Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/4b6ed7dd-b800-35b6-9a50-bdd62bae545a.roa
File:                     4b6ed7dd-b800-35b6-9a50-bdd62bae545a.roa (raw, json)
Hash identifier:          VbsaNq5UUYFEyXYn/Uuaptp6o2akZFVztPwmHcVaNhg=
Subject key identifier:   7B:8D:82:99:42:38:14:54:A3:72:76:5B:96:BA:90:F7:17:6E:74:8A
Certificate issuer:       /CN=1e5e6928-fdde-43e0-9e72-10066be1a674
Certificate serial:       010D0C9F4328584ABEB0D8FBF8353DDE04F65140
Authority key identifier: B5:86:6C:5D:11:A3:44:AA:34:EB:42:57:0D:40:64:83:19:F8:15:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/4b6ed7dd-b800-35b6-9a50-bdd62bae545a.roa
Signing time:             Mon 04 Aug 2025 13:00:36 +0000
ROA not before:           Mon 04 Aug 2025 13:00:36 +0000
ROA not after:            Sun 02 Nov 2025 14:00:36 +0000
asID:                     18493
IP address blocks:        23.130.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/1e5e6928-fdde-43e0-9e72-10066be1a674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/1e5e6928-fdde-43e0-9e72-10066be1a674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:be:b0:d8:fb:f8:35:3d:de:04:f6:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5e6928-fdde-43e0-9e72-10066be1a674
        Validity
            Not Before: Aug  4 13:00:36 2025 GMT
            Not After : Nov  2 14:00:36 2025 GMT
        Subject: CN=2eef9741-a797-4aef-8ab3-fffb4373da86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a8:a8:31:05:eb:29:63:c6:52:e7:f9:9a:98:
                    5b:8f:97:1a:6d:70:0c:14:06:db:a7:6d:9a:89:f6:
                    25:13:8c:11:83:2a:71:ce:79:46:96:71:01:e9:51:
                    3e:27:d9:da:cb:7c:54:70:71:0c:21:04:4f:f9:47:
                    0e:16:f4:7c:92:e5:06:24:bb:a4:57:41:e4:ba:20:
                    34:ef:f9:c8:9d:1f:c0:29:6e:1e:22:14:18:bc:4c:
                    0c:2f:70:9b:bd:a2:1d:c1:8e:33:81:09:84:12:c6:
                    fa:dc:e9:8a:13:f3:d1:d1:6c:22:74:62:07:54:60:
                    14:82:a0:09:42:5c:a3:f7:19:06:b9:8b:05:2c:c9:
                    c0:55:48:1c:0c:d3:de:f5:62:52:4d:eb:8d:fd:0b:
                    28:88:0f:45:6b:9d:e3:fd:64:c6:69:27:25:9a:cb:
                    63:15:8a:b0:0d:93:d2:06:db:b7:85:0d:78:61:b2:
                    2b:9c:be:1c:b2:66:a1:57:47:ba:6a:45:68:17:62:
                    aa:bf:f6:ae:45:82:60:9f:c3:0b:c6:83:8c:07:5c:
                    16:fd:a1:6c:5b:64:68:32:c6:ee:bc:25:36:0e:da:
                    f7:4f:9d:73:c8:ad:12:6a:e1:20:22:30:2d:fc:70:
                    f7:e7:78:dd:88:5e:4e:04:90:a9:fc:ca:25:e6:5c:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8D:82:99:42:38:14:54:A3:72:76:5B:96:BA:90:F7:17:6E:74:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/4b6ed7dd-b800-35b6-9a50-bdd62bae545a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/1e5e6928-fdde-43e0-9e72-10066be1a674.crl

