Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f/2c4b3757-f067-3c1a-9b6f-4024069489d9.roa
File:                     2c4b3757-f067-3c1a-9b6f-4024069489d9.roa (raw, json)
Hash identifier:          TsIchjEKT87ubcog4q1gKW9J6sUi37zB5OhOpw7/2Yc=
Subject key identifier:   E5:D7:FF:82:05:62:CB:6C:1A:F5:39:4E:33:E0:E4:99:A4:58:EA:55
Certificate issuer:       /CN=7fc1763a-202c-4a11-8d74-3d052b92bf6f
Certificate serial:       010D0C9F4328584BA39CF1956E16F301046C7780
Authority key identifier: 38:8D:A3:97:5F:F3:55:6A:88:B4:5A:77:BD:4F:29:C7:58:17:11:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f/2c4b3757-f067-3c1a-9b6f-4024069489d9.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     2914
IP address blocks:        23.135.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f/7fc1763a-202c-4a11-8d74-3d052b92bf6f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f/7fc1763a-202c-4a11-8d74-3d052b92bf6f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9c:f1:95:6e:16:f3:01:04:6c:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fc1763a-202c-4a11-8d74-3d052b92bf6f
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=3535bf13-a6af-4cc6-beb0-0f8fe51d9fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:98:ec:f3:cb:05:b9:4d:c4:87:38:df:41:
                    21:4d:c7:0b:8e:9a:b6:2d:25:08:17:07:48:bb:69:
                    2a:34:a0:e3:cf:c9:a4:9c:f6:97:08:a3:15:cb:9a:
                    4f:75:93:c6:92:76:d9:71:48:e7:e1:8b:1b:82:62:
                    27:28:b6:23:dd:bc:32:94:49:ea:77:51:e4:70:ac:
                    c0:f1:7f:2c:d8:69:20:22:4a:9c:51:75:df:3b:01:
                    2b:8f:3e:d9:71:67:7e:31:c4:52:b0:d2:71:41:7f:
                    5e:b1:95:2e:31:98:02:bf:7b:bb:74:e1:5f:c1:11:
                    fd:61:28:03:60:2e:96:0b:3c:35:bd:c5:4e:31:b6:
                    78:65:f9:80:8f:6c:67:b4:66:1a:f7:d7:41:1b:03:
                    33:44:18:63:44:e0:b6:31:74:4c:c0:b5:14:a8:0a:
                    c9:34:20:69:ce:d3:b5:1e:42:2b:19:e9:0b:7a:40:
                    ab:b9:63:bf:38:ad:0c:7e:94:4a:ad:16:72:04:db:
                    8b:42:58:ce:c0:8b:fe:07:a7:14:9f:6e:ac:e7:41:
                    e7:84:0b:f7:a6:fe:c7:99:5d:64:88:8f:92:72:fa:
                    d9:d6:ec:0f:db:b4:d8:96:79:2d:c5:35:50:b8:ad:
                    2c:29:7b:87:c2:07:11:62:2a:a9:3c:18:e6:08:25:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D7:FF:82:05:62:CB:6C:1A:F5:39:4E:33:E0:E4:99:A4:58:EA:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f/2c4b3757-f067-3c1a-9b6f-4024069489d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f/7fc1763a-202c-4a11-8d74-3d052b92bf6f.crl

            X509v3 Authority Key Identifier:
