Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26083375-69a8-3873-9402-80edc7219605.roa
File:                     26083375-69a8-3873-9402-80edc7219605.roa (raw, json)
Hash identifier:          dsEgj2JCfHW/PnLjIyrYg/rimiBuxrTg+WIVrqKktas=
Subject key identifier:   6F:9A:36:71:AB:63:0D:EB:55:7D:AE:87:A7:C7:02:AE:9A:7C:E4:A0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A8840A706D1A6F9233DCEDB40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26083375-69a8-3873-9402-80edc7219605.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     16625
IP address blocks:        23.218.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:a7:06:d1:a6:f9:23:3d:ce:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=c8e24d05-e4a8-48f1-a9ff-ead7ca81f87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a2:64:36:45:fc:dd:30:a2:47:24:21:e4:50:
                    16:a9:1b:6b:db:a0:22:0f:87:9e:77:0e:1c:65:d4:
                    e0:7f:71:57:1e:6f:27:42:19:cb:ca:79:c8:c3:01:
                    70:4f:0a:0b:33:34:ba:48:44:db:c0:f9:e2:c6:05:
                    0b:ef:17:10:54:bf:07:b0:ec:d1:d6:87:3e:ab:cb:
                    ec:a4:1b:04:97:f0:38:05:15:97:c0:e5:48:22:06:
                    65:e2:a0:6d:11:13:d2:b5:59:95:6b:27:9b:ca:a4:
                    f7:9b:b8:94:96:1e:8b:7a:61:c7:57:61:ac:48:6c:
                    c0:17:f2:6e:78:8e:9e:ae:54:20:8c:8b:35:08:c6:
                    2f:ee:ee:09:ba:22:41:d5:90:f8:98:ff:40:1e:69:
                    6a:7a:6e:78:1a:ad:a6:bc:4e:6b:ea:ac:a2:78:66:
                    37:da:9c:42:e8:c4:97:8a:65:57:c8:27:87:5d:6c:
                    f2:7f:32:d2:df:4a:52:1e:d1:34:0f:22:3e:22:24:
                    8f:18:8e:64:16:e7:e2:32:a5:d8:a3:9c:2a:ff:89:
                    ff:9b:0e:0f:93:53:e8:0d:fd:78:1f:66:19:fb:b3:
                    ad:dd:10:15:f7:8e:df:32:42:6c:d4:be:ca:9b:ff:
                    b4:a2:d6:15:79:a8:f8:f8:08:10:e3:4d:88:25:09:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9A:36:71:AB:63:0D:EB:55:7D:AE:87:A7:C7:02:AE:9A:7C:E4:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26083375-69a8-3873-9402-80edc7219605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.218.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:7b:fd:5a:dd:b5:49:42:52:72:95:2c:46:2e:8a:4d:bc:6b:
         89:e8:27:e0:0c:78:5d:ab:d3:b1:c5:fc:6e:73:42:d3:92:3d:
         07:66:81:b3:a4:49:eb:c4:f7:d2:64:c8:48:39:c9:eb:64:86:
         fd:37:70:85:fa:e0:27:ed:f7:ca:1d:33:80:ad:fe:24:e9:af:
         15:a4:98:ec:96:93:44:a5:81:1c:72:57:59:12:5d:bd:f6:30:
         87:e9:fa:97:88:69:6f:b3:91:f9:70:1d:46:54:0b:f3:a2:73:
         8e:3a:ab:2f:d7:05:4f:f1:30:ab:d5:59:56:19:84:5d:76:48:
         4e:1a:84:b4:00:d9:7b:73:b8:b4:fa:ec:e4:2f:0b:73:9a:83:
         c9:76:00:1f:b3:25:89:1c:e6:fc:07:1f:0d:d6:67:3e:b3:74:
         09:ef:b2:7d:79:6d:f6:4d:38:fe:84:a9:2b:c2:d1:84:a5:bb:
         b0:c4:e1:72:36:43:ff:83:b2:93:05:41:61:c0:32:9b:5d:21:
         70:68:d3:92:9a:ae:14:72:c2:7f:4b:1c:7c:1f:dc:39:60:a7:
         cc:a0:09:b7:0e:f4:29:51:e9:c8:32:d3:47:a9:97:85:96:eb:
         8d:42:4c:f9:9e:16:2f:3e:30:a0:c7:b1:9f:da:ee:93:46:9b:
         bb:ed:61:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKcG0ab5Iz3O20AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk
YzhlMjRkMDUtZTRhOC00OGYxLWE5ZmYtZWFkN2NhODFmODdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaJkNkX83TCiRyQh5FAWqRtr26AiD4eedw4c
ZdTgf3FXHm8nQhnLynnIwwFwTwoLMzS6SETbwPnixgUL7xcQVL8HsOzR1oc+q8vs
pBsEl/A4BRWXwOVIIgZl4qBtERPStVmVayebyqT3m7iUlh6LemHHV2GsSGzAF/Ju
eI6erlQgjIs1CMYv7u4JuiJB1ZD4mP9AHmlqem54Gq2mvE5r6qyieGY32pxC6MSX
imVXyCeHXWzyfzLS30pSHtE0DyI+IiSPGI5kFufiMqXYo5wq/4n/mw4Pk1PoDf14
H2YZ+7Ot3RAV947fMkJs1L7Km/+0otYVeaj4+AgQ402IJQn30QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG+aNnGrYw3rVX2uh6fHAq6afOSgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjYwODMzNzUtNjlhOC0z
ODczLTk0MDItODBlZGM3MjE5NjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9pkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABV7/VrdtUlCUnKVLEYuik28a4noJ+AMeF2r07HF/G5zQtOSPQdmgbOk
SevE99JkyEg5yetkhv03cIX64Cft98odM4Ct/iTprxWkmOyWk0SlgRxyV1kSXb32
MIfp+peIaW+zkflwHUZUC/Oic446qy/XBU/xMKvVWVYZhF12SE4ahLQA2XtzuLT6
7OQvC3Oag8l2AB+zJYkc5vwHHw3WZz6zdAnvsn15bfZNOP6EqSvC0YSlu7DE4XI2
Q/+DspMFQWHAMptdIXBo05KarhRywn9LHHwf3Dlgp8ygCbcO9ClR6cgy00epl4WW
641CTPmeFi8+MKDHsZ/a7pNGm7vtYeI=
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:38 2025 by rpki-client