Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/cfa9268d-50e6-3e9b-a249-1910607c366e.roa
File:                     cfa9268d-50e6-3e9b-a249-1910607c366e.roa (raw, json)
Hash identifier:          3EebxSdHhxoYi3DI9HhlcgYz+jDgMwsCIq1Uj5ME34I=
Subject key identifier:   BF:82:36:C3:A4:42:2B:82:FC:60:1E:C0:C2:B5:87:F6:F8:CD:44:65
Certificate issuer:       /CN=093d143f-009a-4f7c-beb4-ce9c73352417
Certificate serial:       010D0C9F4328584AEF8BCDF5731E67AA9BA2A618
Authority key identifier: C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/cfa9268d-50e6-3e9b-a249-1910607c366e.roa
Signing time:             Fri 22 Aug 2025 01:00:33 +0000
ROA not before:           Fri 22 Aug 2025 01:00:33 +0000
ROA not after:            Thu 20 Nov 2025 02:00:33 +0000
asID:                     33755
IP address blocks:        23.164.56.0/24 maxlen: 24
                          23.164.57.0/24 maxlen: 24
                          2602:f974:fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:8b:cd:f5:73:1e:67:aa:9b:a2:a6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093d143f-009a-4f7c-beb4-ce9c73352417
        Validity
            Not Before: Aug 22 01:00:33 2025 GMT
            Not After : Nov 20 02:00:33 2025 GMT
        Subject: CN=c7e072f0-eb53-40ca-adfa-ef97e0cb5440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:53:a4:ad:92:c7:74:72:db:27:36:18:ae:d5:
                    a1:e4:7b:77:ab:53:d3:3e:82:5e:72:bc:8e:0d:8e:
                    18:d1:c7:4f:c1:99:09:8d:39:d4:65:2b:7a:54:5c:
                    7a:57:92:0b:07:12:1b:22:30:74:e6:55:34:cd:6a:
                    14:b6:50:33:19:75:9a:39:37:ef:8b:81:93:31:18:
                    84:4f:fa:4c:4d:cb:ad:e2:a8:d8:2e:68:02:20:c0:
                    37:18:1d:54:09:48:4a:2a:47:20:63:c2:f2:d9:f3:
                    92:f9:29:62:43:f2:c8:21:7c:9a:58:75:f8:b2:b1:
                    01:1b:13:1a:b3:df:d9:4d:be:f3:92:3b:e1:11:95:
                    ce:9a:06:15:d6:d3:3d:16:b0:1f:80:92:f0:f3:35:
                    ef:79:21:11:63:f1:82:ae:ca:ad:93:0c:c8:bd:f4:
                    e9:58:a5:a7:1a:7e:88:8e:b8:c1:c0:4c:74:aa:03:
                    b0:6d:1f:fa:22:70:4e:4e:c8:ac:47:cf:b8:e8:e3:
                    c4:e7:4b:e3:ea:9b:a7:c8:70:9a:49:69:f7:9d:81:
                    ee:c8:2f:56:dd:48:6d:e3:34:5b:ec:f2:0d:23:eb:
                    3f:2d:e8:c9:b0:c8:54:3c:c7:15:c5:37:fb:34:5c:
                    14:83:52:bb:9c:9b:e4:6c:f3:ac:5d:3e:34:cb:b0:
                    c8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:82:36:C3:A4:42:2B:82:FC:60:1E:C0:C2:B5:87:F6:F8:CD:44:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/cfa9268d-50e6-3e9b-a249-1910607c366e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.crl

            X509v3 Authority Key Identifier:
                keyid:C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.56.0/23
