Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06f4cdd6-7003-3d36-8862-8825571ab6f5.roa
File:                     06f4cdd6-7003-3d36-8862-8825571ab6f5.roa (raw, json)
Hash identifier:          tAMnQ2RGMVj/tBAbRksj38x1CKFudOHoGCWfIGZ9xPo=
Subject key identifier:   08:67:28:1C:F8:38:1D:6F:CA:93:B2:AD:F8:0B:8E:AB:E6:8A:CD:3F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A66C093CA56CFC926EBED6DC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06f4cdd6-7003-3d36-8862-8825571ab6f5.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     16625
IP address blocks:        23.200.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:93:ca:56:cf:c9:26:eb:ed:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=540fb319-3536-4c4f-9d13-e698a54612cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c0:a6:72:56:c6:78:42:cc:c8:d8:bf:65:65:
                    d8:b7:15:d6:96:c1:fb:48:f0:76:57:53:36:d8:25:
                    53:c6:de:a5:cc:18:41:45:a1:10:4d:e0:e4:4c:f6:
                    b8:b5:db:71:df:3b:c9:c7:45:f7:ac:b4:4f:32:3c:
                    87:7d:db:3d:72:7a:f9:fb:86:f2:65:53:28:08:e0:
                    bb:8c:85:28:df:78:e0:19:84:e5:f0:f3:ae:b9:6a:
                    09:57:bd:de:31:89:12:1d:bd:18:6a:e7:e6:57:cf:
                    4b:d3:77:bb:5d:fd:7b:e6:a0:aa:bc:82:ae:67:31:
                    8b:a6:6b:7f:46:27:a5:08:67:1c:3c:3c:91:5a:0c:
                    8b:f6:5c:09:16:8b:e7:57:fc:9d:01:96:30:b6:75:
                    9f:50:79:99:67:7c:22:db:a0:f4:20:c9:a9:99:5d:
                    0d:63:97:b3:1b:ec:20:75:c2:40:f0:7d:66:d6:3f:
                    31:aa:ac:0d:84:b9:c2:2e:d3:fc:63:db:6a:b7:29:
                    d1:93:a2:25:32:6a:5c:e6:ae:57:5e:39:55:a1:ac:
                    87:f8:00:3d:02:48:69:52:16:75:63:ad:d8:df:95:
                    32:db:58:86:16:65:37:17:54:c0:82:27:6f:36:a4:
                    24:a8:c7:e1:7c:ae:0a:35:de:9c:d8:5f:17:b3:81:
                    2f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:67:28:1C:F8:38:1D:6F:CA:93:B2:AD:F8:0B:8E:AB:E6:8A:CD:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06f4cdd6-7003-3d36-8862-8825571ab6f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:68:01:c7:38:5d:97:7a:09:7b:10:56:94:f0:97:4a:28:33:
         4b:8f:7e:50:c8:bb:bd:15:75:7b:78:40:17:3e:c0:22:6f:89:
         4e:fe:fb:18:17:f3:a3:7a:e9:08:95:85:19:34:dd:6a:9e:7e:
         81:00:49:02:ce:ab:81:e6:cc:3e:e4:13:2e:5a:ea:6f:05:5c:
         d2:36:9a:b7:c8:c2:23:fd:7d:6d:87:33:c6:b7:11:68:14:ea:
         6d:23:19:0b:6c:59:b1:15:05:8f:fe:c9:a4:f1:9b:93:87:e4:
         5f:a1:b7:6e:56:1b:80:c1:e2:f9:2c:7b:fb:5f:4e:4e:a3:11:
         cc:e2:be:6c:86:19:ce:cf:f6:62:10:84:c7:87:9c:0f:cd:19:
         56:ad:49:0b:00:01:62:f0:3f:20:46:e7:59:2b:99:3a:e2:30:
         e6:84:c8:1c:15:c0:48:cf:fc:47:ce:00:72:43:d5:3d:29:bf:
         7e:d0:fe:38:67:78:86:26:9c:2b:29:26:b5:03:55:f7:d5:7b:
         91:45:df:14:c5:85:58:74:2a:77:43:03:8c:dd:21:6f:bc:17:
         44:0c:fc:63:4b:fd:e2:ff:ae:fe:17:bb:62:81:61:7e:88:77:
         79:47:fc:ec:b9:58:2f:98:58:76:ac:81:21:e4:80:6c:77:c3:
         d2:c2:fe:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwJPKVs/JJuvtbcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk
NTQwZmIzMTktMzUzNi00YzRmLTlkMTMtZTY5OGE1NDYxMmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisCmclbGeELMyNi/ZWXYtxXWlsH7SPB2V1M2
2CVTxt6lzBhBRaEQTeDkTPa4tdtx3zvJx0X3rLRPMjyHfds9cnr5+4byZVMoCOC7
jIUo33jgGYTl8POuuWoJV73eMYkSHb0YaufmV89L03e7Xf175qCqvIKuZzGLpmt/
RielCGccPDyRWgyL9lwJFovnV/ydAZYwtnWfUHmZZ3wi26D0IMmpmV0NY5ezG+wg
dcJA8H1m1j8xqqwNhLnCLtP8Y9tqtynRk6IlMmpc5q5XXjlVoayH+AA9AkhpUhZ1
Y63Y35Uy21iGFmU3F1TAgidvNqQkqMfhfK4KNd6c2F8Xs4EvwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAhnKBz4OB1vypOyrfgLjqvmis0/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDZmNGNkZDYtNzAwMy0z
ZDM2LTg4NjItODgyNTU3MWFiNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8jUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIpoAcc4XZd6CXsQVpTwl0ooM0uPflDIu70VdXt4QBc+wCJviU7++xgX
86N66QiVhRk03WqefoEASQLOq4HmzD7kEy5a6m8FXNI2mrfIwiP9fW2HM8a3EWgU
6m0jGQtsWbEVBY/+yaTxm5OH5F+ht25WG4DB4vkse/tfTk6jEczivmyGGc7P9mIQ
hMeHnA/NGVatSQsAAWLwPyBG51krmTriMOaEyBwVwEjP/EfOAHJD1T0pv37Q/jhn
eIYmnCspJrUDVffVe5FF3xTFhVh0KndDA4zdIW+8F0QM/GNL/eL/rv4Xu2KBYX6I
d3lH/Oy5WC+YWHasgSHkgGx3w9LC/g0=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:29 2025 by rpki-client