Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/796457a9-5a46-3973-a18c-008402e30cc8.roa
File:                     796457a9-5a46-3973-a18c-008402e30cc8.roa (raw, json)
Hash identifier:          7W0KnZPrd+1Lw1CvRr5vXErb8Gynk+YCO+ApDQx+Qug=
Subject key identifier:   C4:5D:F3:B5:4E:65:82:5D:2B:49:10:6F:F6:2A:72:4B:28:39:83:F5
Certificate issuer:       /CN=10c8bda0-3c91-4c6f-b928-28b77211b8d1
Certificate serial:       010D0C9F4328584A9900C5D8DF17677FEB5FEF00
Authority key identifier: 64:93:ED:72:BC:87:D7:E9:1D:75:2B:E2:1D:D8:D8:60:85:4F:AC:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/796457a9-5a46-3973-a18c-008402e30cc8.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     59117
IP address blocks:        23.179.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c5:d8:df:17:67:7f:eb:5f:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c8bda0-3c91-4c6f-b928-28b77211b8d1
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=b745c19f-5a3a-4e54-968f-1f679ab9f10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:8f:39:94:5d:d3:df:dd:8f:69:a2:2d:24:
                    64:f8:0d:55:31:c9:93:2f:14:80:17:67:aa:41:ff:
                    a8:2d:3f:66:71:47:c5:e4:e2:26:c7:2a:9a:9b:ea:
                    ba:5a:6e:bb:22:6a:af:44:96:ef:14:5a:e0:60:a6:
                    42:70:7e:c7:f0:23:ac:ae:bc:7c:40:d7:fb:e4:8f:
                    0d:4f:2e:36:24:83:82:93:4e:fa:6b:13:bd:15:26:
                    0e:7e:79:3d:72:f7:df:64:ac:d0:55:fa:5e:60:fe:
                    cf:0c:65:e1:c8:5d:07:e3:29:ac:9d:63:2c:51:cc:
                    aa:7c:72:8e:6f:47:6f:8a:ae:5f:ea:ec:6d:79:66:
                    d0:2b:89:55:5d:eb:9d:1e:d5:96:8a:2b:0f:f0:de:
                    39:32:1d:81:2f:3e:50:ad:a4:c6:80:62:57:b5:7a:
                    22:dc:b9:bc:71:9c:36:09:e8:94:ce:45:38:19:08:
                    78:36:2a:ed:f1:c5:58:72:4d:50:10:2f:89:42:c7:
                    09:90:c5:dd:90:4c:40:f4:ed:4a:74:70:21:3b:c6:
                    68:9b:e0:ad:fb:70:ac:58:d0:e8:58:f6:b0:f3:25:
                    d0:b2:61:6b:3b:a3:41:98:b4:01:c8:f9:49:8f:8f:
                    36:ea:34:a1:a0:c3:72:2f:5f:c2:e7:47:56:0f:24:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5D:F3:B5:4E:65:82:5D:2B:49:10:6F:F6:2A:72:4B:28:39:83:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/796457a9-5a46-3973-a18c-008402e30cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.crl

            X509v3 Authority Key Identifier:
                keyid:64:93:ED:72:BC:87:D7:E9:1D:75:2B:E2:1D:D8:D8:60:85:4F:AC:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:1b:83:03:2d:3b:e3:fa:be:75:0d:e1:74:b3:60:f1:76:21:
         bb:5b:56:20:b0:52:3f:a6:ac:a5:d2:ce:5b:a5:3c:d3:8e:11:
         ec:65:de:4c:6d:43:31:fc:f3:4b:b3:59:a3:bd:df:ce:b1:84:
         9a:e4:e6:f5:61:ae:15:02:49:55:ea:a7:79:29:4c:2a:fa:bb:
         6c:46:3d:ce:9b:f3:2c:03:4f:4d:e5:fc:d3:b6:8a:74:95:a8:
         2f:79:af:f7:d3:1e:ae:7e:81:90:7f:e8:5b:3b:00:cd:56:94:
         08:75:b9:5e:9a:32:d6:4c:b2:01:80:76:89:76:e3:62:e6:2d:
         af:80:4d:83:ac:6c:e5:be:55:4d:f7:ec:18:34:10:90:5b:8d:
         de:eb:6b:3c:e5:ee:1c:75:c5:72:56:4e:d7:9a:0f:50:38:ae:
         ea:b8:e3:1a:70:8b:8a:7d:c3:c6:f8:7a:f3:66:f7:70:38:bf:
         d3:80:63:3d:b5:86:6c:b8:c7:71:a4:2f:32:ec:92:a2:2f:03:
         4a:0c:c0:c5:31:cd:f7:c4:c7:ec:29:21:2d:f2:dd:cb:8f:3b:
         e9:5b:a9:98:b9:c3:8d:50:ae:83:97:4c:b2:19:7b:1f:29:b4:
         a6:fb:81:43:cf:24:19:b5:ec:93:2a:95:1f:c0:a9:61:06:f5:
         25:05:f6:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMXY3xdnf+tf7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTBjOGJkYTAtM2M5MS00YzZmLWI5MjgtMjhiNzcyMTFi
OGQxMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk
Yjc0NWMxOWYtNWEzYS00ZTU0LTk2OGYtMWY2NzlhYjlmMTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllCPOZRd09/dj2miLSRk+A1VMcmTLxSAF2eq
Qf+oLT9mcUfF5OImxyqam+q6Wm67ImqvRJbvFFrgYKZCcH7H8COsrrx8QNf75I8N
Ty42JIOCk076axO9FSYOfnk9cvffZKzQVfpeYP7PDGXhyF0H4ymsnWMsUcyqfHKO
b0dviq5f6uxteWbQK4lVXeudHtWWiisP8N45Mh2BLz5QraTGgGJXtXoi3Lm8cZw2
CeiUzkU4GQh4Nirt8cVYck1QEC+JQscJkMXdkExA9O1KdHAhO8Zom+Ct+3CsWNDo
WPaw8yXQsmFrO6NBmLQByPlJj4826jShoMNyL1/C50dWDyTwsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMRd87VOZYJdK0kQb/YqcksoOYP1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMGM4
YmRhMC0zYzkxLTRjNmYtYjkyOC0yOGI3NzIxMWI4ZDEvNzk2NDU3YTktNWE0Ni0z
OTczLWExOGMtMDA4NDAyZTMwY2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTBjOGJkYTAtM2M5MS00YzZmLWI5
MjgtMjhiNzcyMTFiOGQxLzEwYzhiZGEwLTNjOTEtNGM2Zi1iOTI4LTI4Yjc3MjEx
YjhkMS5jcmwwHwYDVR0jBBgwFoAUZJPtcryH1+kddSviHdjYYIVPrH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMGM4YmRhMC0zYzkxLTRjNmYtYjkyOC0yOGI3
NzIxMWI4ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7P4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkbgwMtO+P6vnUN4XSzYPF2IbtbViCwUj+mrKXSzlulPNOOEexl3kxt
QzH880uzWaO9386xhJrk5vVhrhUCSVXqp3kpTCr6u2xGPc6b8ywDT03l/NO2inSV
qC95r/fTHq5+gZB/6Fs7AM1WlAh1uV6aMtZMsgGAdol242LmLa+ATYOsbOW+VU33
7Bg0EJBbjd7razzl7hx1xXJWTteaD1A4ruq44xpwi4p9w8b4evNm93A4v9OAYz21
hmy4x3GkLzLskqIvA0oMwMUxzffEx+wpIS3y3cuPO+lbqZi5w41QroOXTLIZex8p
tKb7gUPPJBm17JMqlR/AqWEG9SUF9uA=
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:15:40 2025 by rpki-client