Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/2d68bd01-5230-3201-bfa0-352c95678320.roa
File:                     2d68bd01-5230-3201-bfa0-352c95678320.roa (raw, json)
Hash identifier:          oKdgdXNkQyo/zJfBwyTmNStGZYMG0/KvQ9GRXq1X8Ec=
Subject key identifier:   7F:AE:AD:F4:EE:02:90:DD:4A:F4:4A:DD:F0:82:0C:CD:4F:4E:A6:9C
Certificate issuer:       /CN=d9fe3f5e-7bba-4763-84ad-4575066fb46e
Certificate serial:       010D0C9F4328584A506AE8A39E24BB87EED15E00
Authority key identifier: 17:33:FF:CC:4A:B9:97:B2:A7:74:3B:59:53:20:1B:1A:E1:66:A3:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/2d68bd01-5230-3201-bfa0-352c95678320.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     8095
IP address blocks:        23.177.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/d9fe3f5e-7bba-4763-84ad-4575066fb46e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/d9fe3f5e-7bba-4763-84ad-4575066fb46e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:e8:a3:9e:24:bb:87:ee:d1:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9fe3f5e-7bba-4763-84ad-4575066fb46e
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=0735dcff-f5f0-4fb4-ba5b-613bb401784d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ad:30:cc:7e:7f:de:5d:8c:90:a6:b1:19:68:
                    86:b5:2b:c0:bc:60:0e:8e:24:fe:47:20:f2:c5:26:
                    2f:c3:10:1c:53:5f:f3:7b:65:75:d2:79:6a:0b:b7:
                    95:d8:eb:9f:06:5c:ba:84:c9:1d:a5:ab:50:da:eb:
                    76:6a:7b:09:33:c9:df:10:c5:3c:b8:33:40:82:0c:
                    37:b9:09:3d:92:f8:51:9a:91:b5:0e:73:94:50:33:
                    e4:f0:7b:66:63:c4:c4:85:2c:66:11:ac:c8:5c:7f:
                    f1:fa:7f:eb:da:40:d9:2b:dc:8c:00:2d:a3:ac:4e:
                    01:00:f9:20:ab:07:98:b6:b6:af:e6:ab:59:86:1f:
                    fc:02:0b:25:4c:02:7a:4f:14:d0:5a:17:2d:1f:ed:
                    d5:50:21:fe:88:6e:cd:9f:17:a3:46:2e:35:23:d6:
                    59:cf:9c:55:98:48:ab:c5:66:20:e5:2e:dc:0c:f6:
                    20:28:af:aa:dc:6c:f3:68:28:c0:a9:19:39:9d:ea:
                    8a:79:36:28:06:8a:0e:bb:73:83:23:82:de:52:af:
                    b1:2c:55:a4:8f:2f:37:1f:c5:9c:d3:8a:6d:c9:65:
                    39:75:a3:b5:11:ae:01:0d:1f:28:ce:e6:1d:e6:52:
                    ff:08:28:70:76:f8:c0:e8:cf:72:b4:4c:84:05:86:
                    d2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AE:AD:F4:EE:02:90:DD:4A:F4:4A:DD:F0:82:0C:CD:4F:4E:A6:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/2d68bd01-5230-3201-bfa0-352c95678320.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/d9fe3f5e-7bba-4763-84ad-4575066fb46e.crl

            X509v3 Authority Key Identifier:
