Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/74fa8d9f-77f3-3dc5-be77-70d9b41f878a.roa
File:                     74fa8d9f-77f3-3dc5-be77-70d9b41f878a.roa (raw, json)
Hash identifier:          x2QR5U7roz3/k+mvPCbSVFmqTbMKfHdI0lF3/Muj3fI=
Subject key identifier:   23:C5:29:70:05:4C:80:E1:CB:41:B1:BC:EF:84:4F:EE:58:66:20:07
Certificate issuer:       /CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
Certificate serial:       010D0C9F4328584AB4EB7B6020868CDE12BEEC00
Authority key identifier: 23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/74fa8d9f-77f3-3dc5-be77-70d9b41f878a.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     19905
IP address blocks:        23.134.176.0/24 maxlen: 24
                          45.41.208.0/23 maxlen: 23
                          66.248.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:7b:60:20:86:8c:de:12:be:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=0a7042b4-3be2-4810-ae10-be1c9a862d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b4:81:89:7c:63:52:75:df:7f:67:59:8a:a3:
                    2a:59:2a:61:c7:48:bf:24:a0:3d:a3:95:d1:c2:ee:
                    96:58:39:9e:9e:f5:fe:33:94:9b:be:1d:d9:c3:57:
                    b6:c1:fc:cf:bd:6d:61:89:72:0f:d1:1b:27:c9:66:
                    e4:89:76:98:1a:88:a9:01:5e:c3:69:54:12:2f:33:
                    6d:33:40:d8:13:d6:f9:99:4c:e2:e1:fd:d9:05:56:
                    8c:14:01:6c:57:c3:07:1d:18:9c:97:30:95:77:84:
                    90:97:39:7a:b3:93:a9:de:87:76:a5:85:76:51:68:
                    b8:4a:90:e6:db:cd:5a:bf:ba:46:f4:65:26:b0:27:
                    d9:d3:75:4d:7d:2a:d3:68:04:5d:5b:a0:bf:52:2f:
                    a0:e0:43:b8:2c:dc:54:6f:5b:50:bd:73:5e:b5:ef:
                    f7:e6:ee:a8:d8:ec:0a:b4:06:5e:73:20:83:9b:1d:
                    98:2e:18:a6:cc:a6:56:b5:9e:bd:5d:c1:9c:6b:87:
                    d6:b0:f3:2e:c4:4e:70:3c:84:52:d0:42:60:f2:f8:
                    6d:f9:df:dc:37:a3:f2:4d:21:c9:e9:80:43:ed:c4:
                    41:8d:20:8d:1c:15:26:ce:6d:56:24:ba:d1:63:a3:
                    15:50:33:05:ff:b6:85:83:4b:7e:e7:e4:1f:c0:2a:
                    90:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C5:29:70:05:4C:80:E1:CB:41:B1:BC:EF:84:4F:EE:58:66:20:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/74fa8d9f-77f3-3dc5-be77-70d9b41f878a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl

            X509v3 Authority Key Identifier:
                keyid:23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.176.0/24
                  45.41.208.0/23
                  66.248.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:84:53:64:81:e4:95:1f:d9:50:6d:7f:5e:81:c3:6b:23:f6:
         a8:bf:1a:f5:ef:4e:05:b3:79:c5:51:40:99:43:af:02:a3:f4:
         a6:8d:df:5c:fe:44:b2:06:03:ae:74:0f:66:76:af:01:6f:41:
         f8:14:32:60:0f:3e:e3:c4:b3:f1:8e:53:d2:9a:a1:f0:e2:9c:
         4d:44:32:87:35:17:06:64:6c:21:3a:7c:35:55:f4:ab:b0:ab:
         bb:f1:24:17:aa:07:c7:94:15:e5:fa:c7:0f:2b:95:d8:49:dd:
         b3:98:49:08:37:cf:42:9b:6c:47:9e:88:ad:23:ae:f0:8d:a7:
         c3:6c:29:b3:c8:4b:04:a6:5f:db:9b:94:95:44:d4:7e:e0:d8:
         95:7b:df:ad:b5:93:14:0f:cc:6f:9a:35:73:0a:6a:66:c1:d4:
         ea:b9:7b:a6:d1:b3:7e:06:54:89:18:ae:57:14:e3:00:76:39:
         2b:29:6c:79:5a:0d:ca:dc:d6:cd:a4:dd:36:21:d0:3a:e3:87:
         98:0d:5b:bf:cc:a2:47:5e:c4:47:89:0a:e7:ca:04:2b:36:b3:
         88:54:1f:2a:4e:f3:a4:f7:c6:81:77:0d:f2:5b:f9:96:0a:69:
         28:21:f1:61:4c:0a:44:00:ed:39:7b:95:27:73:86:01:15:52:
         2d:40:70:5f
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEq063tgIIaM3hK+7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFiYWJlNGYtNDNhMy00ZGI5LThlMzUtYjg1YTdlNTky
MTY4MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
MGE3MDQyYjQtM2JlMi00ODEwLWFlMTAtYmUxYzlhODYyZDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrSBiXxjUnXff2dZiqMqWSphx0i/JKA9o5XR
wu6WWDmenvX+M5Sbvh3Zw1e2wfzPvW1hiXIP0RsnyWbkiXaYGoipAV7DaVQSLzNt
M0DYE9b5mUzi4f3ZBVaMFAFsV8MHHRiclzCVd4SQlzl6s5Op3od2pYV2UWi4SpDm
281av7pG9GUmsCfZ03VNfSrTaARdW6C/Ui+g4EO4LNxUb1tQvXNete/35u6o2OwK
tAZecyCDmx2YLhimzKZWtZ69XcGca4fWsPMuxE5wPIRS0EJg8vht+d/cN6PyTSHJ
6YBD7cRBjSCNHBUmzm1WJLrRY6MVUDMF/7aFg0t+5+QfwCqQVwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFCPFKXAFTIDhy0GxvO+ET+5YZiAHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWJh
YmU0Zi00M2EzLTRkYjktOGUzNS1iODVhN2U1OTIxNjgvNzRmYThkOWYtNzdmMy0z
ZGM1LWJlNzctNzBkOWI0MWY4NzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFiYWJlNGYtNDNhMy00ZGI5LThl
MzUtYjg1YTdlNTkyMTY4LzlhYmFiZTRmLTQzYTMtNGRiOS04ZTM1LWI4NWE3ZTU5
MjE2OC5jcmwwHwYDVR0jBBgwFoAUI14tUTazJV6fIDfWNhFAKkoP5KEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85YWJhYmU0Zi00M2EzLTRkYjktOGUzNS1iODVh
N2U1OTIxNjguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF4awAwQB
LSnQAwQAQvj3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAH6EU2SB5JUf2VBtf16Bw2sj9qi/GvXvTgWzecVR
QJlDrwKj9KaN31z+RLIGA650D2Z2rwFvQfgUMmAPPuPEs/GOU9KaofDinE1EMoc1
FwZkbCE6fDVV9Kuwq7vxJBeqB8eUFeX6xw8rldhJ3bOYSQg3z0KbbEeeiK0jrvCN
p8NsKbPISwSmX9ublJVE1H7g2JV73621kxQPzG+aNXMKambB1Oq5e6bRs34GVIkY
rlcU4wB2OSspbHlaDcrc1s2k3TYh0Drjh5gNW7/MokdexEeJCufKBCs2s4hUHypO
86T3xoF3DfJb+ZYKaSgh8WFMCkQA7Tl7lSdzhgEVUi1AcF8=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:44:13 2025 by rpki-client