Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3/6393b7de-2149-30bb-b162-23e39513efb6.roa
File:                     6393b7de-2149-30bb-b162-23e39513efb6.roa (raw, json)
Hash identifier:          /vsYV06EttLC/v4Tg5NxgCoTB3sbL/v9g7oVuHistoc=
Subject key identifier:   77:71:3E:88:CA:3D:94:C8:E0:9F:D0:E8:BC:D8:8D:14:54:10:FD:2C
Certificate issuer:       /CN=192bda67-8a07-4f68-a34a-58d60df5acf3
Certificate serial:       010D0C9F4328584A549B165F7023B1C4A0C35140
Authority key identifier: 6F:14:E7:07:8F:D3:2C:59:54:04:72:AF:80:B7:65:28:B1:C1:E2:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3/6393b7de-2149-30bb-b162-23e39513efb6.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     63023
IP address blocks:        23.137.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3/192bda67-8a07-4f68-a34a-58d60df5acf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3/192bda67-8a07-4f68-a34a-58d60df5acf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:16:5f:70:23:b1:c4:a0:c3:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192bda67-8a07-4f68-a34a-58d60df5acf3
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=50aed6b7-3f4e-486b-a857-f8b1c57e7b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2a:58:bb:66:b2:b1:c1:dc:bd:45:b7:10:9a:
                    44:ae:32:41:5b:0e:04:f0:42:80:3c:cc:03:29:b4:
                    26:d2:ed:e3:85:d1:e0:16:dd:08:31:c4:bd:47:5d:
                    ad:f0:6f:c5:b4:4d:32:99:a7:9f:55:31:ac:e2:7c:
                    9e:a8:72:7d:2d:ca:63:82:ca:a1:23:17:30:73:61:
                    bc:a7:37:2c:8c:31:b7:8c:68:46:11:cf:27:1a:33:
                    d3:43:27:28:21:ca:4d:a5:12:f1:bf:37:7b:e1:2f:
                    10:45:b2:0d:10:94:74:40:f1:5a:79:90:64:6d:ca:
                    92:bf:16:5f:7d:87:70:d1:12:68:ca:4c:05:6e:31:
                    01:e8:4a:20:40:37:31:2b:f0:20:52:1e:1b:57:dd:
                    96:1c:b2:77:93:2b:ab:25:ec:50:76:8c:7c:01:27:
                    af:f5:82:e9:91:a8:de:5f:eb:ff:80:2c:b2:f5:bd:
                    9e:7a:75:46:95:93:63:40:ad:59:4b:f4:4f:6d:11:
                    70:9f:4e:b2:89:6d:48:3f:c9:3b:e7:69:3f:f1:ce:
                    fa:2d:40:8b:b5:98:c0:9f:d4:43:b0:d2:5b:53:71:
                    02:f7:53:a7:cd:d6:44:07:db:73:46:a8:35:33:12:
                    98:7e:f3:9e:f8:43:e4:de:03:21:f3:fb:9a:78:5d:
                    8d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:71:3E:88:CA:3D:94:C8:E0:9F:D0:E8:BC:D8:8D:14:54:10:FD:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3/6393b7de-2149-30bb-b162-23e39513efb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3/192bda67-8a07-4f68-a34a-58d60df5acf3.crl

            X509v3 Authority Key Identifier:
                keyid:6F:14:E7:07:8F:D3:2C:59:54:04:72:AF:80:B7:65:28:B1:C1:E2:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/192bda67-8a07-4f68-a34a-58d60df5acf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:ad:37:65:93:c0:d6:2e:1b:46:d9:5d:c7:9b:8b:c2:42:bc:
         04:24:0e:84:fb:5e:6b:0c:ae:4b:45:d7:c8:e0:0d:4a:0b:85:
         d8:bf:7e:dc:0e:25:c0:e3:98:23:a3:09:9e:31:95:c5:c9:65:
         af:eb:4c:fd:62:af:a0:82:59:5a:78:dc:93:41:cd:e0:e1:d9:
         31:37:2e:78:2e:74:97:25:83:e0:0e:2b:98:81:29:bb:b3:61:
         40:9c:15:35:ab:1d:c2:1b:0b:64:51:ca:df:4a:7f:81:57:ee:
         79:fb:38:94:3d:c4:15:86:2a:31:b2:82:99:2a:c9:c1:b2:1a:
         e4:4d:1a:89:ac:e3:d7:f0:b9:4a:ae:f4:a4:fc:98:33:93:17:
         8c:f5:11:09:cf:13:a7:01:2b:e4:a5:d0:fd:8d:b1:e5:37:79:
         6c:f2:9b:b9:43:82:89:af:7b:36:df:73:d1:e3:87:60:32:3d:
         c2:4c:8a:bb:4f:70:c8:43:be:d4:3e:64:e1:c7:45:6a:d7:03:
         88:9f:fb:8b:a7:08:db:5e:b0:79:dc:fe:7a:7a:e8:1a:7b:7b:
         2e:d4:8a:39:56:95:1d:75:7f:2b:3f:c2:21:72:c0:1b:3c:59:
         ce:e8:ff:c1:f5:86:64:6a:12:98:2d:34:71:51:ea:2e:76:fe:
         82:55:4c:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmxZfcCOxxKDDUUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTkyYmRhNjctOGEwNy00ZjY4LWEzNGEtNThkNjBkZjVh
Y2YzMB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk
NTBhZWQ2YjctM2Y0ZS00ODZiLWE4NTctZjhiMWM1N2U3Yjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCpYu2ayscHcvUW3EJpErjJBWw4E8EKAPMwD
KbQm0u3jhdHgFt0IMcS9R12t8G/FtE0ymaefVTGs4nyeqHJ9LcpjgsqhIxcwc2G8
pzcsjDG3jGhGEc8nGjPTQycoIcpNpRLxvzd74S8QRbINEJR0QPFaeZBkbcqSvxZf
fYdw0RJoykwFbjEB6EogQDcxK/AgUh4bV92WHLJ3kyurJexQdox8ASev9YLpkaje
X+v/gCyy9b2eenVGlZNjQK1ZS/RPbRFwn06yiW1IP8k752k/8c76LUCLtZjAn9RD
sNJbU3EC91OnzdZEB9tzRqg1MxKYfvOe+EPk3gMh8/uaeF2NVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHdxPojKPZTI4J/Q6LzYjRRUEP0sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xOTJi
ZGE2Ny04YTA3LTRmNjgtYTM0YS01OGQ2MGRmNWFjZjMvNjM5M2I3ZGUtMjE0OS0z
MGJiLWIxNjItMjNlMzk1MTNlZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTkyYmRhNjctOGEwNy00ZjY4LWEz
NGEtNThkNjBkZjVhY2YzLzE5MmJkYTY3LThhMDctNGY2OC1hMzRhLTU4ZDYwZGY1
YWNmMy5jcmwwHwYDVR0jBBgwFoAUbxTnB4/TLFlUBHKvgLdlKLHB4v0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xOTJiZGE2Ny04YTA3LTRmNjgtYTM0YS01OGQ2
MGRmNWFjZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4kcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKitN2WTwNYuG0bZXcebi8JCvAQkDoT7XmsMrktF18jgDUoLhdi/ftwO
JcDjmCOjCZ4xlcXJZa/rTP1ir6CCWVp43JNBzeDh2TE3LngudJclg+AOK5iBKbuz
YUCcFTWrHcIbC2RRyt9Kf4FX7nn7OJQ9xBWGKjGygpkqycGyGuRNGoms49fwuUqu
9KT8mDOTF4z1EQnPE6cBK+Sl0P2NseU3eWzym7lDgomvezbfc9Hjh2AyPcJMirtP
cMhDvtQ+ZOHHRWrXA4if+4unCNtesHnc/np66Bp7ey7UijlWlR11fys/wiFywBs8
Wc7o/8H1hmRqEpgtNHFR6i52/oJVTJ8=
-----END CERTIFICATE-----
Generated at Mon Jun 30 17:54:08 2025 by rpki-client