Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d8ccfb37-acaf-3a9f-a148-3907f08f4dac.roa
File:                     d8ccfb37-acaf-3a9f-a148-3907f08f4dac.roa (raw, json)
Hash identifier:          ubbaN00MEQSaH857Ckh8enWRpMlNCBPJV3ttg2Cpug0=
Subject key identifier:   6A:D1:A4:BF:7D:80:D4:7B:C5:8D:68:47:A6:CF:10:A9:77:3E:E4:AA
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584A8B0B58F976A753A18F0978E0
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d8ccfb37-acaf-3a9f-a148-3907f08f4dac.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     206216
IP address blocks:        23.137.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:58:f9:76:a7:53:a1:8f:09:78:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=04b1f02a-d941-4291-b9c4-c8805a997fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:29:e2:c3:e9:16:80:1f:29:4a:61:ae:00:f6:
                    7d:ee:a3:74:78:1c:20:ca:42:b8:bb:b9:13:d4:ee:
                    f0:1e:37:e8:ea:a5:7a:ab:7a:19:bf:7d:17:c3:71:
                    ed:8b:7c:b6:ae:59:a2:22:8e:09:c8:44:11:a8:70:
                    65:0a:5a:aa:4b:72:ab:e0:c7:fd:96:ab:03:6a:fb:
                    16:11:43:50:b7:32:d4:f0:71:c1:ca:d3:8c:aa:40:
                    8a:20:8a:53:4a:0c:d7:3a:a7:4e:a3:74:f1:db:7a:
                    84:5f:3b:b8:ad:3c:b9:6b:f0:45:dc:8c:16:21:a3:
                    42:01:82:2a:b0:19:be:bd:36:f5:55:2b:22:44:85:
                    9e:e6:89:0d:cd:04:43:7c:c8:ef:2b:95:97:17:c8:
                    78:aa:9f:7c:33:5c:c2:6d:68:87:30:23:94:51:54:
                    03:98:49:6c:83:bd:c6:cb:28:e4:6e:eb:02:ff:24:
                    0c:c6:11:7a:35:12:05:cb:73:86:15:96:8e:bd:62:
                    57:91:ed:07:0d:7c:5d:d1:ca:94:3f:7a:84:d8:0f:
                    a6:b3:b7:11:42:00:f5:bc:82:07:c5:24:a5:ae:c8:
                    c1:1e:19:06:02:fa:7a:c9:56:a6:8c:89:bb:43:70:
                    4b:c4:81:62:11:8f:69:3c:f7:57:53:b6:52:97:ee:
                    7f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D1:A4:BF:7D:80:D4:7B:C5:8D:68:47:A6:CF:10:A9:77:3E:E4:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d8ccfb37-acaf-3a9f-a148-3907f08f4dac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:28:2d:13:5c:fb:81:ba:85:d2:8c:8b:91:54:01:0d:bb:78:
         cd:ac:e5:ad:6a:3c:95:54:a6:ca:49:18:74:0c:1f:69:fd:19:
         b9:8e:14:ad:a8:60:b8:91:28:42:08:73:f0:6c:e5:06:9f:27:
         2e:ff:79:eb:d1:98:be:81:0d:e2:25:49:89:63:8e:f2:58:f0:
         9c:3c:2e:fa:36:b4:cf:cc:ae:76:bd:31:3d:d9:f7:2d:42:c9:
         26:a7:94:b3:98:ee:db:a7:1d:9a:cd:79:59:43:98:3a:42:5b:
         79:2c:9c:1b:d1:00:83:3f:66:01:47:4e:5f:2d:00:e7:ec:ce:
         98:4c:b3:bc:d6:20:cc:f5:81:a5:4a:bd:4d:ab:74:a0:32:75:
         38:9f:b5:46:b9:0d:45:cb:62:b0:c9:75:14:69:a9:76:94:4c:
         80:5c:ca:dd:36:0b:3b:63:7f:a8:bc:53:61:5e:b0:9d:ff:15:
         ee:fb:63:cf:e6:52:67:d4:89:7c:76:93:3b:93:76:35:55:d7:
         fb:17:03:c0:5e:f1:e7:53:70:74:d4:0c:81:5b:d3:05:e5:87:
         d9:f6:37:5e:9f:32:d2:58:8f:3c:5d:92:86:b8:87:32:46:24:
         f6:87:65:4c:fc:49:e5:e1:59:c6:7a:73:27:53:e3:5d:3e:ff:
         76:14:bf:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1j5dqdToY8JeOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc3OThhYmItNzExZC00ZjEwLWJjNDYtYmNlZWQwNTVl
MWZhMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk
MDRiMWYwMmEtZDk0MS00MjkxLWI5YzQtYzg4MDVhOTk3ZmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Cniw+kWgB8pSmGuAPZ97qN0eBwgykK4u7kT
1O7wHjfo6qV6q3oZv30Xw3Hti3y2rlmiIo4JyEQRqHBlClqqS3Kr4Mf9lqsDavsW
EUNQtzLU8HHBytOMqkCKIIpTSgzXOqdOo3Tx23qEXzu4rTy5a/BF3IwWIaNCAYIq
sBm+vTb1VSsiRIWe5okNzQRDfMjvK5WXF8h4qp98M1zCbWiHMCOUUVQDmElsg73G
yyjkbusC/yQMxhF6NRIFy3OGFZaOvWJXke0HDXxd0cqUP3qE2A+ms7cRQgD1vIIH
xSSlrsjBHhkGAvp6yVamjIm7Q3BLxIFiEY9pPPdXU7ZSl+5/MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGrRpL99gNR7xY1oR6bPEKl3PuSqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5
OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2VlZDA1NWUxZmEvZDhjY2ZiMzctYWNhZi0z
YTlmLWExNDgtMzkwN2YwOGY0ZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc3OThhYmItNzExZC00ZjEwLWJj
NDYtYmNlZWQwNTVlMWZhL2Y3Nzk4YWJiLTcxMWQtNGYxMC1iYzQ2LWJjZWVkMDU1
ZTFmYS5jcmwwHwYDVR0jBBgwFoAUzJA916o5BeznNQisy0X0bmW8HeEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2Vl
ZDA1NWUxZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4loMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACAoLRNc+4G6hdKMi5FUAQ27eM2s5a1qPJVUpspJGHQMH2n9GbmOFK2o
YLiRKEIIc/Bs5QafJy7/eevRmL6BDeIlSYljjvJY8Jw8Lvo2tM/Mrna9MT3Z9y1C
ySanlLOY7tunHZrNeVlDmDpCW3ksnBvRAIM/ZgFHTl8tAOfszphMs7zWIMz1gaVK
vU2rdKAydTiftUa5DUXLYrDJdRRpqXaUTIBcyt02Cztjf6i8U2FesJ3/Fe77Y8/m
UmfUiXx2kzuTdjVV1/sXA8Be8edTcHTUDIFb0wXlh9n2N16fMtJYjzxdkoa4hzJG
JPaHZUz8SeXhWcZ6cydT410+/3YUv7E=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:49:12 2025 by rpki-client