Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1f4fa054-5b55-3502-aeef-38673b6dda28.roa
File:                     1f4fa054-5b55-3502-aeef-38673b6dda28.roa (raw, json)
Hash identifier:          WjPNBUo9lmIxSefvyk7DfRP+kNFsEgAXiLz/4k4qxks=
Subject key identifier:   36:C9:04:FD:FE:66:D2:0C:1C:F7:E6:68:60:17:C6:FD:F8:30:C4:0A
Certificate issuer:       /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial:       010D0C9F4328584ABEB0D69058BAB379C93B8A00
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1f4fa054-5b55-3502-aeef-38673b6dda28.roa
Signing time:             Mon 04 Aug 2025 13:00:36 +0000
ROA not before:           Mon 04 Aug 2025 13:00:36 +0000
ROA not after:            Sun 02 Nov 2025 14:00:36 +0000
asID:                     19905
IP address blocks:        23.128.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:be:b0:d6:90:58:ba:b3:79:c9:3b:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
        Validity
            Not Before: Aug  4 13:00:36 2025 GMT
            Not After : Nov  2 14:00:36 2025 GMT
        Subject: CN=61ebcf34-ccfa-45f9-878b-8685b2336b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1a:57:d2:ce:0d:95:5b:b5:a5:62:e1:f9:ca:
                    8d:ef:b5:32:7c:13:04:a7:10:38:d5:34:17:3b:43:
                    9a:99:d2:49:00:c0:f0:fa:75:0c:b4:c9:75:41:80:
                    85:f6:e2:1f:27:88:0e:96:18:ed:ac:da:0c:1a:12:
                    1f:18:a5:76:4f:ce:4f:b5:0d:ac:40:28:ad:7f:da:
                    0f:5f:cc:3a:9e:59:03:0b:d6:82:fa:37:fc:ad:b7:
                    e4:05:ba:4b:69:4d:c1:a0:d1:37:35:fc:83:30:19:
                    43:c9:a7:6b:10:0b:12:6e:25:82:50:8a:e4:fb:a1:
                    0a:4c:9a:ee:dd:2b:5b:6f:c0:f4:b5:43:b5:62:97:
                    86:52:34:a1:e9:cc:08:60:eb:22:20:68:60:2e:11:
                    83:00:10:1a:83:f1:e3:3a:99:ce:60:c3:09:14:ac:
                    3a:09:14:84:94:9d:6d:2f:f2:a5:c6:a4:ff:82:22:
                    02:3e:64:25:0c:14:40:b0:14:1c:50:26:d4:11:04:
                    74:7d:8d:9e:05:8f:f9:63:e3:61:61:83:d3:99:f3:
                    6a:21:cb:96:0c:a3:ee:64:aa:0b:0d:c0:32:d5:f2:
                    66:29:28:a3:dc:bf:ce:e0:40:b0:77:1d:c2:b3:83:
                    a3:d7:c9:8a:e0:cd:8f:7b:66:f3:af:52:27:8c:d1:
                    e2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C9:04:FD:FE:66:D2:0C:1C:F7:E6:68:60:17:C6:FD:F8:30:C4:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1f4fa054-5b55-3502-aeef-38673b6dda28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl

            X509v3 Authority Key Identifier:
                keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:20:6d:8c:0b:05:eb:e2:7b:00:41:9c:0f:3b:11:dc:ea:4a:
         28:c2:a7:c3:82:8f:9c:9d:a7:e8:11:70:2d:48:ef:2d:b9:63:
         6c:fc:9e:14:a2:49:cb:9f:64:9d:5f:54:31:7d:9b:28:a3:2d:
         6c:f2:69:1e:5c:36:18:39:c6:a4:ba:2a:b6:06:17:00:a4:06:
         03:d4:d0:bb:82:75:6a:d0:32:71:6f:35:a8:e6:6c:cb:ce:71:
         c2:72:cf:25:00:f0:61:33:b3:9a:8a:12:80:df:c3:75:5c:c5:
         0f:2d:03:10:40:3f:91:90:bf:6c:b5:df:08:0c:2b:98:bd:fa:
         5f:4d:a6:8a:25:3f:72:8f:60:61:b2:79:da:fc:a2:b4:80:b9:
         7c:a8:79:f0:31:48:de:b6:d4:1e:8c:ca:0d:d3:eb:f3:f7:c9:
         3c:35:7f:63:cf:d0:00:92:cd:ac:19:8c:35:33:55:15:f5:4e:
         f7:8e:44:73:52:89:66:c5:49:30:5e:8b:07:64:ee:42:3a:a0:
         5a:2b:a8:62:81:bd:60:a5:7a:2e:d8:42:01:68:c8:59:16:5e:
         3b:ba:b5:df:f9:ec:f7:37:2d:04:2f:c2:4c:c8:47:f9:ae:3c:
         74:40:86:0a:e4:81:e4:bc:89:2b:df:c6:07:e7:c0:b1:88:67:
         f0:1a:bf:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq+sNaQWLqzeck7igAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRmNmViZDctMGNjZC00YzA2LTgwYTAtNDVmZDc2MDc3
ZjU0MB4XDTI1MDgwNDEzMDAzNloXDTI1MTEwMjE0MDAzNlowLzEtMCsGA1UEAxMk
NjFlYmNmMzQtY2NmYS00NWY5LTg3OGItODY4NWIyMzM2YjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhpX0s4NlVu1pWLh+cqN77UyfBMEpxA41TQX
O0OamdJJAMDw+nUMtMl1QYCF9uIfJ4gOlhjtrNoMGhIfGKV2T85PtQ2sQCitf9oP
X8w6nlkDC9aC+jf8rbfkBbpLaU3BoNE3NfyDMBlDyadrEAsSbiWCUIrk+6EKTJru
3Stbb8D0tUO1YpeGUjSh6cwIYOsiIGhgLhGDABAag/HjOpnOYMMJFKw6CRSElJ1t
L/KlxqT/giICPmQlDBRAsBQcUCbUEQR0fY2eBY/5Y+NhYYPTmfNqIcuWDKPuZKoL
DcAy1fJmKSij3L/O4ECwdx3Cs4Oj18mK4M2Pe2bzr1InjNHiHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbJBP3+ZtIMHPfmaGAXxv34MMQKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2
ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZkNzYwNzdmNTQvMWY0ZmEwNTQtNWI1NS0z
NTAyLWFlZWYtMzg2NzNiNmRkYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRmNmViZDctMGNjZC00YzA2LTgw
YTAtNDVmZDc2MDc3ZjU0LzVkZjZlYmQ3LTBjY2QtNGMwNi04MGEwLTQ1ZmQ3NjA3
N2Y1NC5jcmwwHwYDVR0jBBgwFoAU+ZXymTKY5kpAyLxIzydJ7K1e/qcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZk
NzYwNzdmNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF4B4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADIgbYwLBeviewBBnA87EdzqSijCp8OCj5ydp+gRcC1I7y25Y2z8nhSi
ScufZJ1fVDF9myijLWzyaR5cNhg5xqS6KrYGFwCkBgPU0LuCdWrQMnFvNajmbMvO
ccJyzyUA8GEzs5qKEoDfw3VcxQ8tAxBAP5GQv2y13wgMK5i9+l9NpoolP3KPYGGy
edr8orSAuXyoefAxSN621B6Myg3T6/P3yTw1f2PP0ACSzawZjDUzVRX1TveORHNS
iWbFSTBeiwdk7kI6oForqGKBvWClei7YQgFoyFkWXju6td/57Pc3LQQvwkzIR/mu
PHRAhgrkgeS8iSvfxgfnwLGIZ/Aav6c=
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:43 2025 by rpki-client