Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da243638-8638-3d22-af08-b9bce391e3d2.roa
File:                     da243638-8638-3d22-af08-b9bce391e3d2.roa (raw, json)
Hash identifier:          W5PJppeKSeRA+Kbj47oqih+hS/CK8OewSo0xJRD8Hi0=
Subject key identifier:   4D:F2:D4:E3:14:24:47:29:63:13:D1:C4:7B:0B:4F:F4:84:E8:25:ED
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A66C0947B12F1049665A9F800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da243638-8638-3d22-af08-b9bce391e3d2.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     9498
IP address blocks:        23.201.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:94:7b:12:f1:04:96:65:a9:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=a34491f5-64be-41c1-aa99-1e2130d0ee76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:f5:39:aa:84:c1:b8:76:77:74:d4:2b:e8:
                    e0:ae:f4:36:0b:f7:c7:3e:4b:9b:c7:18:9a:6d:55:
                    9d:ca:df:2a:37:32:4a:8a:31:b9:9d:bd:b1:1b:10:
                    f6:12:c5:37:86:49:38:09:0c:1d:86:69:6b:ea:2a:
                    9f:f1:db:ef:75:a8:88:66:25:0b:85:4d:40:51:64:
                    f0:80:9b:d8:f2:2a:99:cf:00:d6:d0:ae:96:7d:45:
                    d1:0d:13:14:69:b5:4b:e8:fb:3c:0e:42:e8:22:b9:
                    50:b1:8b:34:eb:63:a4:66:4c:e2:c1:f5:36:5b:60:
                    ff:49:5d:6e:fc:fa:1a:3d:1f:65:e2:a5:5f:a1:61:
                    fc:72:fa:de:3b:1f:58:97:44:dd:7e:fc:4e:e6:9a:
                    52:93:27:86:90:80:9e:fe:c5:30:be:e5:d7:d4:6b:
                    f6:17:93:f7:3a:5e:dc:62:85:a8:fd:a2:c1:fe:e0:
                    ca:1f:f1:db:1c:34:07:5c:00:b3:0c:32:b8:27:13:
                    db:80:43:77:c0:6f:1f:b6:94:e6:08:54:50:c1:6e:
                    3f:2d:c1:32:0e:b6:62:d4:b9:2f:59:f2:db:a1:cc:
                    8e:2d:af:06:3f:ad:43:6a:3c:24:90:15:29:3e:46:
                    a6:89:db:50:7f:45:81:42:a5:c4:49:a1:5f:28:24:
                    43:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F2:D4:E3:14:24:47:29:63:13:D1:C4:7B:0B:4F:F4:84:E8:25:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da243638-8638-3d22-af08-b9bce391e3d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.201.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:24:ca:0f:c3:e3:42:c3:58:37:e0:2c:6d:4d:bc:5e:e0:eb:
         30:f2:ca:1f:dd:a5:fb:46:66:c3:93:cd:f2:f1:f3:fd:e9:61:
         a1:9a:a3:a3:9a:40:d4:e3:3b:d2:26:ba:44:2e:92:1f:ec:63:
         e9:7a:ed:3f:d0:21:4d:e0:05:4b:a7:d5:09:62:52:51:f8:83:
         22:b6:3a:3c:b3:5d:c7:08:84:30:0c:53:89:f6:0a:bb:7b:6f:
         a5:cc:8a:3a:73:bb:08:7f:d9:51:f4:8c:26:57:5d:b8:1a:e4:
         dd:a0:72:bd:2c:97:6e:c2:b9:7f:0c:57:45:c7:a7:6a:a1:ea:
         23:0a:0c:2d:78:3e:cf:31:a6:83:31:5d:d2:47:ff:24:27:f8:
         4d:f2:e8:db:58:47:3c:77:4b:ac:34:46:88:90:79:90:49:b2:
         fa:fd:52:0c:5d:d8:e1:11:05:a1:ac:d7:b5:33:48:f8:51:eb:
         ee:59:27:03:fd:0e:8f:0e:4c:fd:5b:d1:35:ed:c6:d0:d9:20:
         28:14:d2:8e:4c:ca:1d:86:03:c4:cd:e1:25:3c:9e:77:ef:3f:
         d0:c7:ec:72:14:51:f4:54:3c:b5:14:fb:1d:4f:bf:7e:6c:c7:
         d2:07:83:63:9f:08:f2:8a:94:89:7f:d4:3d:34:fb:ca:7a:b4:
         fe:11:63:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwJR7EvEElmWp+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk
YTM0NDkxZjUtNjRiZS00MWMxLWFhOTktMWUyMTMwZDBlZTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZD1OaqEwbh2d3TUK+jgrvQ2C/fHPkubxxia
bVWdyt8qNzJKijG5nb2xGxD2EsU3hkk4CQwdhmlr6iqf8dvvdaiIZiULhU1AUWTw
gJvY8iqZzwDW0K6WfUXRDRMUabVL6Ps8DkLoIrlQsYs062OkZkziwfU2W2D/SV1u
/PoaPR9l4qVfoWH8cvreOx9Yl0TdfvxO5ppSkyeGkICe/sUwvuXX1Gv2F5P3Ol7c
YoWo/aLB/uDKH/HbHDQHXACzDDK4JxPbgEN3wG8ftpTmCFRQwW4/LcEyDrZi1Lkv
WfLbocyOLa8GP61DajwkkBUpPkamidtQf0WBQqXESaFfKCRDYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE3y1OMUJEcpYxPRxHsLT/SE6CXtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGEyNDM2MzgtODYzOC0z
ZDIyLWFmMDgtYjliY2UzOTFlM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8k3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA8kyg/D40LDWDfgLG1NvF7g6zDyyh/dpftGZsOTzfLx8/3pYaGao6Oa
QNTjO9ImukQukh/sY+l67T/QIU3gBUun1QliUlH4gyK2OjyzXccIhDAMU4n2Crt7
b6XMijpzuwh/2VH0jCZXXbga5N2gcr0sl27CuX8MV0XHp2qh6iMKDC14Ps8xpoMx
XdJH/yQn+E3y6NtYRzx3S6w0RoiQeZBJsvr9Ugxd2OERBaGs17UzSPhR6+5ZJwP9
Do8OTP1b0TXtxtDZICgU0o5Myh2GA8TN4SU8nnfvP9DH7HIUUfRUPLUU+x1Pv35s
x9IHg2OfCPKKlIl/1D00+8p6tP4RY6k=
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:08:48 2025 by rpki-client