Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/22611c85-6a84-3f75-9c87-fbc41f2f6c50.roa
File:                     22611c85-6a84-3f75-9c87-fbc41f2f6c50.roa (raw, json)
Hash identifier:          8sp+Bvvg6R6NGRrZPIlR2XXWte392t19/0iKnCiHMNE=
Subject key identifier:   E3:95:B0:4C:68:0D:D9:8E:3E:62:3E:88:EC:9D:FB:67:42:A5:13:B4
Certificate issuer:       /CN=6f079fb3-68a3-45da-bc4a-cc678b0a6f45
Certificate serial:       010D0C9F4328584BB02D03335FC91E6C89015A80
Authority key identifier: 97:18:75:88:30:BB:DC:F0:A5:52:C3:9A:7D:72:7B:90:6A:E7:C0:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/22611c85-6a84-3f75-9c87-fbc41f2f6c50.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     6936
IP address blocks:        23.130.164.0/24 maxlen: 24
                          2607:e5c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2d:03:33:5f:c9:1e:6c:89:01:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f079fb3-68a3-45da-bc4a-cc678b0a6f45
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=37383274-ed85-47f9-b7a3-d7a4f9d70a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:23:91:ae:94:91:75:3a:d3:0f:2b:e0:a3:a6:
                    a5:bf:12:ad:f7:db:47:a0:3a:09:4f:b9:9d:de:ce:
                    9b:ee:ca:6e:f3:63:9a:1c:1e:ff:22:33:f2:34:8c:
                    df:d0:26:ca:3a:2e:6a:77:42:91:48:0a:12:66:2c:
                    a3:7a:31:a1:3a:01:c6:58:6b:66:fe:9d:8d:30:50:
                    e1:28:f6:49:e5:51:81:2f:82:2f:05:5a:5b:da:c2:
                    c8:d0:de:18:9d:42:a7:40:77:67:91:07:06:47:aa:
                    56:79:44:ed:3c:5c:d0:69:8a:10:06:8c:a8:e0:ab:
                    9f:9e:70:33:25:5d:28:e6:9c:b6:4b:56:71:0b:de:
                    5b:55:e6:14:10:ee:7f:27:06:f4:fe:64:93:d0:0c:
                    07:7c:e7:8f:07:ff:3b:e8:20:c0:88:01:c0:22:1d:
                    a8:2b:76:01:25:d7:89:3b:7c:29:28:57:d6:fb:10:
                    63:0d:05:76:89:96:c3:ba:ad:ee:56:87:5c:b1:16:
                    d8:be:07:cb:18:6b:67:1d:ec:cd:26:e5:52:c3:9f:
                    02:63:12:5f:a7:2b:c2:90:dd:5e:0b:a5:a5:bc:28:
                    32:fc:bc:41:67:73:36:82:d0:e0:b0:fb:6e:73:77:
                    90:da:06:c9:89:77:cd:bb:e7:b1:6f:94:61:05:ad:
                    1d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:95:B0:4C:68:0D:D9:8E:3E:62:3E:88:EC:9D:FB:67:42:A5:13:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/22611c85-6a84-3f75-9c87-fbc41f2f6c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.crl

            X509v3 Authority Key Identifier:
                keyid:97:18:75:88:30:BB:DC:F0:A5:52:C3:9A:7D:72:7B:90:6A:E7:C0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.164.0/24
                IPv6:
