Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e756af05-9fc8-4137-b113-f785a93b1c72/22d4305f-a95e-3f0d-888c-31486401ff7d.roa
File:                     22d4305f-a95e-3f0d-888c-31486401ff7d.roa (raw, json)
Hash identifier:          10u/etEutDkZRn18Y36xSzxh0PtEyc3RPrFOTXkoFTY=
Subject key identifier:   D4:C8:FE:4C:E0:F9:F8:6D:6B:E8:30:40:00:D2:DE:E0:5C:13:32:8E
Certificate issuer:       /CN=e756af05-9fc8-4137-b113-f785a93b1c72
Certificate serial:       010D0C9F4328584A90A0BDF5EFBCB9A0612F1BC0
Authority key identifier: D3:FC:12:CC:5E:A8:27:98:A0:55:FC:C6:34:0B:46:67:E9:BF:8A:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e756af05-9fc8-4137-b113-f785a93b1c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e756af05-9fc8-4137-b113-f785a93b1c72/22d4305f-a95e-3f0d-888c-31486401ff7d.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     213840
IP address blocks:        23.186.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e756af05-9fc8-4137-b113-f785a93b1c72/e756af05-9fc8-4137-b113-f785a93b1c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e756af05-9fc8-4137-b113-f785a93b1c72/e756af05-9fc8-4137-b113-f785a93b1c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e756af05-9fc8-4137-b113-f785a93b1c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:bd:f5:ef:bc:b9:a0:61:2f:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e756af05-9fc8-4137-b113-f785a93b1c72
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=c0713b3c-c348-49f4-bf5a-044dff3b9e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:a8:e8:5b:d9:3e:e5:43:6a:f2:69:4c:a5:
                    8b:4d:e9:63:5e:a9:31:f5:b2:7d:76:26:e7:fe:45:
                    c3:e4:7a:f4:08:4e:b6:42:3b:fa:a0:3a:65:79:16:
                    ac:90:96:27:b2:95:89:46:bf:34:d7:fb:bf:fc:18:
                    c6:e9:b4:5f:5f:35:49:4e:da:5d:90:aa:27:05:85:
                    0a:11:6e:e3:17:8d:5e:79:6c:cb:2d:fa:d6:28:be:
                    3f:8b:0f:e8:16:68:ae:fa:42:e8:2b:3e:26:36:00:
                    96:f3:2b:55:7a:bf:dc:53:4d:72:6a:f2:4f:dc:ae:
                    73:ff:06:fb:23:72:bb:0d:2c:ff:86:27:87:ba:6b:
                    7c:f1:d5:60:36:a5:48:11:07:5c:7d:6c:e4:82:e8:
                    63:b5:aa:24:b2:96:ed:a1:5c:c9:30:19:a0:0e:69:
                    c7:3b:8c:ec:cd:aa:e7:09:49:7a:6b:3f:0f:08:b2:
                    26:29:7a:9b:53:82:66:40:ce:11:b5:31:54:63:76:
                    cf:56:a9:eb:25:30:ed:c9:fb:00:16:b2:9f:e3:a0:
                    6b:10:9b:e8:89:79:61:a5:04:13:50:1a:c5:9f:0e:
                    62:35:4d:85:50:9b:e8:dd:43:a0:34:2c:22:9f:3e:
                    df:42:84:0b:b6:03:4a:68:4d:ba:b2:e6:07:28:22:
                    3b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C8:FE:4C:E0:F9:F8:6D:6B:E8:30:40:00:D2:DE:E0:5C:13:32:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e756af05-9fc8-4137-b113-f785a93b1c72/22d4305f-a95e-3f0d-888c-31486401ff7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e756af05-9fc8-4137-b113-f785a93b1c72/e756af05-9fc8-4137-b113-f785a93b1c72.crl