                keyid:38:8D:A3:97:5F:F3:55:6A:88:B4:5A:77:BD:4F:29:C7:58:17:11:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:43:7e:2b:d9:7b:4d:3a:9e:94:b7:02:74:8f:7e:ea:28:8d:
         34:90:3d:94:be:dc:f0:9e:d1:48:75:e5:f3:ea:80:62:2d:dc:
         8a:26:94:92:3c:74:4f:34:45:62:19:8e:bb:c8:f2:36:d5:db:
         e3:74:3a:76:66:7f:a3:90:24:68:21:d4:b2:61:9c:fd:fb:27:
         10:50:55:de:a9:70:be:8f:69:e7:d3:69:10:4d:d7:77:31:93:
         ce:22:9a:1b:47:ed:26:eb:a8:b6:52:a4:a1:88:0e:5b:01:96:
         e2:b3:66:ba:1f:7b:94:81:78:4d:d1:f0:10:9a:ed:a4:6b:61:
         cb:b8:38:b4:24:30:34:d8:e0:fa:b0:12:32:e5:11:96:fe:7c:
         f1:ce:10:d4:eb:8f:6e:59:c7:27:20:ad:6f:02:4c:5a:63:2f:
         99:7d:96:0d:69:c5:3c:98:fe:bd:9f:bd:97:a7:f9:08:5d:45:
         60:82:e6:dd:a5:88:ec:fd:03:07:f0:84:64:17:44:84:06:60:
         4c:c5:9a:28:f9:bd:1a:10:6b:f6:c6:ce:d9:71:9c:1d:f9:1b:
         70:6e:96:2d:fa:ee:dc:d7:d2:37:15:da:b4:2f:c7:7e:da:d3:
         a0:1f:5d:4e:4e:89:a4:6a:7d:e0:28:85:3d:56:32:8f:e6:e4:
         53:30:bd:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPGVbhbzAQRsd4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ZjMTc2M2EtMjAyYy00YTExLThkNzQtM2QwNTJiOTJi
ZjZmMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk
MzUzNWJmMTMtYTZhZi00Y2M2LWJlYjAtMGY4ZmU1MWQ5ZmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoOY7PPLBblNxIc430EhTccLjpq2LSUIFwdI
u2kqNKDjz8mknPaXCKMVy5pPdZPGknbZcUjn4YsbgmInKLYj3bwylEnqd1HkcKzA
8X8s2GkgIkqcUXXfOwErjz7ZcWd+McRSsNJxQX9esZUuMZgCv3u7dOFfwRH9YSgD
YC6WCzw1vcVOMbZ4ZfmAj2xntGYa99dBGwMzRBhjROC2MXRMwLUUqArJNCBpztO1
HkIrGekLekCruWO/OK0MfpRKrRZyBNuLQljOwIv+B6cUn26s50HnhAv3pv7HmV1k
iI+ScvrZ1uwP27TYlnktxTVQuK0sKXuHwgcRYiqpPBjmCCVuXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOXX/4IFYstsGvU5TjPg5JmkWOpVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZmMx
NzYzYS0yMDJjLTRhMTEtOGQ3NC0zZDA1MmI5MmJmNmYvMmM0YjM3NTctZjA2Ny0z
YzFhLTliNmYtNDAyNDA2OTQ4OWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2ZjMTc2M2EtMjAyYy00YTExLThk
NzQtM2QwNTJiOTJiZjZmLzdmYzE3NjNhLTIwMmMtNGExMS04ZDc0LTNkMDUyYjky
YmY2Zi5jcmwwHwYDVR0jBBgwFoAUOI2jl1/zVWqItFp3vU8px1gXEe4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZmMxNzYzYS0yMDJjLTRhMTEtOGQ3NC0zZDA1
MmI5MmJmNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4csMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADpDfivZe006npS3AnSPfuoojTSQPZS+3PCe0Uh15fPqgGIt3IomlJI8
dE80RWIZjrvI8jbV2+N0OnZmf6OQJGgh1LJhnP37JxBQVd6pcL6PaefTaRBN13cx
k84imhtH7SbrqLZSpKGIDlsBluKzZrofe5SBeE3R8BCa7aRrYcu4OLQkMDTY4Pqw
EjLlEZb+fPHOENTrj25ZxycgrW8CTFpjL5l9lg1pxTyY/r2fvZen+QhdRWCC5t2l
iOz9AwfwhGQXRIQGYEzFmij5vRoQa/bGztlxnB35G3Buli367tzX0jcV2rQvx37a
06AfXU5OiaRqfeAohT1WMo/m5FMwvVU=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:17:22 2025 by rpki-client