Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86f1f5e4-b111-38ca-aa96-1f31a096aded.roa
File:                     86f1f5e4-b111-38ca-aa96-1f31a096aded.roa (raw, json)
Hash identifier:          hiDGwksgFMhFczVDQHMBn+PxZ5NHGKQDVNKB+TWN3Gs=
Subject key identifier:   34:C7:6D:26:BE:2A:3D:FF:3E:E0:23:C9:4A:A4:1B:46:E1:44:E8:E6
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584AB650F4C2972E41A16BEB8F00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86f1f5e4-b111-38ca-aa96-1f31a096aded.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     396190
IP address blocks:        23.19.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f4:c2:97:2e:41:a1:6b:eb:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=58aa1613-3915-4486-9720-39bd25f07139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:c3:f6:c9:69:f2:67:ba:cc:85:f3:e0:bb:
                    54:18:a7:ea:f3:e8:3f:1d:68:fe:ab:ef:1b:82:f0:
                    04:cc:91:31:3d:88:f7:aa:1e:bb:c2:9b:ef:4c:55:
                    89:fc:64:a7:cf:e4:f8:02:89:45:c3:f4:9f:21:ac:
                    ec:31:52:a3:f5:45:b7:79:eb:ff:58:0d:a9:95:d9:
                    6d:ed:ef:db:50:1c:a8:a0:7f:96:b4:34:95:f6:71:
                    2e:d4:5d:99:a8:f0:63:cd:d1:e5:94:b7:93:65:4e:
                    dd:62:ca:82:14:19:0b:54:19:cd:59:37:6e:b5:27:
                    e4:c9:0b:67:d8:1b:6d:20:4e:8d:2c:63:3b:6d:1a:
                    e9:85:76:51:1f:6f:bb:36:86:a7:77:82:f5:72:1f:
                    c3:f3:ab:f4:b2:99:58:11:c6:5a:bf:7e:67:23:09:
                    db:ba:c0:f0:34:cb:cf:14:c8:d3:d8:08:37:6d:86:
                    3d:40:f2:80:ef:09:49:20:2a:35:71:7a:fe:6a:2a:
                    79:f0:fc:dd:77:a0:dd:17:8a:a8:f3:c0:2e:75:3b:
                    da:8f:3c:7c:98:94:12:9a:ae:4e:eb:42:2b:b2:d5:
                    df:94:28:6f:8b:0a:14:16:7c:7f:9b:bf:b0:40:01:
                    11:95:0c:9b:1c:27:d5:a9:dd:5c:00:6f:ff:68:19:
                    86:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C7:6D:26:BE:2A:3D:FF:3E:E0:23:C9:4A:A4:1B:46:E1:44:E8:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86f1f5e4-b111-38ca-aa96-1f31a096aded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:53:ed:68:12:1d:67:11:ce:29:5a:6b:e9:1c:3c:b5:20:d4:
         e7:0f:a9:7f:48:9c:fc:6b:e9:0d:f0:80:42:b2:78:f6:5d:d1:
         1d:94:f7:39:33:93:87:a7:0c:f7:52:bd:10:18:70:b5:54:50:
         e1:62:20:8f:a6:a0:ff:14:b1:29:5e:de:82:48:08:cb:43:7c:
         34:c4:77:86:a2:1c:85:0d:75:86:ae:2e:ef:c6:e6:05:7c:09:
         7b:30:0f:3c:84:c2:49:6e:b3:57:22:c9:47:0c:63:4f:08:d6:
         2c:d3:15:82:83:8e:bc:46:fa:6c:12:19:6e:ea:6b:62:21:25:
         fd:c5:4f:54:c3:83:16:b2:58:8e:f0:a4:0b:de:73:15:e3:4b:
         42:0a:48:7f:ea:b5:21:9b:40:d0:d2:92:b1:6c:15:60:71:20:
         38:05:ca:67:25:eb:04:9a:03:01:a7:6b:8a:c8:7a:dd:d4:b2:
         4f:ef:fc:21:cd:0b:fe:14:af:5a:bc:e0:ee:6a:ae:40:c2:28:
         0b:5a:47:a4:c2:d4:d5:37:6b:48:7d:ed:e9:59:c7:f0:30:dc:
         40:e2:e5:e3:68:8d:4f:8b:f4:03:68:98:a8:3b:e0:ad:1d:a2:
         55:d7:1f:97:08:38:43:15:82:0d:85:0c:00:62:7d:9b:ca:45:
         34:3b:b5:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPTCly5BoWvrjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk
NThhYTE2MTMtMzkxNS00NDg2LTk3MjAtMzliZDI1ZjA3MTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotnD9slp8me6zIXz4LtUGKfq8+g/HWj+q+8b
gvAEzJExPYj3qh67wpvvTFWJ/GSnz+T4AolFw/SfIazsMVKj9UW3eev/WA2pldlt
7e/bUByooH+WtDSV9nEu1F2ZqPBjzdHllLeTZU7dYsqCFBkLVBnNWTdutSfkyQtn
2BttIE6NLGM7bRrphXZRH2+7Noand4L1ch/D86v0splYEcZav35nIwnbusDwNMvP
FMjT2Ag3bYY9QPKA7wlJICo1cXr+aip58Pzdd6DdF4qo88AudTvajzx8mJQSmq5O
60IrstXflChviwoUFnx/m7+wQAERlQybHCfVqd1cAG//aBmGxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTHbSa+Kj3/PuAjyUqkG0bhROjmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODZmMWY1ZTQtYjExMS0z
OGNhLWFhOTYtMWYzMWEwOTZhZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI9T7WgSHWcRzilaa+kcPLUg1OcPqX9InPxr6Q3wgEKyePZd0R2U9zkz
k4enDPdSvRAYcLVUUOFiII+moP8UsSle3oJICMtDfDTEd4aiHIUNdYauLu/G5gV8
CXswDzyEwklus1ciyUcMY08I1izTFYKDjrxG+mwSGW7qa2IhJf3FT1TDgxayWI7w
pAvecxXjS0IKSH/qtSGbQNDSkrFsFWBxIDgFymcl6wSaAwGna4rIet3Usk/v/CHN
C/4Ur1q84O5qrkDCKAtaR6TC1NU3a0h97elZx/Aw3EDi5eNojU+L9ANomKg74K0d
olXXH5cIOEMVgg2FDABifZvKRTQ7tdU=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:18:22 2025 by rpki-client