                  2607:e5c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:40:e4:e6:23:f8:72:fc:05:da:f4:34:69:f2:0b:ff:35:41:
         7a:f2:36:b7:b0:94:fb:d5:c1:5d:e2:73:ca:80:ed:42:4e:4f:
         a6:74:e1:a2:00:63:3b:8c:b1:2a:73:45:b5:b5:bf:a7:88:58:
         dc:10:73:c2:25:21:a9:8a:1d:20:1a:29:4b:2f:66:d4:3f:c8:
         8a:83:8f:6e:05:4c:c2:70:ab:a6:4c:80:14:8a:3e:5a:3e:c7:
         74:48:44:db:5d:f0:62:4e:e6:92:fe:b8:db:62:23:0c:ba:a9:
         94:bf:7a:a0:7c:3d:02:2c:7e:78:3c:eb:d1:ca:78:63:d9:08:
         9d:93:52:78:6c:29:48:50:6d:57:43:bc:90:7d:cb:14:be:01:
         51:ca:fa:7e:5b:1d:b6:2a:a1:2c:3b:56:dc:07:7a:74:e1:5e:
         9c:ef:26:ce:5d:87:8e:04:47:23:b7:94:83:6e:da:8d:03:e9:
         67:11:25:5e:d3:a1:34:7f:e9:36:ed:8c:a5:6c:dd:09:99:40:
         12:ce:09:5b:30:81:6b:19:a9:11:77:ee:51:73:a3:33:ce:ec:
         dc:56:22:c9:97:34:6b:1b:b9:5a:51:e7:18:23:98:8c:bd:10:
         39:94:9a:48:cc:73:d1:8c:cb:4a:02:82:08:de:21:11:60:2c:
         6a:77:01:44
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEuwLQMzX8kebIkBWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYwNzlmYjMtNjhhMy00NWRhLWJjNGEtY2M2NzhiMGE2
ZjQ1MB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk
MzczODMyNzQtZWQ4NS00N2Y5LWI3YTMtZDdhNGY5ZDcwYTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCORrpSRdTrTDyvgo6alvxKt99tHoDoJT7md
3s6b7spu82OaHB7/IjPyNIzf0CbKOi5qd0KRSAoSZiyjejGhOgHGWGtm/p2NMFDh
KPZJ5VGBL4IvBVpb2sLI0N4YnUKnQHdnkQcGR6pWeUTtPFzQaYoQBoyo4KufnnAz
JV0o5py2S1ZxC95bVeYUEO5/Jwb0/mST0AwHfOePB/876CDAiAHAIh2oK3YBJdeJ
O3wpKFfW+xBjDQV2iZbDuq3uVodcsRbYvgfLGGtnHezNJuVSw58CYxJfpyvCkN1e
C6WlvCgy/LxBZ3M2gtDgsPtuc3eQ2gbJiXfNu+exb5RhBa0dfQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFOOVsExoDdmOPmI+iOyd+2dCpRO0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZjA3
OWZiMy02OGEzLTQ1ZGEtYmM0YS1jYzY3OGIwYTZmNDUvMjI2MTFjODUtNmE4NC0z
Zjc1LTljODctZmJjNDFmMmY2YzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmYwNzlmYjMtNjhhMy00NWRhLWJj
NGEtY2M2NzhiMGE2ZjQ1LzZmMDc5ZmIzLTY4YTMtNDVkYS1iYzRhLWNjNjc4YjBh
NmY0NS5jcmwwHwYDVR0jBBgwFoAUlxh1iDC73PClUsOafXJ7kGrnwAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZjA3OWZiMy02OGEzLTQ1ZGEtYmM0YS1jYzY3
OGIwYTZmNDUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4KkMA0E
AgACMAcDBQAmB+XAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBABRA5OYj+HL8Bdr0NGnyC/81QXryNrewlPvV
wV3ic8qA7UJOT6Z04aIAYzuMsSpzRbW1v6eIWNwQc8IlIamKHSAaKUsvZtQ/yIqD
j24FTMJwq6ZMgBSKPlo+x3RIRNtd8GJO5pL+uNtiIwy6qZS/eqB8PQIsfng869HK
eGPZCJ2TUnhsKUhQbVdDvJB9yxS+AVHK+n5bHbYqoSw7VtwHenThXpzvJs5dh44E
RyO3lINu2o0D6WcRJV7ToTR/6TbtjKVs3QmZQBLOCVswgWsZqRF37lFzozPO7NxW
IsmXNGsbuVpR5xgjmIy9EDmUmkjMc9GMy0oCggjeIRFgLGp3AUQ=
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:09:18 2025 by rpki-client