Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/53b0015c-a0ec-3ab9-a799-bfa8ff1e26ff.roa
File:                     53b0015c-a0ec-3ab9-a799-bfa8ff1e26ff.roa (raw, json)
Hash identifier:          4RYTqzZLuK61y5lfi03r615tUdHQ6rld2DBclZYSli4=
Subject key identifier:   B3:2B:81:23:AA:53:AC:3D:69:56:00:77:19:2E:E7:EE:56:4B:7D:D4
Certificate issuer:       /CN=04723749-feb1-4da5-ac21-ba89ad1d057e
Certificate serial:       010D0C9F4328584ABD4BB49A8F49B0C1AE0D2680
Authority key identifier: 60:28:32:B3:7E:3D:0C:CE:A9:F9:51:48:C3:8E:BD:E7:47:57:EC:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/53b0015c-a0ec-3ab9-a799-bfa8ff1e26ff.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     398766
IP address blocks:        23.252.16.0/20 maxlen: 24
                          124.198.160.0/19 maxlen: 24
                          162.118.96.0/19 maxlen: 24
                          2605:eb40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/04723749-feb1-4da5-ac21-ba89ad1d057e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/04723749-feb1-4da5-ac21-ba89ad1d057e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:b4:9a:8f:49:b0:c1:ae:0d:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04723749-feb1-4da5-ac21-ba89ad1d057e
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=f28ab370-3ed2-459d-9710-57d9db39472d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:6b:83:ca:08:10:27:e9:31:f5:7f:0f:40:
                    cd:b1:d8:5d:9c:0c:e8:83:18:6c:77:ab:dd:60:d3:
                    4f:4b:de:68:8f:fc:5c:e4:de:12:94:72:4b:bf:d0:
                    90:55:6f:13:db:27:d6:28:1b:46:77:8c:19:68:81:
                    ec:22:20:93:e9:de:1a:8f:ad:7d:0a:db:e3:06:78:
                    1e:5c:86:b5:9e:8f:fa:a3:d9:7a:ad:0e:dd:5d:8d:
                    5b:13:7d:c0:12:d2:54:aa:c4:19:12:14:e4:75:5f:
                    cf:00:a4:d2:e5:47:75:77:53:99:54:78:df:c6:1f:
                    a1:99:91:bd:52:40:f2:76:2e:dc:63:bb:40:a5:e2:
                    98:72:29:db:76:53:8b:bf:f9:e2:bd:e9:68:fc:a7:
                    e6:0b:38:e3:1b:57:27:dc:4b:79:5c:c2:b4:50:d1:
                    23:c0:f5:c9:62:1b:21:21:f9:bc:e2:3d:17:1b:75:
                    3e:ab:01:ea:f0:7a:ed:bb:e8:af:72:45:25:a0:93:
                    97:b7:78:12:bb:62:04:25:7d:a3:b1:de:1a:ba:49:
                    60:3e:cf:d2:4c:98:b7:b4:98:79:1f:42:e5:b9:a9:
                    09:41:46:90:07:ef:e7:fa:fb:b6:f8:eb:f1:9d:d2:
                    98:5c:18:94:b9:3e:6b:76:b5:2d:d1:20:7f:e6:ea:
                    c3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2B:81:23:AA:53:AC:3D:69:56:00:77:19:2E:E7:EE:56:4B:7D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/53b0015c-a0ec-3ab9-a799-bfa8ff1e26ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/04723749-feb1-4da5-ac21-ba89ad1d057e.crl

            X509v3 Authority Key Identifier:
                keyid:60:28:32:B3:7E:3D:0C:CE:A9:F9:51:48:C3:8E:BD:E7:47:57:EC:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.252.16.0/20
