Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3e17f3cb-ee97-39fb-800a-96b6754ca759.roa
File:                     3e17f3cb-ee97-39fb-800a-96b6754ca759.roa (raw, json)
Hash identifier:          nEyqXu69NpGpb5KHJx2edKtAZvZJZuVCO78jEwcagdQ=
Subject key identifier:   4F:E9:EE:43:0B:06:EC:FF:80:3E:88:83:AD:25:47:63:F0:37:D7:25
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584BBFD01EFC7EFB93F18F5FA700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3e17f3cb-ee97-39fb-800a-96b6754ca759.roa
Signing time:             Tue 04 Nov 2025 15:26:26 +0000
ROA not before:           Tue 04 Nov 2025 15:26:26 +0000
ROA not after:            Mon 02 Feb 2026 15:26:26 +0000
asID:                     19157
IP address blocks:        23.85.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:d0:1e:fc:7e:fb:93:f1:8f:5f:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov  4 15:26:26 2025 GMT
            Not After : Feb  2 15:26:26 2026 GMT
        Subject: CN=61b551a3-5043-41fd-a2d1-c883c4a344e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:62:f1:eb:40:17:71:f5:bd:2b:c1:20:ac:
                    bf:ce:0d:62:a6:5a:be:b3:e8:ce:e0:48:b3:d4:1b:
                    4d:f4:33:4c:9e:0e:da:72:3e:08:3c:06:26:8e:2a:
                    d0:80:f0:2a:4f:9d:c0:45:ea:2c:2b:ea:bc:92:16:
                    52:12:fa:02:60:65:2c:18:75:0e:e8:84:9f:91:96:
                    f7:be:b3:99:0e:d7:1a:1b:64:4e:7d:93:63:17:0d:
                    0c:fd:ce:0c:ad:5d:8d:3c:97:5a:f0:4c:ab:03:95:
                    db:dd:26:f4:7b:e0:c4:0e:a2:a6:0b:3a:4e:70:dc:
                    03:4f:a9:9d:e0:eb:b9:61:bf:39:b3:99:2c:76:31:
                    a6:07:b6:c4:0e:bc:8b:43:b0:b4:7f:ac:d7:9f:6b:
                    a4:86:5b:88:e2:d2:1e:d7:79:76:f4:7d:39:43:3d:
                    b2:c0:25:b5:c7:61:b2:23:4e:b8:be:34:53:f3:88:
                    55:1c:c4:11:a0:ff:ad:6a:31:c4:9d:fa:fc:dd:85:
                    ff:10:0e:08:5f:c7:28:e0:a9:39:90:c5:42:52:ab:
                    61:74:17:5a:8b:64:16:04:79:fd:78:19:c0:7e:3f:
                    3a:d2:8a:82:7f:79:2f:51:44:0a:eb:23:84:af:99:
                    1a:26:a0:b6:d6:82:f0:96:1e:fc:94:5f:4b:67:1f:
                    57:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E9:EE:43:0B:06:EC:FF:80:3E:88:83:AD:25:47:63:F0:37:D7:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3e17f3cb-ee97-39fb-800a-96b6754ca759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.85.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ac:3e:88:f7:5d:3e:3a:7d:e2:e5:ae:5e:11:87:43:b9:72:
         9e:8d:a2:b6:8a:14:ec:93:b7:62:d5:1d:9b:c4:ab:eb:3a:3a:
         00:e2:0b:a0:a9:8e:21:48:32:0d:a2:be:c1:92:e4:dd:df:c7:
         a6:cd:03:1a:2f:1f:78:8c:57:88:d5:19:47:04:ea:de:21:93:
         39:3a:3e:d8:31:ac:a2:7b:12:54:be:27:1c:f3:c3:2d:10:51:
         d9:25:77:d9:2b:33:e2:e7:0e:3e:29:15:c6:47:01:4f:92:aa:
         cc:96:0a:68:11:41:5d:49:f7:84:28:1f:e7:a4:1e:03:1f:a7:
         21:07:7f:2f:d5:97:ac:56:c3:82:c2:d9:eb:27:c9:92:c0:15:
         23:5f:c9:08:9c:91:6f:22:a5:da:4a:0b:87:52:43:e3:66:53:
         2d:79:89:62:03:0d:45:7d:a7:49:4e:e8:c2:31:72:f7:ad:c5:
         6e:b8:10:61:38:ca:64:23:20:49:32:d4:04:8a:ec:88:9f:a3:
         1b:20:9a:49:7a:e5:97:f7:4d:30:63:f7:28:7e:42:46:60:4c:
         8c:2a:85:ee:cc:e3:f3:c8:8f:0e:ba:36:9a:eb:42:e0:a1:2c:
         b8:55:bd:9f:2c:c3:78:5e:1f:41:93:37:df:94:c7:2a:ae:f0:
         71:2f:30:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/0B78fvuT8Y9fpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTEwNDE1MjYyNloXDTI2MDIwMjE1MjYyNlowLzEtMCsGA1UEAxMk
NjFiNTUxYTMtNTA0My00MWZkLWEyZDEtYzg4M2M0YTM0NGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjJi8etAF3H1vSvBIKy/zg1iplq+s+jO4Eiz
1BtN9DNMng7acj4IPAYmjirQgPAqT53AReosK+q8khZSEvoCYGUsGHUO6ISfkZb3
vrOZDtcaG2ROfZNjFw0M/c4MrV2NPJda8EyrA5Xb3Sb0e+DEDqKmCzpOcNwDT6md
4Ou5Yb85s5ksdjGmB7bEDryLQ7C0f6zXn2ukhluI4tIe13l29H05Qz2ywCW1x2Gy
I064vjRT84hVHMQRoP+tajHEnfr83YX/EA4IX8co4Kk5kMVCUqthdBdai2QWBHn9
eBnAfj860oqCf3kvUUQK6yOEr5kaJqC21oLwlh78lF9LZx9XeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/p7kMLBuz/gD6Ig60lR2PwN9clMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvM2UxN2YzY2ItZWU5Ny0z
OWZiLTgwMGEtOTZiNjc1NGNhNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF1VAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWsPoj3XT46feLlrl4Rh0O5cp6NoraKFOyTt2LVHZvEq+s6OgDiC6Cp
jiFIMg2ivsGS5N3fx6bNAxovH3iMV4jVGUcE6t4hkzk6PtgxrKJ7ElS+Jxzzwy0Q
Udkld9krM+LnDj4pFcZHAU+SqsyWCmgRQV1J94QoH+ekHgMfpyEHfy/Vl6xWw4LC
2esnyZLAFSNfyQickW8ipdpKC4dSQ+NmUy15iWIDDUV9p0lO6MIxcvetxW64EGE4
ymQjIEky1ASK7Iifoxsgmkl65Zf3TTBj9yh+QkZgTIwqhe7M4/PIjw66NprrQuCh
LLhVvZ8sw3heH0GTN9+Uxyqu8HEvMPM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:14:05 2025 by rpki-client