0447d-11a5-347b-823c-7dfbdf956cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl

            X509v3 Authority Key Identifier:
                keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.68.0/24
                IPv6:
                  2602:f7a7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:45:82:fa:57:71:20:0d:8d:71:4e:e8:38:fa:53:b8:f8:65:
         2f:23:8d:00:59:82:cd:87:f1:7e:d2:cf:32:1a:2e:be:2e:31:
         3e:4a:c2:b4:89:77:bf:09:2e:ad:9a:2b:f1:ae:48:11:e0:bb:
         e4:a4:46:66:24:7b:66:c4:54:1a:0b:18:ef:1d:5c:86:0a:e4:
         10:e4:4e:ad:45:ea:8a:11:f8:fe:24:63:7c:ab:12:87:af:49:
         5e:1b:c8:5f:51:dd:52:ce:d1:e7:6b:8f:ff:99:88:9d:82:49:
         84:3e:e6:69:79:85:1b:62:41:44:cb:27:8b:50:47:7c:82:6e:
         8a:d1:29:a1:ef:79:0a:ae:e8:e4:b6:d9:9d:c8:aa:db:93:cc:
         76:c6:ed:1e:c7:76:79:e5:aa:e0:8b:62:95:e9:ee:4e:e0:da:
         19:8f:1d:22:39:b9:1a:9e:51:c6:0d:d3:0e:36:e7:d0:67:09:
         01:2e:8a:78:19:3f:b3:ac:46:c1:2d:ee:b8:64:bb:eb:fe:49:
         ae:8e:77:69:28:b8:a3:bc:a6:6c:ff:99:51:a8:fe:fe:08:85:
         5b:7c:b4:24:10:1c:00:4c:ef:ca:6e:23:22:a2:17:3f:ab:5b:
         29:9c:b5:4c:fe:14:74:52:41:49:7a:76:99:ad:cc:8a:68:6a:
         0d:a3:72:5d
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEp+e1GfGRY14bDUEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUyMmM1OWUtMjkwNC00ZWE2LWIwNDQtMGE5ZmFjMzk0
NmNjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
ODMzOGJiYTAtMWQwNy00MjUwLTg3OTMtMzUxMDRmMmRjYjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig2oUdM4u97TfPd/Ae4+2ZK8RdsKG+l2qpPE
PVU8GmxqTDDtUxa+mRjqN3rKIpRO3rfKs8WsodANC0Nr38whrgdv7QddSohcVzGQ
+xqZleGGYzeeZa6BqFQ/1FPUUnHHX+QniOc/3vPD0xeWQnLO9PcCkEoPMjQieXze
wdHmLxmkLQITCnluHtbXaLNPeN3AWzZzSyzZM5WLMBSLhvm7blS7b0KC7ZfQ8AJy
J+/A+s2f7nxZndUZVA1jAVrFTbjDqdLNTwOyWntJof1xdaqSrooqi3zE3elBYrPE
ot9JXFHeBy/D4I8XbrdVY+hU9rJxuPSEAOQGCj3w2ygmIA6TKQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFNEVPbd3381hbhQ5E1Q/zwtZs49fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIy
YzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlmYWMzOTQ2Y2MvZjRjMDQ0N2QtMTFhNS0z
NDdiLTgyM2MtN2RmYmRmOTU2Y2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWUyMmM1OWUtMjkwNC00ZWE2LWIw
NDQtMGE5ZmFjMzk0NmNjLzVlMjJjNTllLTI5MDQtNGVhNi1iMDQ0LTBhOWZhYzM5
NDZjYy5jcmwwHwYDVR0jBBgwFoAUVAq19A7rP/3q8yJu5kT27+vMkGkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIyYzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlm
YWMzOTQ2Y2MuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4FEMA4E
AgACMAgDBgAmAvenADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWRYL6V3EgDY1xTug4+lO4+GUvI40AWYLN
h/F+0s8yGi6+LjE+SsK0iXe/CS6tmivxrkgR4LvkpEZmJHtmxFQaCxjvHVyGCuQQ
5E6tReqKEfj+JGN8qxKHr0leG8hfUd1SztHna4//mYidgkmEPuZpeYUbYkFEyyeL
UEd8gm6K0Smh73kKrujkttmdyKrbk8x2xu0ex3Z55argi2KV6e5O4NoZjx0iObka
nlHGDdMONufQZwkBLop4GT+zrEbBLe64ZLvr/kmujndpKLijvKZs/5lRqP7+CIVb
fLQkEBwATO/KbiMiohc/q1spnLVM/hR0UkFJenaZrcyKaGoNo3Jd
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:02:30 2025 by rpki-client