Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17bd5656-faa7-3be3-b3cb-dedc4a96bb7f.roa
File:                     17bd5656-faa7-3be3-b3cb-dedc4a96bb7f.roa (raw, json)
Hash identifier:          40+FaIljPYmsiZyQ05IRF4k/ZMtXfzyTIR/8/wagfHM=
Subject key identifier:   DE:D4:BF:93:FA:16:32:8E:1B:81:8D:74:58:4C:E8:71:3B:F3:BA:55
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584B21CC40A125FB06E9BA2C9300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17bd5656-faa7-3be3-b3cb-dedc4a96bb7f.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     202623
IP address blocks:        104.23.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:40:a1:25:fb:06:e9:ba:2c:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=566751ab-daf8-45d0-9d7c-d591fd71b483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fa:2c:89:4e:fe:17:fe:a6:02:7a:b2:f7:ff:
                    5f:e1:9d:1c:ed:76:26:78:09:e8:fa:f0:a4:3c:db:
                    1d:00:0b:74:a5:90:8f:40:da:bf:67:3b:09:16:4b:
                    cb:82:b0:c0:1c:95:8e:cf:35:5f:13:05:a0:14:6b:
                    26:57:47:10:8a:e6:7d:b8:1a:3b:f1:69:5d:a5:11:
                    45:07:20:71:6b:6c:b8:49:5c:d7:5a:20:e4:7b:31:
                    e8:9e:57:71:b7:fc:31:43:77:13:e8:11:05:7f:49:
                    79:cf:ce:ad:01:37:0b:31:d8:d1:02:ab:03:53:e6:
                    c1:ad:35:77:a5:b2:50:dc:29:ac:ec:0a:bd:a1:34:
                    a3:80:8e:d4:7b:6c:88:ec:c4:bb:47:03:45:3c:f1:
                    5a:56:81:87:d1:b9:22:2e:48:ab:40:6d:ad:ad:03:
                    64:48:e5:26:a7:9a:6a:4e:7a:88:4c:9c:12:ed:e7:
                    40:76:91:82:a4:ae:c5:f9:71:be:14:c9:52:34:a8:
                    c1:86:21:50:68:4e:5d:07:1d:22:ee:9f:3c:b8:b0:
                    d4:73:28:f1:f1:86:c0:4a:7d:41:c7:e1:ad:d5:eb:
                    c9:ec:48:77:30:54:2e:e8:95:48:12:09:62:31:20:
                    c5:de:34:6c:ed:00:b8:03:be:08:4a:04:1a:54:93:
                    af:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D4:BF:93:FA:16:32:8E:1B:81:8D:74:58:4C:E8:71:3B:F3:BA:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17bd5656-faa7-3be3-b3cb-dedc4a96bb7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:21:02:d0:01:97:9d:18:f2:3c:3f:56:41:38:f8:31:7b:60:
         29:9b:4c:3d:3e:77:64:9f:26:7e:2e:c8:73:f8:8d:f0:aa:d4:
         8f:c6:de:9c:af:31:5d:36:9e:34:13:bc:1a:e8:f8:12:57:4f:
         f5:63:f1:ba:f3:28:cd:be:15:e9:ae:c5:59:4d:cf:85:66:80:
         b3:2e:2e:4c:e9:47:07:be:ca:6a:f2:96:a3:3a:3b:b2:61:13:
         3b:47:03:5d:d5:d0:0d:9f:f1:15:a1:4e:54:1a:a8:8c:b8:1f:
         aa:4d:4b:ef:30:c7:d8:dd:54:8a:94:71:73:fd:21:93:ae:45:
         08:5f:0e:55:ae:b8:a6:a7:9d:2a:8c:5a:c2:5e:09:f0:1b:12:
         86:4e:e1:1c:35:8c:62:ba:e4:61:65:d8:0a:22:eb:a2:11:5d:
         fd:0d:cf:e2:12:42:cb:4f:ca:b3:9f:48:dd:85:e9:bb:2d:6d:
         21:23:35:c0:73:26:ee:11:5f:ed:7d:d9:c2:d2:0c:3a:b7:b8:
         64:f0:4c:15:9b:e0:6c:3d:71:a5:13:72:24:69:ff:94:22:7e:
         1e:bc:e4:54:c7:3a:22:e5:1a:32:9a:04:0a:60:07:6d:09:a9:
         66:69:82:55:de:b8:a3:f6:9a:a7:b5:8d:b7:c7:32:e0:d0:97:
         55:fc:68:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzEChJfsG6boskwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk
NTY2NzUxYWItZGFmOC00NWQwLTlkN2MtZDU5MWZkNzFiNDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifosiU7+F/6mAnqy9/9f4Z0c7XYmeAno+vCk
PNsdAAt0pZCPQNq/ZzsJFkvLgrDAHJWOzzVfEwWgFGsmV0cQiuZ9uBo78WldpRFF
ByBxa2y4SVzXWiDkezHonldxt/wxQ3cT6BEFf0l5z86tATcLMdjRAqsDU+bBrTV3
pbJQ3Cms7Aq9oTSjgI7Ue2yI7MS7RwNFPPFaVoGH0bkiLkirQG2trQNkSOUmp5pq
TnqITJwS7edAdpGCpK7F+XG+FMlSNKjBhiFQaE5dBx0i7p88uLDUcyjx8YbASn1B
x+Gt1evJ7Eh3MFQu6JVIEgliMSDF3jRs7QC4A74ISgQaVJOvowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN7Uv5P6FjKOG4GNdFhM6HE787pVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTdiZDU2NTYtZmFhNy0z
YmUzLWIzY2ItZGVkYzRhOTZiYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaBcgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQhAtABl50Y8jw/VkE4+DF7YCmbTD0+d2SfJn4uyHP4jfCq1I/G3pyv
MV02njQTvBro+BJXT/Vj8brzKM2+FemuxVlNz4VmgLMuLkzpRwe+ymrylqM6O7Jh
EztHA13V0A2f8RWhTlQaqIy4H6pNS+8wx9jdVIqUcXP9IZOuRQhfDlWuuKannSqM
WsJeCfAbEoZO4Rw1jGK65GFl2Aoi66IRXf0Nz+ISQstPyrOfSN2F6bstbSEjNcBz
Ju4RX+192cLSDDq3uGTwTBWb4Gw9caUTciRp/5Qifh685FTHOiLlGjKaBApgB20J
qWZpglXeuKP2mqe1jbfHMuDQl1X8aFo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:45:16 2025 by rpki-client