                keyid:17:33:FF:CC:4A:B9:97:B2:A7:74:3B:59:53:20:1B:1A:E1:66:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:bc:fe:aa:49:d0:11:d4:13:78:e1:f5:3d:8e:55:e5:7c:49:
         f8:ba:1b:a7:61:20:a6:87:81:a3:a7:b9:c0:5e:7c:61:96:32:
         2c:02:46:19:63:fc:c5:ee:e8:4d:6b:fe:02:b6:40:cb:44:fb:
         72:37:c6:53:6f:6e:ac:c3:d7:1a:11:43:e6:6a:ca:da:42:db:
         5c:80:27:f3:4d:d9:97:a5:58:f4:32:f2:93:88:6d:fe:f4:76:
         64:03:43:31:d7:dd:18:73:cc:37:43:e1:80:d2:63:45:1b:44:
         b9:91:23:c6:c3:6a:7b:e0:54:75:37:43:84:7b:b5:a6:3c:79:
         4e:93:15:74:0a:6c:89:23:ae:ae:09:ba:68:eb:78:27:c2:d4:
         17:d6:51:31:e9:10:ac:3d:53:53:82:ed:f2:12:26:44:53:3c:
         11:29:b9:fc:33:c7:15:98:d4:65:a3:04:a7:e8:04:a4:c9:19:
         81:e5:2b:86:e6:16:1b:79:16:ba:43:29:99:60:cb:db:3f:e4:
         a6:42:5d:3f:85:1d:5d:48:db:2d:3e:ce:8d:14:ed:bc:7f:f0:
         92:b7:31:d2:d5:83:bf:51:5c:90:cd:7b:78:68:22:b0:23:3c:
         2c:eb:3f:5a:2d:83:16:9a:bf:d1:05:89:f6:b7:3d:b6:ab:68:
         6c:42:01:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQauijniS7h+7RXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmZTNmNWUtN2JiYS00NzYzLTg0YWQtNDU3NTA2NmZi
NDZlMB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk
MDczNWRjZmYtZjVmMC00ZmI0LWJhNWItNjEzYmI0MDE3ODRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq0wzH5/3l2MkKaxGWiGtSvAvGAOjiT+RyDy
xSYvwxAcU1/ze2V10nlqC7eV2OufBly6hMkdpatQ2ut2ansJM8nfEMU8uDNAggw3
uQk9kvhRmpG1DnOUUDPk8HtmY8TEhSxmEazIXH/x+n/r2kDZK9yMAC2jrE4BAPkg
qweYtrav5qtZhh/8AgslTAJ6TxTQWhctH+3VUCH+iG7NnxejRi41I9ZZz5xVmEir
xWYg5S7cDPYgKK+q3GzzaCjAqRk5neqKeTYoBooOu3ODI4LeUq+xLFWkjy83H8Wc
04ptyWU5daO1Ea4BDR8ozuYd5lL/CChwdvjA6M9ytEyEBYbSdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH+urfTuApDdSvRK3fCCDM1PTqacMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kOWZl
M2Y1ZS03YmJhLTQ3NjMtODRhZC00NTc1MDY2ZmI0NmUvMmQ2OGJkMDEtNTIzMC0z
MjAxLWJmYTAtMzUyYzk1Njc4MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDlmZTNmNWUtN2JiYS00NzYzLTg0
YWQtNDU3NTA2NmZiNDZlL2Q5ZmUzZjVlLTdiYmEtNDc2My04NGFkLTQ1NzUwNjZm
YjQ2ZS5jcmwwHwYDVR0jBBgwFoAUFzP/zEq5l7KndDtZUyAbGuFmo04wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kOWZlM2Y1ZS03YmJhLTQ3NjMtODRhZC00NTc1
MDY2ZmI0NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7GoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFK8/qpJ0BHUE3jh9T2OVeV8Sfi6G6dhIKaHgaOnucBefGGWMiwCRhlj
/MXu6E1r/gK2QMtE+3I3xlNvbqzD1xoRQ+ZqytpC21yAJ/NN2ZelWPQy8pOIbf70
dmQDQzHX3RhzzDdD4YDSY0UbRLmRI8bDanvgVHU3Q4R7taY8eU6TFXQKbIkjrq4J
umjreCfC1BfWUTHpEKw9U1OC7fISJkRTPBEpufwzxxWY1GWjBKfoBKTJGYHlK4bm
Fht5FrpDKZlgy9s/5KZCXT+FHV1I2y0+zo0U7bx/8JK3MdLVg79RXJDNe3hoIrAj
PCzrP1otgxaav9EFifa3PbaraGxCAZ4=
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:32:43 2025 by rpki-client