Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/774caf84-2a3a-349c-9b30-433aa7b4d77c.roa
File:                     774caf84-2a3a-349c-9b30-433aa7b4d77c.roa (raw, json)
Hash identifier:          gdxlAtG3LlwpEeX/ceOD2W92YvMgPpOOx+bwoTtew/U=
Subject key identifier:   3D:B4:13:4C:CC:DE:93:F0:48:74:49:3F:FD:28:BE:26:8A:47:99:01
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A2D8595AFAC0AB77A8C3673D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/774caf84-2a3a-349c-9b30-433aa7b4d77c.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     16625
IP address blocks:        23.35.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:95:af:ac:0a:b7:7a:8c:36:73:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=67c5b3b2-d887-4188-8c8b-84695d3a1779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9a:9c:55:4e:d3:bc:d0:59:d7:24:e1:11:87:
                    5d:ed:bb:0f:91:df:39:30:76:38:69:34:ef:d6:15:
                    c0:23:35:c9:cf:53:55:5b:f1:68:4b:54:fa:68:d3:
                    d6:4f:6b:f1:de:4e:2b:25:8d:fd:66:10:7f:81:f3:
                    d8:86:fa:93:02:5e:94:72:66:f2:9e:27:7f:5b:7b:
                    67:7c:2e:1c:fe:42:be:9a:72:37:b2:aa:13:49:58:
                    60:96:8a:76:d3:15:cf:1e:d2:21:d0:36:fc:45:57:
                    89:f5:ac:8d:06:d3:13:5b:6e:a7:15:cf:6e:29:d1:
                    fc:4a:d5:cd:49:ee:de:7f:71:72:69:b3:c6:a5:28:
                    50:d9:df:b4:79:27:d8:a3:d6:f9:ec:16:4e:7c:0b:
                    03:98:61:a0:43:87:86:73:37:18:5f:83:e7:ab:03:
                    c9:e6:82:9c:b3:24:ab:25:d4:13:ce:3c:4d:fd:17:
                    1b:1e:18:e3:d5:97:46:b9:c0:1a:7a:b9:c0:58:0b:
                    e0:49:1f:65:b8:50:80:bc:30:66:21:67:35:55:f0:
                    4c:ea:aa:0f:7d:46:02:f6:fb:c9:35:82:85:01:fd:
                    cc:e2:25:39:9f:c3:a3:eb:9a:8a:20:76:60:e4:69:
                    89:9e:cb:d4:29:61:0a:cf:44:4c:f9:b2:f8:5f:ac:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B4:13:4C:CC:DE:93:F0:48:74:49:3F:FD:28:BE:26:8A:47:99:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/774caf84-2a3a-349c-9b30-433aa7b4d77c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.35.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:2a:19:de:53:a7:47:48:22:8d:34:6e:d0:8f:77:bd:4d:94:
         e0:71:71:63:03:23:a6:15:63:b5:ed:dc:20:49:88:d9:e0:cb:
         bc:0e:44:ef:cf:dd:a0:88:03:a5:f8:74:95:e9:0f:4b:57:98:
         0f:82:2d:a0:03:e0:25:5c:fd:a4:7a:33:34:90:e9:35:11:2b:
         6a:81:74:19:04:db:38:54:fb:c8:35:01:99:cc:2f:01:b8:60:
         d6:bd:a6:18:e0:dd:60:d5:77:3d:1c:77:49:3a:b6:03:35:3d:
         e3:e4:ff:99:d0:63:c2:8f:6e:4f:63:59:45:5f:35:f5:d8:22:
         28:31:20:c9:fd:90:6b:2a:ca:35:da:97:c8:02:cd:ae:4c:07:
         c5:cf:98:db:30:fb:63:36:ab:ea:4b:6b:c5:bb:7d:a7:d3:70:
         d6:60:7a:d6:27:24:89:ec:50:29:c3:7b:1b:41:09:3d:9f:04:
         20:ea:b7:f3:df:f6:18:de:05:ae:ef:43:92:d1:ff:67:2a:cd:
         90:77:a7:c4:4e:4f:08:71:ce:c2:e3:d3:2b:df:51:7b:b8:96:
         63:c0:56:fc:5f:3e:47:b1:bc:8e:f5:bb:47:c1:01:c8:2d:61:
         ba:b0:8f:ff:a6:c8:65:4e:0d:fe:1c:07:bb:c7:32:4a:d8:0f:
         5e:41:7b:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothZWvrAq3eow2c9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk
NjdjNWIzYjItZDg4Ny00MTg4LThjOGItODQ2OTVkM2ExNzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pqcVU7TvNBZ1yThEYdd7bsPkd85MHY4aTTv
1hXAIzXJz1NVW/FoS1T6aNPWT2vx3k4rJY39ZhB/gfPYhvqTAl6Ucmbynid/W3tn
fC4c/kK+mnI3sqoTSVhglop20xXPHtIh0Db8RVeJ9ayNBtMTW26nFc9uKdH8StXN
Se7ef3FyabPGpShQ2d+0eSfYo9b57BZOfAsDmGGgQ4eGczcYX4PnqwPJ5oKcsySr
JdQTzjxN/RcbHhjj1ZdGucAaernAWAvgSR9luFCAvDBmIWc1VfBM6qoPfUYC9vvJ
NYKFAf3M4iU5n8Oj65qKIHZg5GmJnsvUKWEKz0RM+bL4X6wvPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD20E0zM3pPwSHRJP/0oviaKR5kBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzc0Y2FmODQtMmEzYS0z
NDljLTliMzAtNDMzYWE3YjRkNzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyMcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGUqGd5Tp0dIIo00btCPd71NlOBxcWMDI6YVY7Xt3CBJiNngy7wORO/P
3aCIA6X4dJXpD0tXmA+CLaAD4CVc/aR6MzSQ6TURK2qBdBkE2zhU+8g1AZnMLwG4
YNa9phjg3WDVdz0cd0k6tgM1PePk/5nQY8KPbk9jWUVfNfXYIigxIMn9kGsqyjXa
l8gCza5MB8XPmNsw+2M2q+pLa8W7fafTcNZgetYnJInsUCnDextBCT2fBCDqt/Pf
9hjeBa7vQ5LR/2cqzZB3p8ROTwhxzsLj0yvfUXu4lmPAVvxfPkexvI71u0fBAcgt
Ybqwj/+myGVODf4cB7vHMkrYD15Be8A=
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:44:23 2025 by rpki-client