Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3/62046459-1aa6-3377-b989-2c301aad9cee.roa
File:                     62046459-1aa6-3377-b989-2c301aad9cee.roa (raw, json)
Hash identifier:          8XdUHE4JYBDVeGgLUCgTPqVhd1UBaNTkL8NRJrDcNNQ=
Subject key identifier:   97:50:67:63:7A:2F:A1:57:FA:FB:9A:34:A1:A6:5B:F4:11:F5:4D:D5
Certificate issuer:       /CN=6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3
Certificate serial:       010D0C9F4328584B6D2C8CE0D58DC00911F7EB00
Authority key identifier: 99:28:6F:E7:9E:10:62:8D:A9:30:93:A6:B7:6D:1E:DA:EB:0F:88:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3/62046459-1aa6-3377-b989-2c301aad9cee.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     63023
IP address blocks:        23.138.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:8c:e0:d5:8d:c0:09:11:f7:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=cf52fed2-89e0-4993-91f1-442765918b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:34:60:ab:03:13:80:09:7a:cb:bc:b3:eb:f2:
                    22:5c:42:9b:6b:ae:ec:2c:89:b7:ea:84:32:7d:d2:
                    f7:31:c6:1a:c1:b7:a9:8f:cf:1d:32:cf:9d:62:41:
                    31:68:02:d4:e2:6b:a0:76:60:e7:e3:67:4d:09:6a:
                    64:31:17:3d:99:51:46:4a:fa:19:7d:f3:6d:54:3f:
                    3e:61:58:17:51:a4:c5:2c:21:14:54:f6:7a:0a:b1:
                    77:7d:c8:e2:ca:52:49:75:04:47:c4:3f:bc:f1:e7:
                    37:d7:37:14:65:76:a9:e5:8b:bd:9a:37:fd:20:31:
                    df:c5:c3:4f:67:05:60:e3:77:d4:4b:3b:c2:d4:65:
                    6e:23:76:d8:af:8a:c3:00:86:5e:fe:5e:b2:b0:62:
                    9d:b9:a2:32:53:14:b5:f7:f8:2c:a3:21:87:11:28:
                    e4:cb:ae:53:6f:eb:7a:db:39:c8:cc:ca:b3:a0:02:
                    91:7d:3d:9c:62:68:3e:2e:dc:70:7d:e9:97:44:01:
                    26:c5:4f:b0:38:cb:e0:17:03:65:25:b4:be:c2:b2:
                    e3:de:b1:23:85:6c:6a:6f:fe:f1:58:aa:52:88:a5:
                    6e:8e:b1:9d:c8:ab:12:4b:a1:34:c5:51:47:47:ad:
                    6e:0a:1e:93:60:49:d1:90:41:9e:1b:fa:0f:00:0a:
                    07:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:50:67:63:7A:2F:A1:57:FA:FB:9A:34:A1:A6:5B:F4:11:F5:4D:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3/62046459-1aa6-3377-b989-2c301aad9cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3.crl

            X509v3 Authority Key Identifier:
                keyid:99:28:6F:E7:9E:10:62:8D:A9:30:93:A6:B7:6D:1E:DA:EB:0F:88:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:eb:7d:7f:62:70:78:5c:13:ff:60:9e:17:ec:19:7e:dd:9d:
         72:23:e0:ee:56:5b:00:a1:b5:90:c6:dc:6a:b1:7f:d2:28:7c:
         6e:4d:4c:df:a3:9e:f2:1f:87:4c:f9:60:e5:94:33:c7:6a:7e:
         66:3b:7d:c6:24:e1:99:bd:ba:9c:33:52:3b:cd:ea:03:b7:c7:
         e2:c3:53:27:11:b9:e1:5b:14:25:b5:73:4a:29:df:dd:7b:db:
         b6:a9:14:0f:db:03:1d:af:8a:a0:0b:6e:6b:30:9d:24:30:17:
         08:a7:3a:56:ec:d5:85:62:9c:ec:9c:e1:a5:62:9a:ee:b9:d4:
         0e:e1:08:4c:02:97:b0:2d:18:65:5d:7a:27:52:90:14:5b:13:
         a8:53:f5:c4:5f:62:ef:ab:92:1f:36:79:89:b9:34:be:f1:63:
         02:09:ce:18:98:fb:c0:03:46:a7:47:cf:8b:55:50:f7:59:6f:
         0f:2c:e0:40:2e:b7:eb:8d:a9:a8:15:c5:5a:86:14:e8:19:83:
         6e:ed:e4:b5:bb:b5:9e:f8:03:80:c7:2a:fc:36:ed:99:28:0d:
         13:ad:27:06:bc:d2:de:b3:f5:57:ce:57:2d:04:0a:62:dd:a8:
         31:6d:f6:d6:39:c2:88:6f:82:35:2b:dd:29:bf:70:b2:24:04:
         bd:e9:58:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLIzg1Y3ACRH36wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmM0ZjZiMTgtZWU0OC00N2YwLThkMDItMmEzYWFkOWU2
NGMzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
Y2Y1MmZlZDItODllMC00OTkzLTkxZjEtNDQyNzY1OTE4YjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTRgqwMTgAl6y7yz6/IiXEKba67sLIm36oQy
fdL3McYawbepj88dMs+dYkExaALU4mugdmDn42dNCWpkMRc9mVFGSvoZffNtVD8+
YVgXUaTFLCEUVPZ6CrF3fcjiylJJdQRHxD+88ec31zcUZXap5Yu9mjf9IDHfxcNP
ZwVg43fUSzvC1GVuI3bYr4rDAIZe/l6ysGKduaIyUxS19/gsoyGHESjky65Tb+t6
2znIzMqzoAKRfT2cYmg+LtxwfemXRAEmxU+wOMvgFwNlJbS+wrLj3rEjhWxqb/7x
WKpSiKVujrGdyKsSS6E0xVFHR61uCh6TYEnRkEGeG/oPAAoHwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJdQZ2N6L6FX+vuaNKGmW/QR9U3VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82YzRm
NmIxOC1lZTQ4LTQ3ZjAtOGQwMi0yYTNhYWQ5ZTY0YzMvNjIwNDY0NTktMWFhNi0z
Mzc3LWI5ODktMmMzMDFhYWQ5Y2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNmM0ZjZiMTgtZWU0OC00N2YwLThk
MDItMmEzYWFkOWU2NGMzLzZjNGY2YjE4LWVlNDgtNDdmMC04ZDAyLTJhM2FhZDll
NjRjMy5jcmwwHwYDVR0jBBgwFoAUmShv554QYo2pMJOmt20e2usPiBUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82YzRmNmIxOC1lZTQ4LTQ3ZjAtOGQwMi0yYTNh
YWQ5ZTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4osMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALHrfX9icHhcE/9gnhfsGX7dnXIj4O5WWwChtZDG3Gqxf9IofG5NTN+j
nvIfh0z5YOWUM8dqfmY7fcYk4Zm9upwzUjvN6gO3x+LDUycRueFbFCW1c0op3917
27apFA/bAx2viqALbmswnSQwFwinOlbs1YVinOyc4aVimu651A7hCEwCl7AtGGVd
eidSkBRbE6hT9cRfYu+rkh82eYm5NL7xYwIJzhiY+8ADRqdHz4tVUPdZbw8s4EAu
t+uNqagVxVqGFOgZg27t5LW7tZ74A4DHKvw27ZkoDROtJwa80t6z9VfOVy0ECmLd
qDFt9tY5wohvgjUr3Sm/cLIkBL3pWAc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:20:37 2025 by rpki-client