            X509v3 Authority Key Identifier:
                keyid:D3:FC:12:CC:5E:A8:27:98:A0:55:FC:C6:34:0B:46:67:E9:BF:8A:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e756af05-9fc8-4137-b113-f785a93b1c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:2e:7a:e1:55:b6:cb:41:e4:9f:33:79:da:88:2a:34:ca:7c:
         09:92:e9:8b:aa:33:d7:2b:85:be:10:27:46:f3:81:c8:89:81:
         0e:de:67:d6:54:83:cf:81:9f:a3:d2:c0:3a:b2:7f:4a:0a:93:
         75:9e:14:de:b6:9d:62:8e:1c:75:b0:cb:d6:25:3e:d8:b4:7d:
         46:6f:ee:80:c3:2b:0d:74:33:16:7c:f4:46:27:5f:77:1b:60:
         72:87:94:49:71:b0:84:aa:6a:f2:dc:54:fb:6d:8c:96:b9:30:
         c4:5f:6e:37:ce:72:d6:48:df:27:ae:66:e4:25:01:e3:9b:20:
         ef:cb:1f:d1:a0:52:b0:4a:3b:8f:52:6c:59:73:9e:ab:e8:55:
         ff:5b:f6:a9:64:fd:7d:cd:85:e8:e5:de:ce:22:4f:91:a4:4f:
         93:2b:42:4a:0a:8d:12:f1:7e:1b:93:86:80:2f:7b:0e:4b:c4:
         74:0f:bf:10:dc:d4:ed:bb:64:9e:1f:fd:7d:8b:df:e6:8d:c1:
         06:ce:4b:52:fd:c8:1f:c0:f1:07:50:fd:13:a2:65:d5:be:e4:
         a4:79:1b:e0:9b:35:62:74:dc:37:c1:55:5e:d0:1b:10:03:bc:
         87:27:47:47:3b:3a:39:14:52:7a:57:6e:21:ae:7f:6f:c6:9b:
         73:14:c4:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoL3177y5oGEvG8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTc1NmFmMDUtOWZjOC00MTM3LWIxMTMtZjc4NWE5M2Ix
YzcyMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
YzA3MTNiM2MtYzM0OC00OWY0LWJmNWEtMDQ0ZGZmM2I5ZTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+2o6FvZPuVDavJpTKWLTeljXqkx9bJ9dibn
/kXD5Hr0CE62Qjv6oDpleRaskJYnspWJRr801/u//BjG6bRfXzVJTtpdkKonBYUK
EW7jF41eeWzLLfrWKL4/iw/oFmiu+kLoKz4mNgCW8ytVer/cU01yavJP3K5z/wb7
I3K7DSz/hieHumt88dVgNqVIEQdcfWzkguhjtaokspbtoVzJMBmgDmnHO4zszarn
CUl6az8PCLImKXqbU4JmQM4RtTFUY3bPVqnrJTDtyfsAFrKf46BrEJvoiXlhpQQT
UBrFnw5iNU2FUJvo3UOgNCwinz7fQoQLtgNKaE26suYHKCI7JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNTI/kzg+fhta+gwQADS3uBcEzKOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lNzU2
YWYwNS05ZmM4LTQxMzctYjExMy1mNzg1YTkzYjFjNzIvMjJkNDMwNWYtYTk1ZS0z
ZjBkLTg4OGMtMzE0ODY0MDFmZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTc1NmFmMDUtOWZjOC00MTM3LWIx
MTMtZjc4NWE5M2IxYzcyL2U3NTZhZjA1LTlmYzgtNDEzNy1iMTEzLWY3ODVhOTNi
MWM3Mi5jcmwwHwYDVR0jBBgwFoAU0/wSzF6oJ5igVfzGNAtGZ+m/ipQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lNzU2YWYwNS05ZmM4LTQxMzctYjExMy1mNzg1
YTkzYjFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7rYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFMueuFVtstB5J8zedqIKjTKfAmS6YuqM9crhb4QJ0bzgciJgQ7eZ9ZU
g8+Bn6PSwDqyf0oKk3WeFN62nWKOHHWwy9YlPti0fUZv7oDDKw10MxZ89EYnX3cb
YHKHlElxsISqavLcVPttjJa5MMRfbjfOctZI3yeuZuQlAeObIO/LH9GgUrBKO49S
bFlznqvoVf9b9qlk/X3Nhejl3s4iT5GkT5MrQkoKjRLxfhuThoAvew5LxHQPvxDc
1O27ZJ4f/X2L3+aNwQbOS1L9yB/A8QdQ/ROiZdW+5KR5G+CbNWJ03DfBVV7QGxAD
vIcnR0c7OjkUUnpXbiGuf2/Gm3MUxAU=
-----END CERTIFICATE-----
Generated at Thu Aug 7 23:57:24 2025 by rpki-client