Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/01dcd26d-0c3b-3abe-b5bc-ac9c8acd7cbc.roa
File:                     01dcd26d-0c3b-3abe-b5bc-ac9c8acd7cbc.roa (raw, json)
Hash identifier:          +sBCAGCKjNjgdMJEbuZDfzik7G6J54yfpc0KffJtEeA=
Subject key identifier:   42:DF:90:1E:5A:56:16:8E:AA:8F:66:AF:09:1C:2F:2E:CB:35:45:08
Certificate issuer:       /CN=0b51ae6f-ea14-4884-8fd5-2317d0822e42
Certificate serial:       010D0C9F4328584B67FB7E1CF95DD6A51222C120
Authority key identifier: 44:6E:AC:90:D5:3E:D9:7C:66:A9:24:9B:91:5F:34:49:44:32:BE:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/01dcd26d-0c3b-3abe-b5bc-ac9c8acd7cbc.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     20119
IP address blocks:        23.136.80.0/24 maxlen: 24
                          158.51.50.0/24 maxlen: 24
                          158.51.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/0b51ae6f-ea14-4884-8fd5-2317d0822e42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/0b51ae6f-ea14-4884-8fd5-2317d0822e42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:fb:7e:1c:f9:5d:d6:a5:12:22:c1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b51ae6f-ea14-4884-8fd5-2317d0822e42
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=97126284-7a45-47d2-84e7-8faa1ddbe488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:84:08:f3:14:2e:4d:1c:13:41:c1:e5:40:
                    4c:82:22:d7:f7:5e:1e:0c:65:ce:9b:51:c1:7f:23:
                    db:97:cb:f9:19:f0:25:8c:3a:e8:18:5b:f8:2b:0f:
                    9b:d5:b0:89:db:7f:c6:5c:3f:18:04:6d:68:0a:5a:
                    e2:e2:d3:4c:7a:8e:76:cb:ea:df:e5:f9:54:24:84:
                    f4:d1:be:6f:b1:01:90:2e:a4:63:e9:40:be:2e:6a:
                    44:2c:56:b3:a9:8c:82:cf:49:aa:6f:c5:d6:db:b9:
                    b2:d3:6e:3b:f1:50:02:68:1f:95:e4:81:ef:6d:0c:
                    b8:df:19:ad:28:e3:2a:0f:ed:32:c3:63:ce:ed:c5:
                    f8:65:e1:f3:59:41:1e:48:66:db:ee:55:02:0a:70:
                    f5:3f:33:cb:2c:78:c1:b5:4a:03:b3:8d:ae:25:9d:
                    b7:0c:69:59:6e:27:1c:2c:32:9c:cf:82:b9:48:47:
                    d0:6b:5a:69:db:dc:52:ef:fb:8d:18:75:ea:99:0e:
                    da:f6:ec:2d:f6:42:28:84:a7:4a:80:56:4f:e7:c5:
                    b4:80:88:04:fd:7f:fa:5a:c2:84:01:bc:c9:e9:c2:
                    41:c5:dd:14:0a:15:64:ee:37:87:a9:96:f4:ba:04:
                    6e:ea:8d:c8:fd:9f:7f:bd:ac:82:65:8b:4d:7c:3a:
                    7a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DF:90:1E:5A:56:16:8E:AA:8F:66:AF:09:1C:2F:2E:CB:35:45:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/01dcd26d-0c3b-3abe-b5bc-ac9c8acd7cbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/0b51ae6f-ea14-4884-8fd5-2317d0822e42.crl

            X509v3 Authority Key Identifier:
                keyid:44:6E:AC:90:D5:3E:D9:7C:66:A9:24:9B:91:5F:34:49:44:32:BE:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.80.0/24
                  158.51.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:c7:69:41:2c:c6:f1:44:2e:39:ea:a1:7f:9f:e7:1d:ab:23:
         6e:3b:d3:fb:72:b7:9e:67:6f:92:eb:c0:a6:e6:a0:ca:a8:b2:
         83:31:cc:e9:71:61:6d:d3:c0:98:e6:bc:d1:ca:07:55:c2:7e:
         71:50:1b:bd:28:07:5d:f8:00:ad:1b:97:77:4f:8c:1f:83:fb:
         0f:b8:ca:b8:72:4a:b7:81:a2:69:b7:85:02:0c:d2:40:ce:26:
         83:64:80:f5:0a:49:99:d5:d2:dc:ee:e6:84:ae:43:c1:c6:0e:
         74:7e:63:96:e1:1f:89:d0:5b:11:49:7f:af:4c:39:de:c6:e0:
         2a:b7:56:aa:f5:1b:82:45:33:2f:c8:80:22:0a:93:78:b9:b3:
         09:bd:ae:c1:9d:4c:77:8b:c4:03:90:29:e4:fb:39:45:14:54:
         df:4b:6a:bd:9c:60:89:de:da:c3:bc:18:23:df:2f:7e:00:2e:
         7b:b1:de:76:30:98:19:60:92:44:a7:5b:74:ef:f6:47:a8:16:
         61:e8:51:c8:bb:50:38:14:7f:0a:66:0e:6f:00:94:22:5a:0f:
         46:99:b1:e8:42:5a:09:96:85:dc:03:72:1b:d6:b3:f0:76:f9:
         9a:1c:15:5f:3b:9a:12:38:19:aa:d6:13:a8:94:66:a4:a9:e4:
         8a:62:74:2e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtn+34c+V3WpRIiwSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGI1MWFlNmYtZWExNC00ODg0LThmZDUtMjMxN2QwODIy
ZTQyMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk
OTcxMjYyODQtN2E0NS00N2QyLTg0ZTctOGZhYTFkZGJlNDg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreWECPMULk0cE0HB5UBMgiLX914eDGXOm1HB
fyPbl8v5GfAljDroGFv4Kw+b1bCJ23/GXD8YBG1oClri4tNMeo52y+rf5flUJIT0
0b5vsQGQLqRj6UC+LmpELFazqYyCz0mqb8XW27my02478VACaB+V5IHvbQy43xmt
KOMqD+0yw2PO7cX4ZeHzWUEeSGbb7lUCCnD1PzPLLHjBtUoDs42uJZ23DGlZbicc
LDKcz4K5SEfQa1pp29xS7/uNGHXqmQ7a9uwt9kIohKdKgFZP58W0gIgE/X/6WsKE
AbzJ6cJBxd0UChVk7jeHqZb0ugRu6o3I/Z9/vayCZYtNfDp6QQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFELfkB5aVhaOqo9mrwkcLy7LNUUIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYjUx
YWU2Zi1lYTE0LTQ4ODQtOGZkNS0yMzE3ZDA4MjJlNDIvMDFkY2QyNmQtMGMzYi0z
YWJlLWI1YmMtYWM5YzhhY2Q3Y2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGI1MWFlNmYtZWExNC00ODg0LThm
ZDUtMjMxN2QwODIyZTQyLzBiNTFhZTZmLWVhMTQtNDg4NC04ZmQ1LTIzMTdkMDgy
MmU0Mi5jcmwwHwYDVR0jBBgwFoAURG6skNU+2XxmqSSbkV80SUQyvs8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYjUxYWU2Zi1lYTE0LTQ4ODQtOGZkNS0yMzE3
ZDA4MjJlNDIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4hQAwQB
njMyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGfHaUEsxvFELjnqoX+f5x2rI2470/tyt55nb5LrwKbmoMqo
soMxzOlxYW3TwJjmvNHKB1XCfnFQG70oB134AK0bl3dPjB+D+w+4yrhySreBomm3
hQIM0kDOJoNkgPUKSZnV0tzu5oSuQ8HGDnR+Y5bhH4nQWxFJf69MOd7G4Cq3Vqr1
G4JFMy/IgCIKk3i5swm9rsGdTHeLxAOQKeT7OUUUVN9Lar2cYIne2sO8GCPfL34A
Lnux3nYwmBlgkkSnW3Tv9keoFmHoUci7UDgUfwpmDm8AlCJaD0aZsehCWgmWhdwD
chvWs/B2+ZocFV87mhI4GarWE6iUZqSp5IpidC4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:36:30 2025 by rpki-client