Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/8b8be658-4911-3e79-adcb-5f756862b67a.roa
File:                     8b8be658-4911-3e79-adcb-5f756862b67a.roa (raw, json)
Hash identifier:          Ny7LFuGWRwUcyX8tWetjakLaSgLozr9MFlmZzEl97vY=
Subject key identifier:   AE:8C:33:E8:22:6D:0F:89:08:F2:DF:19:03:3D:66:1E:22:62:13:0F
Certificate issuer:       /CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1
Certificate serial:       010D0C9F4328584A8B0B5DFFDD90819B859EA3D0
Authority key identifier: DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/8b8be658-4911-3e79-adcb-5f756862b67a.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     46505
IP address blocks:        23.187.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:5d:ff:dd:90:81:9b:85:9e:a3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=3f69d8ee-028b-4e99-9c69-4e150222a656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:77:11:4b:6a:b9:88:0d:22:b5:37:be:4f:53:
                    12:c1:41:f6:e6:7c:86:72:b5:74:04:8a:80:3b:e8:
                    86:03:91:c6:76:8c:ad:7a:64:bd:2e:89:f4:47:9a:
                    34:87:87:aa:a6:b9:31:c9:5a:50:49:a0:d7:9e:b8:
                    8c:d5:fb:73:ff:f4:36:80:d9:ca:e8:57:2c:73:fc:
                    6a:dd:cb:70:d4:69:9c:85:46:a4:1d:2a:a8:77:9c:
                    93:06:0a:91:55:60:c4:d5:8b:a0:ec:74:60:c8:c2:
                    1d:3f:91:6d:42:c3:4f:32:eb:65:30:c9:3b:f6:ac:
                    b3:2c:a7:7b:7f:02:63:6b:ea:f7:d5:0e:dd:7f:75:
                    2a:b3:46:78:6f:6d:e7:65:45:72:e9:bc:52:43:10:
                    eb:a5:ea:a3:45:bd:fe:76:a5:34:fc:4a:75:b3:f4:
                    22:50:03:1a:7e:bd:c9:22:ef:f8:14:21:ae:02:f9:
                    fc:01:6e:f9:dc:27:c7:0d:3d:e4:91:0d:15:cf:67:
                    80:59:05:cd:83:39:b4:d3:1e:3d:5f:69:ba:9c:c1:
                    a0:b4:cb:2d:05:99:05:1e:04:c6:c2:83:6c:e9:d8:
                    f7:82:63:02:a3:15:c6:c6:5e:ce:99:38:99:6f:3c:
                    76:48:d5:bf:2d:a8:e8:96:af:da:9e:ce:bd:d4:e0:
                    e0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8C:33:E8:22:6D:0F:89:08:F2:DF:19:03:3D:66:1E:22:62:13:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/8b8be658-4911-3e79-adcb-5f756862b67a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl

            X509v3 Authority Key Identifier:
                keyid:DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:82:b1:79:ff:48:ce:02:59:50:e5:ea:3b:90:df:b7:7c:52:
         18:d8:b0:a0:78:fb:2b:95:68:a4:27:32:fd:81:72:d4:90:de:
         d7:de:3c:32:37:e5:6a:a0:cd:24:d3:a9:6d:1d:51:6d:1a:a0:
         e1:fa:a4:e1:7e:a8:ae:c4:dc:34:77:99:98:c9:89:ef:b2:62:
         cc:b2:c7:eb:11:21:2d:7d:79:25:53:56:5b:64:38:f0:55:dd:
         b5:18:7f:03:9a:74:95:cb:87:3b:1f:4c:28:a4:f6:23:6b:a6:
         13:1d:9f:aa:9a:51:51:f7:ca:15:bf:4e:3d:46:83:29:0a:b7:
         46:20:76:75:88:9f:ba:11:aa:79:0e:50:fd:e4:a2:7b:bb:ee:
         84:ad:92:75:5d:2c:42:1b:4d:dc:fa:b9:d1:db:cf:9a:07:86:
         53:ab:e1:d1:43:7e:94:fe:dd:44:b9:9e:57:67:03:70:a4:84:
         29:c8:95:42:f1:ca:3e:fc:a2:0f:56:b7:fe:2c:31:a0:39:e0:
         b5:11:56:ca:9d:7b:68:9b:76:a6:df:16:63:ab:26:30:31:9c:
         f5:28:5a:11:dd:d6:2a:de:de:33:8f:2b:5c:85:83:d3:ba:e3:
         02:67:cf:5d:16:b0:9e:9f:44:59:88:ad:b6:a2:f9:89:9b:d4:
         6a:6e:30:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC13/3ZCBm4Weo9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1NThlZmYtNmMyNi00YTE3LWJiOWUtNTQzNzdlYTJh
ZWYxMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk
M2Y2OWQ4ZWUtMDI4Yi00ZTk5LTljNjktNGUxNTAyMjJhNjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhncRS2q5iA0itTe+T1MSwUH25nyGcrV0BIqA
O+iGA5HGdoytemS9Lon0R5o0h4eqprkxyVpQSaDXnriM1ftz//Q2gNnK6Fcsc/xq
3ctw1GmchUakHSqod5yTBgqRVWDE1Yug7HRgyMIdP5FtQsNPMutlMMk79qyzLKd7
fwJja+r31Q7df3Uqs0Z4b23nZUVy6bxSQxDrpeqjRb3+dqU0/Ep1s/QiUAMafr3J
Iu/4FCGuAvn8AW753CfHDT3kkQ0Vz2eAWQXNgzm00x49X2m6nMGgtMstBZkFHgTG
woNs6dj3gmMCoxXGxl7OmTiZbzx2SNW/Lajolq/ans691ODgeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK6MM+gibQ+JCPLfGQM9Zh4iYhMPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDU1
OGVmZi02YzI2LTRhMTctYmI5ZS01NDM3N2VhMmFlZjEvOGI4YmU2NTgtNDkxMS0z
ZTc5LWFkY2ItNWY3NTY4NjJiNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ1NThlZmYtNmMyNi00YTE3LWJi
OWUtNTQzNzdlYTJhZWYxL2Q0NTU4ZWZmLTZjMjYtNGExNy1iYjllLTU0Mzc3ZWEy
YWVmMS5jcmwwHwYDVR0jBBgwFoAU3AbrjdSGBGGYJOCBOd+YGqxUOXYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kNDU1OGVmZi02YzI2LTRhMTctYmI5ZS01NDM3
N2VhMmFlZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7v4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCCsXn/SM4CWVDl6juQ37d8UhjYsKB4+yuVaKQnMv2BctSQ3tfePDI3
5WqgzSTTqW0dUW0aoOH6pOF+qK7E3DR3mZjJie+yYsyyx+sRIS19eSVTVltkOPBV
3bUYfwOadJXLhzsfTCik9iNrphMdn6qaUVH3yhW/Tj1GgykKt0YgdnWIn7oRqnkO
UP3konu77oStknVdLEIbTdz6udHbz5oHhlOr4dFDfpT+3US5nldnA3CkhCnIlULx
yj78og9Wt/4sMaA54LURVsqde2ibdqbfFmOrJjAxnPUoWhHd1ire3jOPK1yFg9O6
4wJnz10WsJ6fRFmIrbai+Ymb1GpuMEM=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:18:43 2025 by rpki-client