Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/5a37443e-20ea-383a-9358-9f99e9d723a7.roa
File:                     5a37443e-20ea-383a-9358-9f99e9d723a7.roa (raw, json)
Hash identifier:          7ufsxsLRl3HTyoWypOs6CCfNhDNdIJrWJgiV3xjm+gQ=
Subject key identifier:   73:10:5A:1A:AA:BC:FC:2B:71:24:A8:03:FB:1A:63:71:54:ED:6F:BD
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F4328584A398829CFAA5FF73C1A476BB8
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/5a37443e-20ea-383a-9358-9f99e9d723a7.roa
Signing time:             Tue 17 Jun 2025 20:16:11 +0000
ROA not before:           Tue 17 Jun 2025 20:16:11 +0000
ROA not after:            Mon 15 Sep 2025 20:16:11 +0000
asID:                     46261
IP address blocks:        23.226.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:39:88:29:cf:aa:5f:f7:3c:1a:47:6b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Jun 17 20:16:11 2025 GMT
            Not After : Sep 15 20:16:11 2025 GMT
        Subject: CN=8e4185ce-06aa-4afc-b357-42bd87a1bf3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2f:61:6a:93:2a:90:0c:1b:85:25:a7:d2:b9:
                    08:54:dc:62:a9:cb:c8:ba:3c:47:03:4c:8d:28:76:
                    7c:16:2a:03:50:70:26:7e:6b:85:dc:12:d7:de:78:
                    ca:fc:9f:7d:5d:0d:93:c0:56:e2:c6:ae:5d:7d:09:
                    bc:31:92:a4:60:f2:70:89:ce:81:cb:b0:2b:51:b2:
                    81:ef:5a:53:67:80:d9:c9:ab:81:8f:e2:c6:90:36:
                    26:5f:cd:ad:cc:34:b9:54:b3:cb:5c:da:4a:bf:a7:
                    fc:e1:6a:f8:7c:5a:61:73:44:8d:41:a6:5e:19:a6:
                    9d:6c:3d:d2:85:b5:08:bb:3d:5a:86:80:82:a8:46:
                    bd:b5:10:29:37:9d:68:76:c2:2a:85:39:3e:4e:b6:
                    a6:d1:ee:96:dd:14:2c:0c:c8:46:e8:58:1d:a5:37:
                    9f:82:b9:40:86:76:6c:0c:71:5d:e8:85:92:a8:60:
                    46:7a:40:e8:d8:7a:b5:87:42:2b:6d:15:30:cc:dd:
                    dc:c9:c2:4b:54:29:c5:6c:30:83:63:10:59:cb:69:
                    a2:7f:d8:5a:ee:dd:49:08:c0:b6:74:90:80:d6:62:
                    7c:3b:e5:a4:7a:3e:f5:5d:06:08:e9:71:43:e2:28:
                    f7:09:a4:25:c9:90:21:98:0a:e7:16:8f:6c:9e:a8:
                    f3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:10:5A:1A:AA:BC:FC:2B:71:24:A8:03:FB:1A:63:71:54:ED:6F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/5a37443e-20ea-383a-9358-9f99e9d723a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:81:05:31:75:3b:53:65:a1:31:0d:77:76:73:99:76:86:cf:
         4a:e2:94:c7:11:14:22:d4:33:ba:71:07:4f:b4:63:20:d7:c6:
         e5:de:e8:2d:67:ae:4a:7b:39:80:4b:bc:83:b3:96:33:72:6f:
         b7:cd:72:96:6a:7b:08:5b:94:35:cc:8f:90:fa:9a:3b:d0:37:
         b1:87:bf:de:88:b3:aa:0a:70:11:74:4b:2b:e2:a8:b1:4f:22:
         94:dc:e7:87:d0:45:57:cb:aa:19:34:4c:cc:5e:b0:62:94:42:
         54:cb:3e:f3:bc:31:66:c4:d7:b0:e5:46:4d:e4:90:96:aa:b2:
         41:0d:30:f1:74:ec:f5:0e:49:24:ff:84:d5:45:89:4e:96:dd:
         5d:81:8b:3d:26:44:2f:b9:b4:85:30:e0:03:ea:52:9f:33:7c:
         f6:ef:3f:67:16:4e:21:7a:14:b3:10:ef:76:05:0a:4c:a8:76:
         3f:48:be:40:24:61:14:97:d9:eb:17:2e:b5:bf:30:83:b2:ab:
         3a:e9:3a:c5:2e:eb:da:d1:62:d9:98:88:4b:49:9d:d9:65:bd:
         55:f0:77:81:db:5b:10:75:c9:aa:66:f4:eb:b7:e6:3d:b9:ce:
         49:11:b8:a1:d2:6e:fa:42:70:b3:08:53:ce:a0:70:53:7e:ff:
         fa:33:31:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5iCnPql/3PBpHa7gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjODViYTQtOGQ3Mi00OGVkLWExNjYtYTc2ZGMyZjA0
Mjg3MB4XDTI1MDYxNzIwMTYxMVoXDTI1MDkxNTIwMTYxMVowLzEtMCsGA1UEAxMk
OGU0MTg1Y2UtMDZhYS00YWZjLWIzNTctNDJiZDg3YTFiZjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy9hapMqkAwbhSWn0rkIVNxiqcvIujxHA0yN
KHZ8FioDUHAmfmuF3BLX3njK/J99XQ2TwFbixq5dfQm8MZKkYPJwic6By7ArUbKB
71pTZ4DZyauBj+LGkDYmX82tzDS5VLPLXNpKv6f84Wr4fFphc0SNQaZeGaadbD3S
hbUIuz1ahoCCqEa9tRApN51odsIqhTk+Tram0e6W3RQsDMhG6FgdpTefgrlAhnZs
DHFd6IWSqGBGekDo2Hq1h0IrbRUwzN3cycJLVCnFbDCDYxBZy2mif9ha7t1JCMC2
dJCA1mJ8O+Wkej71XQYI6XFD4ij3CaQlyZAhmArnFo9snqjziwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHMQWhqqvPwrcSSoA/saY3FU7W+9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4
NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZkYzJmMDQyODcvNWEzNzQ0M2UtMjBlYS0z
ODNhLTkzNTgtOWY5OWU5ZDcyM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWZjODViYTQtOGQ3Mi00OGVkLWEx
NjYtYTc2ZGMyZjA0Mjg3LzFmYzg1YmE0LThkNzItNDhlZC1hMTY2LWE3NmRjMmYw
NDI4Ny5jcmwwHwYDVR0jBBgwFoAUEbxdAebJG/t/I+XSIpHWtCikkgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZk
YzJmMDQyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+IgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFmBBTF1O1NloTENd3ZzmXaGz0rilMcRFCLUM7pxB0+0YyDXxuXe6C1n
rkp7OYBLvIOzljNyb7fNcpZqewhblDXMj5D6mjvQN7GHv96Is6oKcBF0SyviqLFP
IpTc54fQRVfLqhk0TMxesGKUQlTLPvO8MWbE17DlRk3kkJaqskENMPF07PUOSST/
hNVFiU6W3V2Biz0mRC+5tIUw4APqUp8zfPbvP2cWTiF6FLMQ73YFCkyodj9IvkAk
YRSX2esXLrW/MIOyqzrpOsUu69rRYtmYiEtJndllvVXwd4HbWxB1yapm9Ou35j25
zkkRuKHSbvpCcLMIU86gcFN+//ozMfo=
-----END CERTIFICATE-----
Generated at Sun Jun 29 13:42:04 2025 by rpki-client