            X509v3 Authority Key Identifier:
                keyid:B5:86:6C:5D:11:A3:44:AA:34:EB:42:57:0D:40:64:83:19:F8:15:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e1:73:07:e8:8c:00:26:0c:10:07:10:ef:1c:b0:7d:60:28:
         5f:ce:b3:5e:15:69:41:e7:9f:0c:72:38:5d:31:6e:d1:39:f6:
         e0:c3:61:24:c3:5f:85:73:12:34:35:94:d8:06:00:51:8d:95:
         ff:13:bb:49:6d:94:46:e5:69:99:02:20:dc:f3:3b:b1:c2:05:
         29:f9:00:35:f8:4f:8f:9f:06:f9:bd:a0:60:e5:e5:ec:a4:fb:
         1e:54:2d:9b:1f:1c:c0:ac:37:79:bf:4f:dd:fb:6a:b8:fe:ea:
         5d:11:9c:e0:9e:42:d6:44:99:bd:89:c3:c5:4c:83:06:f6:9d:
         09:7a:20:f1:0e:a6:df:56:ff:98:f3:bc:54:c0:c6:33:6e:5d:
         71:75:15:94:45:bd:6f:c2:59:66:a3:76:07:69:42:95:f1:6e:
         85:47:6a:13:9e:82:3a:c2:13:e4:99:12:5a:ce:74:08:00:df:
         bd:98:d9:03:ce:c2:84:10:fa:3c:e9:7b:2a:d6:83:5a:71:ac:
         46:b6:e0:fc:27:d4:1d:b2:12:5d:d7:f0:e6:c1:4e:81:e8:2e:
         ad:45:3c:3d:3c:ea:1c:ff:aa:78:24:fe:37:95:80:e7:45:ed:
         db:cc:2e:12:2d:a1:15:1e:ff:10:e7:f6:ae:09:19:7d:d5:04:
         6a:ab:94:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq+sNj7+DU93gT2UUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU1ZTY5MjgtZmRkZS00M2UwLTllNzItMTAwNjZiZTFh
Njc0MB4XDTI1MDgwNDEzMDAzNloXDTI1MTEwMjE0MDAzNlowLzEtMCsGA1UEAxMk
MmVlZjk3NDEtYTc5Ny00YWVmLThhYjMtZmZmYjQzNzNkYTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKioMQXrKWPGUuf5mphbj5cabXAMFAbbp22a
ifYlE4wRgypxznlGlnEB6VE+J9nay3xUcHEMIQRP+UcOFvR8kuUGJLukV0HkuiA0
7/nInR/AKW4eIhQYvEwML3CbvaIdwY4zgQmEEsb63OmKE/PR0WwidGIHVGAUgqAJ
Qlyj9xkGuYsFLMnAVUgcDNPe9WJSTeuN/QsoiA9Fa53j/WTGaSclmstjFYqwDZPS
Btu3hQ14YbIrnL4csmahV0e6akVoF2Kqv/auRYJgn8MLxoOMB1wW/aFsW2RoMsbu
vCU2Dtr3T51zyK0SauEgIjAt/HD353jdiF5OBJCp/Mol5lwDCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHuNgplCOBRUo3J2W5a6kPcXbnSKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZTVl
NjkyOC1mZGRlLTQzZTAtOWU3Mi0xMDA2NmJlMWE2NzQvNGI2ZWQ3ZGQtYjgwMC0z
NWI2LTlhNTAtYmRkNjJiYWU1NDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWU1ZTY5MjgtZmRkZS00M2UwLTll
NzItMTAwNjZiZTFhNjc0LzFlNWU2OTI4LWZkZGUtNDNlMC05ZTcyLTEwMDY2YmUx
YTY3NC5jcmwwHwYDVR0jBBgwFoAUtYZsXRGjRKo060JXDUBkgxn4FSIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZTVlNjkyOC1mZGRlLTQzZTAtOWU3Mi0xMDA2
NmJlMWE2NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA3hcwfojAAmDBAHEO8csH1gKF/Os14VaUHnnwxyOF0xbtE59uDDYSTD
X4VzEjQ1lNgGAFGNlf8Tu0ltlEblaZkCINzzO7HCBSn5ADX4T4+fBvm9oGDl5eyk
+x5ULZsfHMCsN3m/T937arj+6l0RnOCeQtZEmb2Jw8VMgwb2nQl6IPEOpt9W/5jz
vFTAxjNuXXF1FZRFvW/CWWajdgdpQpXxboVHahOegjrCE+SZElrOdAgA372Y2QPO
woQQ+jzpeyrWg1pxrEa24Pwn1B2yEl3X8ObBToHoLq1FPD086hz/qngk/jeVgOdF
7dvMLhItoRUe/xDn9q4JGX3VBGqrlHU=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:16:24 2025 by rpki-client