Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/c81996f1-f112-3ff0-8181-d64acaeb3a3e.roa
File:                     c81996f1-f112-3ff0-8181-d64acaeb3a3e.roa (raw, json)
Hash identifier:          GiJBnG8ZKNVzvEVeiO3VExspjeHOcJQDX6wlBlWuvto=
Subject key identifier:   C8:2F:D1:D9:77:97:4D:65:DD:83:63:C3:47:99:62:FA:2C:6A:79:36
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F4328584A94D0D1DFF1619019EB21C500
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/c81996f1-f112-3ff0-8181-d64acaeb3a3e.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     30456
IP address blocks:        23.145.208.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:d1:df:f1:61:90:19:eb:21:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=42875ef0-55da-4d08-b28e-d9e79cab5948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ba:55:45:28:08:65:fa:9d:e0:08:53:9e:71:
                    e4:d9:94:68:f7:08:71:71:0b:a1:b3:ff:a8:95:6f:
                    87:d6:56:f6:99:5f:3f:ab:96:e8:8c:ae:15:b7:04:
                    b3:af:82:0c:11:fe:0b:37:93:84:29:89:da:5e:ff:
                    93:bb:a7:40:8f:e1:63:52:5f:52:5a:72:fa:26:6b:
                    b6:ab:72:8b:09:ca:35:55:55:7b:ef:d7:4e:96:77:
                    ac:d1:ac:03:59:56:f2:f7:17:f0:07:fe:96:fd:54:
                    f6:4a:55:68:63:bd:e2:70:d5:af:21:85:8d:80:63:
                    6c:d6:18:8f:41:5c:93:b7:c4:92:c7:f4:df:f3:f3:
                    ec:38:d3:09:58:39:bf:73:7a:cd:6b:a3:47:3d:6a:
                    80:24:40:db:02:f9:b8:d1:a3:85:23:ee:4f:49:99:
                    52:06:14:af:a4:0f:5c:c4:30:72:1b:92:ec:85:b4:
                    ae:c7:b0:fa:03:0e:a2:96:28:6c:2c:e3:f7:62:80:
                    3c:de:2a:df:af:a4:e8:52:86:23:fe:d9:69:a8:b2:
                    3c:82:42:a4:0b:3b:c0:e4:67:52:07:79:a2:cf:8a:
                    ab:a7:43:7f:07:49:01:d0:bc:98:ec:27:94:6d:7f:
                    ee:05:1a:13:51:d7:f1:11:8b:8a:58:49:cf:76:73:
                    49:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2F:D1:D9:77:97:4D:65:DD:83:63:C3:47:99:62:FA:2C:6A:79:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/c81996f1-f112-3ff0-8181-d64acaeb3a3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:1e:48:5c:10:52:4a:51:56:da:f6:01:5f:db:7a:3e:7f:dc:
         4d:55:31:4c:ed:ee:09:72:9c:1e:5c:0c:2c:0b:6b:60:50:13:
         da:fa:1d:c8:fc:29:16:31:99:83:88:12:2a:b6:d7:65:1f:70:
         c7:eb:be:29:e7:3e:04:92:96:55:b9:06:3e:ad:f0:f9:6d:52:
         aa:be:4b:12:35:99:01:1c:16:03:7b:94:ae:9e:36:22:52:48:
         66:48:ed:a6:97:d6:68:69:fe:7f:24:60:39:8d:14:7c:b5:86:
         61:e4:50:94:cf:02:4e:25:d7:1f:28:86:ac:41:3f:34:57:e3:
         74:5a:55:e1:3a:c5:4a:ca:f1:0f:df:07:ee:31:64:ab:76:e7:
         c3:5d:31:03:7c:6c:44:bc:fa:28:ec:7b:a3:ae:45:a0:06:12:
         9a:bc:34:eb:ec:cc:56:94:04:c4:b4:32:c9:d0:8f:05:25:32:
         ec:d3:02:2a:d8:c1:2e:9a:15:ed:ec:e4:6d:2c:4d:8e:66:09:
         36:3e:f2:ed:e6:5b:64:30:8b:f0:f5:84:13:22:4a:a0:18:0b:
         15:98:96:f9:7c:09:43:1a:14:f8:cb:c0:96:6d:3d:c5:2d:56:
         51:5f:ff:28:27:5d:95:45:c1:63:0d:08:8c:9e:df:c1:b2:2d:
         02:9d:e6:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NHf8WGQGeshxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFjMTllNTctYTZmNS00YzQ4LWI0ZGYtYjhkNDJkN2I3
NDgzMB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk
NDI4NzVlZjAtNTVkYS00ZDA4LWIyOGUtZDllNzljYWI1OTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7pVRSgIZfqd4AhTnnHk2ZRo9whxcQuhs/+o
lW+H1lb2mV8/q5bojK4VtwSzr4IMEf4LN5OEKYnaXv+Tu6dAj+FjUl9SWnL6Jmu2
q3KLCco1VVV779dOlnes0awDWVby9xfwB/6W/VT2SlVoY73icNWvIYWNgGNs1hiP
QVyTt8SSx/Tf8/PsONMJWDm/c3rNa6NHPWqAJEDbAvm40aOFI+5PSZlSBhSvpA9c
xDByG5LshbSux7D6Aw6ilihsLOP3YoA83irfr6ToUoYj/tlpqLI8gkKkCzvA5GdS
B3miz4qrp0N/B0kB0LyY7CeUbX/uBRoTUdfxEYuKWEnPdnNJfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMgv0dl3l01l3YNjw0eZYvosank2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMx
OWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0MmQ3Yjc0ODMvYzgxOTk2ZjEtZjExMi0z
ZmYwLTgxODEtZDY0YWNhZWIzYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzFjMTllNTctYTZmNS00YzQ4LWI0
ZGYtYjhkNDJkN2I3NDgzLzMxYzE5ZTU3LWE2ZjUtNGM0OC1iNGRmLWI4ZDQyZDdi
NzQ4My5jcmwwHwYDVR0jBBgwFoAU/pJi5eJ2pwPKSRroNOSF02JXoFgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMxOWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0
MmQ3Yjc0ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5HQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8eSFwQUkpRVtr2AV/bej5/3E1VMUzt7glynB5cDCwLa2BQE9r6Hcj8
KRYxmYOIEiq212UfcMfrvinnPgSSllW5Bj6t8PltUqq+SxI1mQEcFgN7lK6eNiJS
SGZI7aaX1mhp/n8kYDmNFHy1hmHkUJTPAk4l1x8ohqxBPzRX43RaVeE6xUrK8Q/f
B+4xZKt258NdMQN8bES8+ijse6OuRaAGEpq8NOvszFaUBMS0MsnQjwUlMuzTAirY
wS6aFe3s5G0sTY5mCTY+8u3mW2Qwi/D1hBMiSqAYCxWYlvl8CUMaFPjLwJZtPcUt
VlFf/ygnXZVFwWMNCIye38GyLQKd5gc=
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:15:45 2025 by rpki-client