Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b57c5fe9-e985-38b2-9cc2-c4dfc07bcf89.roa
File:                     b57c5fe9-e985-38b2-9cc2-c4dfc07bcf89.roa (raw, json)
Hash identifier:          CHwUWHcFW6GKYrPjbhsDketU1poiRhpXYdZXdKUXK24=
Subject key identifier:   07:80:5F:3F:D8:13:42:55:9B:51:AB:3C:F0:C1:9F:EB:16:5F:F3:40
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584A96368920F6F090AC13681E00
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b57c5fe9-e985-38b2-9cc2-c4dfc07bcf89.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     31898
IP address blocks:        23.239.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:89:20:f6:f0:90:ac:13:68:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=de66b599-7697-4535-b845-20517c89d0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:a0:a7:15:c5:ed:7e:81:2e:1c:8e:d6:c9:
                    4d:3c:bf:2f:99:0b:c4:47:20:fb:5d:d1:8a:df:63:
                    a3:82:a9:84:38:4f:35:fc:05:12:18:60:47:81:c7:
                    60:cc:85:c2:5c:34:98:65:a7:5f:88:d0:4d:51:7a:
                    32:88:8b:c6:9c:e4:7e:9c:45:3a:cb:da:c8:d1:6a:
                    68:fa:e1:e2:ec:e6:44:3b:99:40:08:83:91:59:41:
                    b0:b6:85:85:85:fc:0a:92:23:5e:37:6a:49:43:91:
                    e3:4f:b8:c6:98:dd:3b:f5:0f:bd:2c:71:e0:35:e5:
                    9c:f0:c4:59:82:7f:20:4b:42:a6:ea:cb:db:db:f1:
                    33:18:28:3f:97:8d:26:73:df:6d:e5:d5:fa:6c:89:
                    27:12:c2:81:f6:7a:2f:dd:2c:81:1e:aa:67:aa:0a:
                    dd:37:18:ee:b0:99:51:4c:ba:88:d1:2d:01:c6:cf:
                    31:0b:13:94:57:25:6f:3a:ab:13:67:3e:ac:4d:f1:
                    7a:70:63:84:16:54:47:f7:b7:dd:28:4f:75:3f:a3:
                    f0:4d:70:4d:89:0a:34:69:fd:72:5f:e4:bc:73:f1:
                    61:bc:bf:34:1f:d9:76:10:a5:f8:46:e5:88:0f:ae:
                    5a:8b:c3:03:45:e4:8f:fe:37:68:d3:a8:cf:7e:f1:
                    36:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:80:5F:3F:D8:13:42:55:9B:51:AB:3C:F0:C1:9F:EB:16:5F:F3:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b57c5fe9-e985-38b2-9cc2-c4dfc07bcf89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:8a:52:64:b2:86:4c:82:01:e4:dc:0c:73:3f:70:b7:1b:e8:
         e6:0e:c7:7c:3f:88:c0:8f:b1:42:c5:82:f2:ee:26:22:d2:8a:
         f5:0c:88:0f:e5:80:c0:bc:13:a3:e9:50:8a:83:ae:53:a9:ee:
         bf:a0:4d:6b:29:ae:b1:94:a3:ce:73:4f:e4:1e:d0:b7:e1:10:
         f4:40:31:a6:03:4a:b7:4a:39:2a:12:a9:9d:99:df:45:6f:b0:
         57:18:d4:1a:8e:de:fe:ee:c3:02:eb:a5:a1:3c:a0:b7:7a:87:
         a0:f5:22:88:c0:ae:29:a6:af:75:15:c6:01:bf:59:c7:33:c2:
         9d:1e:aa:ab:3a:49:d3:25:69:7d:e5:11:d0:77:ca:20:82:18:
         1e:f3:c4:fb:42:19:01:0c:d3:b0:74:f2:73:2d:10:84:17:ca:
         d0:9c:56:68:ff:aa:39:da:46:79:2e:9b:1e:ca:a2:1a:b0:0a:
         cb:f2:da:9a:d1:87:e4:74:32:50:2a:e9:bd:01:a6:e5:23:79:
         4c:8c:50:0e:45:62:83:88:ea:c7:82:5b:59:e9:e8:69:8d:34:
         c8:3d:81:25:fc:cf:43:a9:e7:48:5a:48:5e:30:0e:b7:28:7d:
         c9:30:d4:7e:0c:52:9b:e4:20:1e:c7:b7:97:59:8f:e9:7f:60:
         d9:19:4e:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNokg9vCQrBNoHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
ZGU2NmI1OTktNzY5Ny00NTM1LWI4NDUtMjA1MTdjODlkMGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lSgpxXF7X6BLhyO1slNPL8vmQvERyD7XdGK
32OjgqmEOE81/AUSGGBHgcdgzIXCXDSYZadfiNBNUXoyiIvGnOR+nEU6y9rI0Wpo
+uHi7OZEO5lACIORWUGwtoWFhfwKkiNeN2pJQ5HjT7jGmN079Q+9LHHgNeWc8MRZ
gn8gS0Km6svb2/EzGCg/l40mc99t5dX6bIknEsKB9nov3SyBHqpnqgrdNxjusJlR
TLqI0S0Bxs8xCxOUVyVvOqsTZz6sTfF6cGOEFlRH97fdKE91P6PwTXBNiQo0af1y
X+S8c/FhvL80H9l2EKX4RuWID65ai8MDReSP/jdo06jPfvE25QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAeAXz/YE0JVm1GrPPDBn+sWX/NAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYjU3YzVmZTktZTk4NS0z
OGIyLTljYzItYzRkZmMwN2JjZjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+/4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmKUmSyhkyCAeTcDHM/cLcb6OYOx3w/iMCPsULFgvLuJiLSivUMiA/l
gMC8E6PpUIqDrlOp7r+gTWsprrGUo85zT+Qe0LfhEPRAMaYDSrdKOSoSqZ2Z30Vv
sFcY1BqO3v7uwwLrpaE8oLd6h6D1IojArimmr3UVxgG/Wcczwp0eqqs6SdMlaX3l
EdB3yiCCGB7zxPtCGQEM07B08nMtEIQXytCcVmj/qjnaRnkumx7KohqwCsvy2prR
h+R0MlAq6b0BpuUjeUyMUA5FYoOI6seCW1np6GmNNMg9gSX8z0Op50haSF4wDrco
fckw1H4MUpvkIB7Ht5dZj+l/YNkZTuU=
-----END CERTIFICATE-----
Generated at Thu Aug 7 14:50:52 2025 by rpki-client