                  124.198.160.0/19
                  162.118.96.0/19
                IPv6:
                  2605:eb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ec:90:37:cc:91:d0:50:2d:c0:c0:d1:c8:b0:e6:d9:96:15:
         8f:8d:bb:6a:63:cb:7d:12:36:69:64:cc:16:9c:19:37:55:59:
         0a:2b:61:a0:0f:be:df:ca:15:1f:94:27:96:88:86:e2:d9:ce:
         64:b0:99:79:9a:c3:20:6e:49:79:5f:f3:bd:81:1f:3c:df:78:
         ec:56:3c:fa:ab:2f:8b:d9:fd:dc:d4:04:b9:04:3f:a0:f8:ae:
         82:af:70:c2:4e:b0:81:24:39:94:ec:a6:82:fd:59:c6:70:50:
         08:c2:d0:02:05:e9:ea:ee:50:fc:e6:f3:a0:19:50:e4:6f:c5:
         a5:4a:69:5f:66:86:1b:e6:d2:e1:67:68:ad:b6:e5:4f:df:64:
         7b:ba:a1:c8:ee:6c:66:73:15:38:ba:cc:86:a2:da:9f:5e:29:
         3a:c7:cb:89:0a:b0:b7:96:ff:eb:56:96:9c:18:84:32:77:d9:
         28:20:34:ab:39:f6:37:52:eb:f5:d8:f9:97:9a:f2:e7:2c:1a:
         d0:68:a6:b0:a9:a8:55:6f:9a:67:e8:77:c9:e9:4b:03:33:ad:
         30:88:22:03:37:88:47:76:a4:ff:60:3a:29:16:1d:71:39:34:
         79:04:52:47:ac:7f:45:a7:a5:4c:e8:6d:b3:a6:e7:84:2c:7b:
         2a:ec:71:c7
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEq9S7Saj0mwwa4NJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQ3MjM3NDktZmViMS00ZGE1LWFjMjEtYmE4OWFkMWQw
NTdlMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
ZjI4YWIzNzAtM2VkMi00NTlkLTk3MTAtNTdkOWRiMzk0NzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszhrg8oIECfpMfV/D0DNsdhdnAzogxhsd6vd
YNNPS95oj/xc5N4SlHJLv9CQVW8T2yfWKBtGd4wZaIHsIiCT6d4aj619CtvjBnge
XIa1no/6o9l6rQ7dXY1bE33AEtJUqsQZEhTkdV/PAKTS5Ud1d1OZVHjfxh+hmZG9
UkDydi7cY7tApeKYcinbdlOLv/nivelo/KfmCzjjG1cn3Et5XMK0UNEjwPXJYhsh
Ifm84j0XG3U+qwHq8Hrtu+ivckUloJOXt3gSu2IEJX2jsd4auklgPs/STJi3tJh5
H0LluakJQUaQB+/n+vu2+OvxndKYXBiUuT5rdrUt0SB/5urDBQIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFLMrgSOqU6w9aVYAdxku5+5WS33UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDcy
Mzc0OS1mZWIxLTRkYTUtYWMyMS1iYTg5YWQxZDA1N2UvNTNiMDAxNWMtYTBlYy0z
YWI5LWE3OTktYmZhOGZmMWUyNmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQ3MjM3NDktZmViMS00ZGE1LWFj
MjEtYmE4OWFkMWQwNTdlLzA0NzIzNzQ5LWZlYjEtNGRhNS1hYzIxLWJhODlhZDFk
MDU3ZS5jcmwwHwYDVR0jBBgwFoAUYCgys349DM6p+VFIw46950dX7EswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDcyMzc0OS1mZWIxLTRkYTUtYWMyMS1iYTg5
YWQxZDA1N2UuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEF/wQAwQF
fMagAwQFonZgMA0EAgACMAcDBQAmBetAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF3skDfMkdBQLcDA0ciw
5tmWFY+Nu2pjy30SNmlkzBacGTdVWQorYaAPvt/KFR+UJ5aIhuLZzmSwmXmawyBu
SXlf872BHzzfeOxWPPqrL4vZ/dzUBLkEP6D4roKvcMJOsIEkOZTspoL9WcZwUAjC
0AIF6eruUPzm86AZUORvxaVKaV9mhhvm0uFnaK225U/fZHu6ocjubGZzFTi6zIai
2p9eKTrHy4kKsLeW/+tWlpwYhDJ32SggNKs59jdS6/XY+Zea8ucsGtBoprCpqFVv
mmfod8npSwMzrTCIIgM3iEd2pP9gOikWHXE5NHkEUkesf0WnpUzobbOm54Qseyrs
ccc=
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:47 2025 by rpki-client