Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/c66361a3-62d4-39c2-a93b-c4e3bceaca66.roa
File:                     c66361a3-62d4-39c2-a93b-c4e3bceaca66.roa (raw, json)
Hash identifier:          /+y8V+OYxlDXc4JaioBHOQ3r/0VzL3ujwoKGPxSHkKY=
Subject key identifier:   73:A5:B1:96:3F:24:93:37:AA:51:A5:DE:6A:62:F0:24:07:10:B0:FC
Certificate issuer:       /CN=2c4f9103-4694-4f57-954c-fc9c82a95b42
Certificate serial:       010D0C9F4328584B970CF0754F8958DB1A1DF918
Authority key identifier: 9D:DA:12:8F:C6:9C:97:AD:FE:F0:F9:23:C9:B8:A0:D9:55:55:FF:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/c66361a3-62d4-39c2-a93b-c4e3bceaca66.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     26902
IP address blocks:        23.160.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/2c4f9103-4694-4f57-954c-fc9c82a95b42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/2c4f9103-4694-4f57-954c-fc9c82a95b42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:f0:75:4f:89:58:db:1a:1d:f9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c4f9103-4694-4f57-954c-fc9c82a95b42
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=3503d47c-a6f1-4984-864c-c29f8adb248b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:da:dc:9b:6f:1d:04:b3:ad:ed:c9:f9:62:84:
                    17:e7:3d:19:3c:fa:9d:2c:d4:3f:b6:9e:d7:09:6a:
                    ad:eb:0e:fa:6c:20:a4:78:6c:7a:b8:e6:33:fa:a8:
                    dc:45:1c:ba:79:c0:0d:49:79:5d:58:60:d9:bc:f4:
                    1a:12:46:18:82:c6:2f:6c:d8:48:df:5e:29:b7:4c:
                    4c:57:55:8c:42:dd:9e:d5:0a:a5:3a:40:a6:8d:6d:
                    57:ac:3b:a5:e8:8e:81:00:82:56:bd:30:3a:30:f7:
                    96:3a:d2:cf:d7:7d:71:b3:57:7a:f7:0d:21:42:ad:
                    9a:58:93:22:de:35:04:63:06:3d:6d:ae:5b:2b:4d:
                    90:94:48:6c:45:10:13:bc:29:9d:d9:08:53:c3:4e:
                    08:52:7b:02:26:1e:5a:e0:61:ea:a6:39:bf:87:8c:
                    b1:a7:8f:36:c5:ee:95:98:ad:89:a9:ea:ec:cd:59:
                    54:f0:e9:e2:71:6d:b3:ec:6f:36:77:e3:63:8b:7c:
                    fa:5e:a6:25:6d:52:e7:44:9c:cb:c2:59:2a:e3:03:
                    f5:4d:17:32:81:f7:03:ab:41:51:05:1f:4c:53:7d:
                    e3:61:38:0d:7a:a5:c1:9f:e3:30:f8:71:f9:f7:0c:
                    9b:c9:d4:23:81:7d:1e:da:77:f5:76:1d:bb:49:f4:
                    bf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A5:B1:96:3F:24:93:37:AA:51:A5:DE:6A:62:F0:24:07:10:B0:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/c66361a3-62d4-39c2-a93b-c4e3bceaca66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/2c4f9103-4694-4f57-954c-fc9c82a95b42.crl

            X509v3 Authority Key Identifier:
                keyid:9D:DA:12:8F:C6:9C:97:AD:FE:F0:F9:23:C9:B8:A0:D9:55:55:FF:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ee:ea:fc:3c:69:5f:c8:40:75:ba:79:e4:c5:49:19:2d:76:
         8b:4e:d2:19:d2:b9:73:28:fd:12:e3:2c:84:8d:b4:62:83:2f:
         18:92:2c:d5:37:e2:ae:07:bb:57:a1:22:b0:7a:5d:32:ff:dc:
         5e:5c:d0:0f:9d:bf:4c:36:40:90:76:7e:c0:36:5d:31:64:99:
         bc:f3:95:c5:47:f4:6f:98:4f:c8:7e:f0:36:fe:b8:31:b4:5f:
         70:bd:c4:71:ec:1f:35:70:42:87:08:0e:35:a5:7c:3f:66:ae:
         7d:44:78:9e:4d:a1:9b:3e:38:a2:40:48:0b:15:7c:d1:e8:1e:
         98:eb:43:4b:ba:bd:89:bc:c1:7a:4f:53:8c:c6:19:65:26:ed:
         cb:d9:f0:f8:80:2e:d5:4b:73:c7:11:9f:5d:03:71:32:3f:80:
         7b:4d:1d:b4:ed:a8:f8:fc:e6:41:1c:e6:d7:23:da:7f:b6:3e:
         35:ca:6b:04:b9:ce:bb:06:48:fb:93:e4:bc:d3:a8:37:a2:e6:
         63:9e:8a:42:de:b2:54:03:e9:a9:b4:a8:60:e6:e0:4d:04:5f:
         26:1d:bf:98:dd:3c:50:b1:f8:08:d4:36:24:54:e2:82:70:47:
         d2:f1:81:68:74:37:ff:6d:f6:49:e4:8d:a1:49:03:26:ab:95:
         7f:69:e2:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPB1T4lY2xod+RgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmM0ZjkxMDMtNDY5NC00ZjU3LTk1NGMtZmM5YzgyYTk1
YjQyMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
MzUwM2Q0N2MtYTZmMS00OTg0LTg2NGMtYzI5ZjhhZGIyNDhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9rcm28dBLOt7cn5YoQX5z0ZPPqdLNQ/tp7X
CWqt6w76bCCkeGx6uOYz+qjcRRy6ecANSXldWGDZvPQaEkYYgsYvbNhI314pt0xM
V1WMQt2e1QqlOkCmjW1XrDul6I6BAIJWvTA6MPeWOtLP131xs1d69w0hQq2aWJMi
3jUEYwY9ba5bK02QlEhsRRATvCmd2QhTw04IUnsCJh5a4GHqpjm/h4yxp482xe6V
mK2JqerszVlU8OnicW2z7G82d+Nji3z6XqYlbVLnRJzLwlkq4wP1TRcygfcDq0FR
BR9MU33jYTgNeqXBn+Mw+HH59wybydQjgX0e2nf1dh27SfS/6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOlsZY/JJM3qlGl3mpi8CQHELD8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYzRm
OTEwMy00Njk0LTRmNTctOTU0Yy1mYzljODJhOTViNDIvYzY2MzYxYTMtNjJkNC0z
OWMyLWE5M2ItYzRlM2JjZWFjYTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmM0ZjkxMDMtNDY5NC00ZjU3LTk1
NGMtZmM5YzgyYTk1YjQyLzJjNGY5MTAzLTQ2OTQtNGY1Ny05NTRjLWZjOWM4MmE5
NWI0Mi5jcmwwHwYDVR0jBBgwFoAUndoSj8acl63+8Pkjybig2VVV/zowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYzRmOTEwMy00Njk0LTRmNTctOTU0Yy1mYzlj
ODJhOTViNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6AIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGTu6vw8aV/IQHW6eeTFSRktdotO0hnSuXMo/RLjLISNtGKDLxiSLNU3
4q4Hu1ehIrB6XTL/3F5c0A+dv0w2QJB2fsA2XTFkmbzzlcVH9G+YT8h+8Db+uDG0
X3C9xHHsHzVwQocIDjWlfD9mrn1EeJ5NoZs+OKJASAsVfNHoHpjrQ0u6vYm8wXpP
U4zGGWUm7cvZ8PiALtVLc8cRn10DcTI/gHtNHbTtqPj85kEc5tcj2n+2PjXKawS5
zrsGSPuT5LzTqDei5mOeikLeslQD6am0qGDm4E0EXyYdv5jdPFCx+AjUNiRU4oJw
R9LxgWh0N/9t9knkjaFJAyarlX9p4h8=
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:37:44 2025 by rpki-client