Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/f0970a1e-18d9-3ab2-9803-e503b2782f21.roa
File:                     f0970a1e-18d9-3ab2-9803-e503b2782f21.roa (raw, json)
Hash identifier:          9GyHs/NOBqr8CQVDRyMZOLFTXq4jRVijcQQdQMHsKNw=
Subject key identifier:   C2:C0:A1:BE:8F:7F:92:F2:99:E8:E5:AA:33:1E:64:58:33:94:67:92
Certificate issuer:       /CN=fd7bd65f-83d2-4046-ad64-40ba458415a2
Certificate serial:       010D0C9F4328584A268AB9E967676B1F86180680
Authority key identifier: 73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/f0970a1e-18d9-3ab2-9803-e503b2782f21.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     396893
IP address blocks:        23.132.232.0/24 maxlen: 24
                          2620:8d:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:b9:e9:67:67:6b:1f:86:18:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7bd65f-83d2-4046-ad64-40ba458415a2
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=f15161cd-56f8-4410-9a78-267ce6e9600b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5a:0a:83:0e:ea:8a:e9:46:6a:ff:8c:fd:c2:
                    ce:5b:f9:87:ad:b4:3c:a9:e4:cf:30:65:1b:0c:e2:
                    51:64:57:57:1c:8e:3a:e4:e8:b7:5b:0f:81:b6:3a:
                    c9:8d:32:25:20:fe:e4:03:a1:28:75:b6:c8:8f:1a:
                    74:36:aa:83:b3:95:62:ee:93:5c:63:e6:3d:35:f5:
                    c7:0e:c4:4b:e2:43:6a:a9:40:26:ac:0d:80:9e:1a:
                    40:71:93:05:0c:52:0b:5c:71:6d:e5:9b:d6:fd:fd:
                    ad:d1:e3:0d:66:aa:c9:05:9f:d1:d3:51:ea:95:20:
                    9f:fa:fe:1e:89:a8:c6:91:38:42:f9:f5:24:8b:b0:
                    92:72:25:72:b0:d4:aa:46:df:19:21:a2:d3:5c:aa:
                    c1:22:43:84:22:8f:3e:7d:7e:70:9d:90:3f:61:b7:
                    cc:b5:bd:cb:48:be:db:76:8d:fa:b2:75:a3:e7:bb:
                    32:45:65:33:79:9f:03:12:eb:7e:6b:50:9a:9d:ed:
                    c8:79:d2:bc:b7:90:e1:5d:e9:aa:e0:a0:1e:65:f2:
                    1f:c0:12:46:71:45:a7:c3:18:9f:9b:e1:cc:b3:62:
                    bf:38:8b:06:a2:f3:2f:9b:ea:4e:78:12:2f:34:fa:
                    3a:c7:99:c4:26:e4:6c:47:df:2b:5f:92:9f:11:08:
                    fc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C0:A1:BE:8F:7F:92:F2:99:E8:E5:AA:33:1E:64:58:33:94:67:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/f0970a1e-18d9-3ab2-9803-e503b2782f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl

            X509v3 Authority Key Identifier:
                keyid:73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.232.0/24
                IPv6:
                  2620:8d:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:c8:3c:e5:d4:58:ca:d8:45:41:97:b0:6d:91:22:ef:ff:3b:
         55:c0:26:b1:3b:ca:0a:6b:a2:6c:a6:52:43:c7:e3:eb:a9:da:
         fd:e2:12:65:10:36:81:20:c6:c9:f0:e3:bd:69:f4:fd:88:cc:
         12:e4:38:7c:94:2a:9d:d9:51:fb:e1:6c:bd:52:72:8c:f7:3a:
         f0:b9:b6:fc:61:d3:85:0b:e1:0a:99:53:29:de:ac:2b:9e:8d:
         b5:da:0c:08:dc:2f:aa:3f:46:82:bc:0b:4a:ee:8a:7e:92:7a:
         de:db:3a:c0:ea:48:08:cb:8c:3f:26:cf:3b:30:89:0b:6c:77:
         f9:2d:ac:04:7b:cf:c2:be:a3:ab:1d:45:8f:2b:30:b5:0c:e3:
         d6:d5:6d:8c:07:ac:b4:58:d2:2f:cd:ba:72:f5:47:74:5d:6f:
         94:ff:91:f2:af:71:b0:c3:58:1c:25:62:64:fa:ce:e2:85:29:
         a4:bd:13:5c:3f:94:91:f8:57:e3:a9:24:50:d1:93:60:26:20:
         c7:f9:14:65:0d:10:1c:93:65:d6:ed:2f:db:26:5f:ca:5c:73:
         3c:f8:94:09:40:7f:c5:a4:dd:92:92:a5:f3:c7:d0:bf:23:ed:
         8b:ca:b0:f3:1f:2f:12:d3:7d:08:74:bd:04:5e:87:ad:2e:f0:
         d7:60:ee:b0
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEomirnpZ2drH4YYBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ3YmQ2NWYtODNkMi00MDQ2LWFkNjQtNDBiYTQ1ODQx
NWEyMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk
ZjE1MTYxY2QtNTZmOC00NDEwLTlhNzgtMjY3Y2U2ZTk2MDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1oKgw7qiulGav+M/cLOW/mHrbQ8qeTPMGUb
DOJRZFdXHI465Oi3Ww+BtjrJjTIlIP7kA6EodbbIjxp0NqqDs5Vi7pNcY+Y9NfXH
DsRL4kNqqUAmrA2AnhpAcZMFDFILXHFt5ZvW/f2t0eMNZqrJBZ/R01HqlSCf+v4e
iajGkThC+fUki7CSciVysNSqRt8ZIaLTXKrBIkOEIo8+fX5wnZA/YbfMtb3LSL7b
do36snWj57syRWUzeZ8DEut+a1Cane3IedK8t5DhXemq4KAeZfIfwBJGcUWnwxif
m+HMs2K/OIsGovMvm+pOeBIvNPo6x5nEJuRsR98rX5KfEQj8cQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFMLAob6Pf5LymejlqjMeZFgzlGeSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDdi
ZDY1Zi04M2QyLTQwNDYtYWQ2NC00MGJhNDU4NDE1YTIvZjA5NzBhMWUtMThkOS0z
YWIyLTk4MDMtZTUwM2IyNzgyZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ3YmQ2NWYtODNkMi00MDQ2LWFk
NjQtNDBiYTQ1ODQxNWEyL2ZkN2JkNjVmLTgzZDItNDA0Ni1hZDY0LTQwYmE0NTg0
MTVhMi5jcmwwHwYDVR0jBBgwFoAUcz2oFnyQe5iHVNEbg2WD3ys1MBIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDdiZDY1Zi04M2QyLTQwNDYtYWQ2NC00MGJh
NDU4NDE1YTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4ToMA8E
AgACMAkDBwAmIACNoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAosg85dRYythFQZewbZEi7/87VcAmsTvK
CmuibKZSQ8fj66na/eISZRA2gSDGyfDjvWn0/YjMEuQ4fJQqndlR++FsvVJyjPc6
8Lm2/GHThQvhCplTKd6sK56NtdoMCNwvqj9GgrwLSu6KfpJ63ts6wOpICMuMPybP
OzCJC2x3+S2sBHvPwr6jqx1FjyswtQzj1tVtjAestFjSL826cvVHdF1vlP+R8q9x
sMNYHCViZPrO4oUppL0TXD+UkfhX46kkUNGTYCYgx/kUZQ0QHJNl1u0v2yZfylxz
PPiUCUB/xaTdkpKl88fQvyPti8qw8x8vEtN9CHS9BF6HrS7w12DusA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 08:13:57 2025 by rpki-client