Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b9f58910-7a6a-3513-a211-eee2edda1654.roa
File:                     b9f58910-7a6a-3513-a211-eee2edda1654.roa (raw, json)
Hash identifier:          KV1WQD+bY1gSnzE4PiwieSe1rPxSh2C7kklzKFNDIM0=
Subject key identifier:   B9:FE:5E:F4:9E:49:9C:F6:CF:0B:3F:A2:64:61:F9:53:E6:5C:42:B7
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584B8D47802F639F457BCFDCBD00
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b9f58910-7a6a-3513-a211-eee2edda1654.roa
Signing time:             Fri 17 Oct 2025 13:00:39 +0000
ROA not before:           Fri 17 Oct 2025 13:00:39 +0000
ROA not after:            Thu 15 Jan 2026 14:00:39 +0000
asID:                     62610
IP address blocks:        23.251.47.0/24 maxlen: 24
                          23.251.48.0/24 maxlen: 24
                          23.251.49.0/24 maxlen: 24
                          23.251.50.0/24 maxlen: 24
                          23.251.51.0/24 maxlen: 24
                          23.251.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:47:80:2f:63:9f:45:7b:cf:dc:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Oct 17 13:00:39 2025 GMT
            Not After : Jan 15 14:00:39 2026 GMT
        Subject: CN=75580edb-6852-4a6e-b78d-764010453071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:83:5e:f3:4c:6b:33:ea:b6:b7:bd:4c:f7:12:
                    40:af:04:a6:0b:69:cf:ff:1b:8d:26:d0:82:6b:60:
                    e8:86:b8:5b:30:d6:fc:d1:fa:c5:d8:29:86:58:7a:
                    c0:27:53:93:81:69:f9:88:cf:7c:bc:06:cd:c0:c0:
                    33:26:5d:c8:2f:72:4d:c9:9e:7e:5d:68:73:89:d8:
                    80:79:07:5d:22:ef:de:30:84:ff:9d:50:e1:22:9c:
                    78:3e:db:0d:ff:99:a1:d1:77:cc:13:c2:96:ce:6e:
                    26:74:36:64:a2:21:ee:a9:c4:94:a8:fc:dd:c8:ff:
                    63:24:c5:1c:64:45:4a:92:66:84:30:e3:0f:0c:dc:
                    40:68:81:99:2b:2f:3a:1a:41:a3:ec:44:09:55:16:
                    6c:3e:9a:cc:93:18:75:db:78:11:73:65:a2:6f:cc:
                    f8:26:94:fe:87:c7:4e:9a:96:4a:63:08:ca:a9:0f:
                    02:2c:8a:82:2e:4e:e1:d7:72:57:da:20:77:fa:7f:
                    21:41:2c:10:e4:5e:fa:97:5b:ed:6b:93:75:c7:17:
                    9c:2e:a7:c1:c5:16:12:17:64:ad:aa:91:37:6c:51:
                    75:e4:b8:27:5c:e1:d4:86:42:f8:47:c3:72:06:e2:
                    d5:fa:e0:d0:93:d3:03:c0:30:fa:c1:b4:b3:eb:5d:
                    2d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FE:5E:F4:9E:49:9C:F6:CF:0B:3F:A2:64:61:F9:53:E6:5C:42:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b9f58910-7a6a-3513-a211-eee2edda1654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.47.0-23.251.52.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:97:39:35:b2:71:74:e6:6d:5c:e3:1d:8e:7b:dd:97:b9:f6:
         96:f8:5a:88:e0:09:c5:c5:e3:76:d5:0c:27:fc:b7:2d:21:50:
         50:69:34:46:1a:78:8c:1c:b8:99:bd:4e:9e:79:1d:95:2b:91:
         5e:ec:f0:c5:eb:46:2c:ce:08:c1:72:b7:1b:40:31:d2:32:f0:
         83:f3:51:0f:17:df:05:67:2d:0a:bd:41:a3:d5:e5:17:f1:ed:
         76:a3:81:38:cf:a0:89:1e:a9:e8:c5:0c:ba:04:24:41:2d:49:
         f3:6d:9c:c1:6e:82:ab:35:79:20:73:14:68:92:64:c3:b7:bc:
         7a:cc:b3:d3:c9:ed:3c:a1:d1:04:96:bc:5e:90:93:dd:52:ad:
         a8:a6:1e:d9:2a:16:83:30:07:c3:bd:1f:83:d8:d8:be:3f:ad:
         0f:cf:9c:11:ad:78:c6:a1:97:43:96:18:37:c2:ce:e9:07:30:
         c3:d2:36:0a:2b:46:e2:5e:d9:da:41:2c:97:0f:74:ed:34:db:
         4d:5d:4c:7b:7c:f8:6d:26:65:bc:6e:e8:5c:81:e7:63:5a:1b:
         c4:51:58:8a:37:dc:8f:13:2d:fc:a5:04:8c:a6:31:2e:41:04:
         59:5b:85:a6:d0:d1:17:6f:e8:1f:97:f9:27:cf:0d:f0:27:0d:
         c9:fe:d2:77
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuNR4AvY59Fe8/cvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk
NzU1ODBlZGItNjg1Mi00YTZlLWI3OGQtNzY0MDEwNDUzMDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoNe80xrM+q2t71M9xJArwSmC2nP/xuNJtCC
a2DohrhbMNb80frF2CmGWHrAJ1OTgWn5iM98vAbNwMAzJl3IL3JNyZ5+XWhzidiA
eQddIu/eMIT/nVDhIpx4PtsN/5mh0XfME8KWzm4mdDZkoiHuqcSUqPzdyP9jJMUc
ZEVKkmaEMOMPDNxAaIGZKy86GkGj7EQJVRZsPprMkxh123gRc2Wib8z4JpT+h8dO
mpZKYwjKqQ8CLIqCLk7h13JX2iB3+n8hQSwQ5F76l1vta5N1xxecLqfBxRYSF2St
qpE3bFF15LgnXOHUhkL4R8NyBuLV+uDQk9MDwDD6wbSz610tdQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFLn+XvSeSZz2zws/omRh+VPmXEK3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYjlmNTg5MTAtN2E2YS0z
NTEzLWEyMTEtZWVlMmVkZGExNjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAX+y8D
BAAX+zQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAlZc5NbJxdOZtXOMdjnvdl7n2lvhaiOAJxcXjdtUMJ/y3
LSFQUGk0Rhp4jBy4mb1OnnkdlSuRXuzwxetGLM4IwXK3G0Ax0jLwg/NRDxffBWct
Cr1Bo9XlF/HtdqOBOM+giR6p6MUMugQkQS1J822cwW6CqzV5IHMUaJJkw7e8esyz
08ntPKHRBJa8XpCT3VKtqKYe2SoWgzAHw70fg9jYvj+tD8+cEa14xqGXQ5YYN8LO
6Qcww9I2CitG4l7Z2kEslw907TTbTV1Me3z4bSZlvG7oXIHnY1obxFFYijfcjxMt
/KUEjKYxLkEEWVuFptDRF2/oH5f5J88N8CcNyf7Sdw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:58:39 2025 by rpki-client