                IPv6:
                  2602:f974:fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:2c:8b:68:b1:98:34:9b:44:46:a3:ba:27:4d:e0:97:a6:13:
         b1:6f:16:9e:75:d3:86:39:33:90:72:16:61:97:54:6f:6c:ec:
         0e:97:9a:4a:da:f5:53:56:83:2f:f1:91:f3:c2:5c:1f:b8:8b:
         6a:c2:e3:12:af:1d:f6:c2:eb:17:3a:95:03:51:ad:48:73:8a:
         de:96:fd:fd:d6:b4:65:9b:4f:b4:a7:ea:67:7b:4b:15:55:c4:
         d1:c3:91:69:08:d8:01:c4:b6:97:cd:58:5e:6d:b0:55:bb:d7:
         0f:1d:82:2b:33:65:a9:cd:d8:f3:35:76:92:f4:e4:7e:32:be:
         a9:d9:78:9d:57:9b:e7:64:70:2c:89:29:b2:08:d2:2d:f2:67:
         d8:8b:94:b9:b7:f0:a4:0b:a5:f3:0d:7d:bc:da:8a:bd:41:8c:
         7f:a9:71:46:21:dc:16:46:5e:d8:6d:37:b6:90:20:6e:3f:d7:
         e4:13:2e:ad:13:d6:c8:f5:68:c9:2d:10:67:4f:ba:9e:38:1f:
         0c:61:50:79:1a:03:2e:ce:7a:80:4b:0b:1d:8a:3e:de:af:4e:
         9b:12:1c:07:d7:54:07:ee:76:6a:a7:83:1e:d0:f7:de:a9:e0:
         1d:e8:4a:42:a2:30:47:2d:e0:2b:f8:33:c4:3f:17:46:dd:1b:
         c6:d7:33:cd
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErvi831cx5nqpuiphgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDkzZDE0M2YtMDA5YS00ZjdjLWJlYjQtY2U5YzczMzUy
NDE3MB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk
YzdlMDcyZjAtZWI1My00MGNhLWFkZmEtZWY5N2UwY2I1NDQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1OkrZLHdHLbJzYYrtWh5Ht3q1PTPoJecryO
DY4Y0cdPwZkJjTnUZSt6VFx6V5ILBxIbIjB05lU0zWoUtlAzGXWaOTfvi4GTMRiE
T/pMTcut4qjYLmgCIMA3GB1UCUhKKkcgY8Ly2fOS+SliQ/LIIXyaWHX4srEBGxMa
s9/ZTb7zkjvhEZXOmgYV1tM9FrAfgJLw8zXveSERY/GCrsqtkwzIvfTpWKWnGn6I
jrjBwEx0qgOwbR/6InBOTsisR8+46OPE50vj6punyHCaSWn3nYHuyC9W3Uht4zRb
7PINI+s/LejJsMhUPMcVxTf7NFwUg1K7nJvkbPOsXT40y7DIdQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFL+CNsOkQiuC/GAewMK1h/b4zURlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wOTNk
MTQzZi0wMDlhLTRmN2MtYmViNC1jZTljNzMzNTI0MTcvY2ZhOTI2OGQtNTBlNi0z
ZTliLWEyNDktMTkxMDYwN2MzNjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDkzZDE0M2YtMDA5YS00ZjdjLWJl
YjQtY2U5YzczMzUyNDE3LzA5M2QxNDNmLTAwOWEtNGY3Yy1iZWI0LWNlOWM3MzM1
MjQxNy5jcmwwHwYDVR0jBBgwFoAUwwrscmITHMiOguUvQ7Yv6opL3nQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wOTNkMTQzZi0wMDlhLTRmN2MtYmViNC1jZTlj
NzMzNTI0MTcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBF6Q4MA8E
AgACMAkDBwAmAvl0D/8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfCyLaLGYNJtERqO6J03gl6YTsW8WnnXT
hjkzkHIWYZdUb2zsDpeaStr1U1aDL/GR88JcH7iLasLjEq8d9sLrFzqVA1GtSHOK
3pb9/da0ZZtPtKfqZ3tLFVXE0cORaQjYAcS2l81YXm2wVbvXDx2CKzNlqc3Y8zV2
kvTkfjK+qdl4nVeb52RwLIkpsgjSLfJn2IuUubfwpAul8w19vNqKvUGMf6lxRiHc
FkZe2G03tpAgbj/X5BMurRPWyPVoyS0QZ0+6njgfDGFQeRoDLs56gEsLHYo+3q9O
mxIcB9dUB+52aqeDHtD33qngHehKQqIwRy3gK/gzxD8XRt0bxtczzQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:18:37 2025 by rpki-client