Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa
File:                     2c9db57d-cb56-3111-ad11-10c62203b5ca.roa (raw, json)
Hash identifier:          3FnjUXPbfw742oYRc+IHa1dYL6TQyzLVF9loyECR1RA=
Subject key identifier:   75:E5:80:7F:09:13:4F:53:7E:75:95:A0:D9:FB:41:2F:12:81:D2:77
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F4328584AC0163DE3BC664A45E94B9DF0
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     19257
IP address blocks:        23.252.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:3d:e3:bc:66:4a:45:e9:4b:9d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=ee79cc6b-3e22-439c-b72c-ee3c3eb814a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:79:9b:48:d8:47:91:d5:59:67:7c:37:e0:
                    f8:aa:1d:55:05:e8:77:d4:ef:5e:61:e4:7a:40:fa:
                    fb:63:16:a5:a5:63:31:95:26:38:5b:b9:ba:de:7b:
                    46:d0:1a:1a:a2:9b:48:28:ee:43:12:3d:41:35:df:
                    84:b4:d6:74:83:d9:37:3a:84:91:e1:09:e5:d1:39:
                    eb:eb:32:1d:71:4d:59:9f:71:e8:fc:62:d7:59:6d:
                    06:42:99:a7:45:49:49:b0:ea:a8:78:0f:54:42:bd:
                    ec:a9:bf:21:70:64:60:e4:35:0e:0b:fe:6e:9d:0a:
                    d8:ab:be:77:72:13:04:5f:81:23:a1:b7:7d:88:ad:
                    b4:57:8a:00:d4:cd:d5:6f:c5:ce:f7:31:73:09:7f:
                    3f:81:e0:eb:87:59:e2:56:19:c9:20:1d:da:4b:f7:
                    d5:d0:a2:62:c5:65:63:ee:86:99:36:2c:f8:99:33:
                    2a:c0:da:3d:8e:21:c9:15:88:45:d9:d4:e6:40:ac:
                    a8:ff:d1:b9:c2:5e:70:08:1e:22:9b:4e:9a:d6:35:
                    85:d2:2e:fb:3c:b3:2a:9e:05:58:f1:dd:55:6f:de:
                    71:2c:6b:f1:9e:40:b3:31:aa:e9:f0:dd:3a:cf:ed:
                    11:ff:06:88:b7:cc:2b:64:01:55:c6:1d:b6:a9:87:
                    7d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E5:80:7F:09:13:4F:53:7E:75:95:A0:D9:FB:41:2F:12:81:D2:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.252.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:20:10:91:76:b8:cd:c4:30:13:c2:dd:22:30:fc:9c:eb:ff:
         b0:85:db:ae:7b:b2:53:6e:8c:a9:8a:b5:f8:81:ac:ff:a6:84:
         a1:67:ed:ac:00:ec:31:ad:c9:72:5a:26:e1:b8:d6:2f:0c:32:
         cb:b8:51:29:95:e3:e3:46:99:42:83:ee:ad:fa:6c:77:28:f1:
         1e:f6:fd:06:d3:92:b3:3b:b5:92:f3:29:a3:39:62:06:28:14:
         e4:56:db:4d:9b:9a:cc:a2:2e:34:68:c1:38:eb:05:31:63:2e:
         78:11:67:f2:47:ce:64:96:4a:60:8d:06:f9:d0:a5:5c:fa:9e:
         8e:d0:32:c4:35:13:3f:28:68:2a:3d:50:b0:d5:e0:88:f7:07:
         c3:c5:8c:32:7d:d0:a0:ec:ba:c6:6c:01:d7:00:0c:5b:5f:2f:
         ce:4c:6c:9b:55:8f:b9:b7:00:6a:cf:04:01:e5:ff:48:21:f2:
         60:37:ec:0c:09:95:78:18:41:ef:10:d2:1b:1c:16:60:14:aa:
         19:7c:7b:9f:3f:0e:6d:56:39:55:d4:e5:00:c0:17:b7:e1:eb:
         ae:1a:06:b0:61:35:1f:5d:bb:5d:ff:12:02:49:77:ca:79:14:
         de:2b:3e:07:db:51:4c:6d:de:d5:59:6c:86:08:df:b7:c8:a4:
         4b:e1:74:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFj3jvGZKRelLnfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0
MjhhMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZWU3OWNjNmItM2UyMi00MzljLWI3MmMtZWUzYzNlYjgxNGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06Z5m0jYR5HVWWd8N+D4qh1VBeh31O9eYeR6
QPr7YxalpWMxlSY4W7m63ntG0BoaoptIKO5DEj1BNd+EtNZ0g9k3OoSR4Qnl0Tnr
6zIdcU1Zn3Ho/GLXWW0GQpmnRUlJsOqoeA9UQr3sqb8hcGRg5DUOC/5unQrYq753
chMEX4Ejobd9iK20V4oA1M3Vb8XO9zFzCX8/geDrh1niVhnJIB3aS/fV0KJixWVj
7oaZNiz4mTMqwNo9jiHJFYhF2dTmQKyo/9G5wl5wCB4im06a1jWF0i77PLMqngVY
8d1Vb95xLGvxnkCzMarp8N06z+0R/waIt8wrZAFVxh22qYd97wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHXlgH8JE09TfnWVoNn7QS8SgdJ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1
YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvMmM5ZGI1N2QtY2I1Ni0z
MTExLWFkMTEtMTBjNjIyMDNiNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj
ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw
NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5
ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEggEJF2uM3EMBPC3SIw/Jzr/7CF2657slNujKmKtfiBrP+mhKFn7awA
7DGtyXJaJuG41i8MMsu4USmV4+NGmUKD7q36bHco8R72/QbTkrM7tZLzKaM5YgYo
FORW202bmsyiLjRowTjrBTFjLngRZ/JHzmSWSmCNBvnQpVz6no7QMsQ1Ez8oaCo9
ULDV4Ij3B8PFjDJ90KDsusZsAdcADFtfL85MbJtVj7m3AGrPBAHl/0gh8mA37AwJ
lXgYQe8Q0hscFmAUqhl8e58/Dm1WOVXU5QDAF7fh664aBrBhNR9du13/EgJJd8p5
FN4rPgfbUUxt3tVZbIYI37fIpEvhdH8=
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:15:26 2025 by rpki-client