Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/38788932-00ab-3089-9e2a-44887f398caf.roa
File:                     38788932-00ab-3089-9e2a-44887f398caf.roa (raw, json)
Hash identifier:          uAjhi9D4YEjKbB+xCKb7rR5YQhWb28JUVkLivpTylbQ=
Subject key identifier:   C5:43:EF:4F:B1:03:A8:D9:ED:9F:99:9C:E8:70:DC:6C:E7:A5:83:91
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584A45403AC2BD42B4EF984EE680
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/38788932-00ab-3089-9e2a-44887f398caf.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     271
IP address blocks:        207.23.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:3a:c2:bd:42:b4:ef:98:4e:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=617eb3d1-5a58-479a-adea-ed55d81514b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:df:a8:14:ae:df:55:13:4b:f2:62:db:e2:28:
                    08:f9:a2:12:ea:b3:58:ed:41:ca:e2:0a:6c:38:e4:
                    d3:09:d4:ca:8b:52:0c:73:a0:f8:c9:f8:54:5b:e6:
                    fe:d9:8d:be:e6:0d:c7:d6:b0:0c:5f:3c:63:12:76:
                    33:f4:11:3f:69:10:d6:79:05:b9:3b:c3:e7:8a:cb:
                    92:26:82:4a:1e:5d:c1:63:65:99:e7:e7:fd:a6:42:
                    1d:a3:ff:31:9b:2c:df:d5:a1:92:16:20:34:48:58:
                    2b:e7:79:cc:c0:65:e7:6f:f7:da:09:33:c1:b9:82:
                    2a:14:ec:a7:63:56:15:f1:16:f7:c6:32:ee:d4:2a:
                    f9:80:e1:ce:d1:e0:63:9a:55:0b:06:e4:04:fd:73:
                    c1:1b:75:d3:a7:74:b9:d1:2c:b4:31:b1:5f:91:bd:
                    1b:56:46:84:c5:6c:09:c3:ed:a6:56:15:be:00:48:
                    60:f7:7d:17:ac:a0:6e:94:5c:4a:7e:24:05:ee:d8:
                    ec:d6:e4:78:7b:1e:72:f2:70:14:15:f9:77:30:09:
                    87:38:cb:64:fa:31:b0:d5:73:65:6f:8c:6a:bc:f4:
                    10:7a:34:f3:e1:5d:be:f1:c3:bf:1d:9a:d8:eb:54:
                    8d:1d:b4:15:11:e3:96:6d:b7:6a:9a:f4:e3:d2:f9:
                    00:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:43:EF:4F:B1:03:A8:D9:ED:9F:99:9C:E8:70:DC:6C:E7:A5:83:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/38788932-00ab-3089-9e2a-44887f398caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:8a:cf:88:68:dc:e1:ac:79:f7:f1:3b:52:66:cf:9b:81:93:
         43:85:2c:e4:fc:31:02:ea:78:9c:a9:c6:79:9a:54:15:b5:5f:
         b8:55:61:94:da:c1:1f:1a:42:4e:8f:da:bc:a0:40:1b:88:e8:
         7c:ae:ca:59:68:a3:f0:96:56:db:4f:6a:84:6b:40:e9:a8:9b:
         d6:91:0e:b3:25:f6:cc:f3:1a:f9:4c:0d:5e:4e:c1:68:c0:8b:
         aa:9d:f9:f7:d9:ba:94:ee:9e:23:ee:d0:bc:dc:fc:7a:4e:54:
         4e:66:ec:55:52:25:2b:22:3f:89:bc:80:59:77:9b:4c:18:4e:
         25:f1:3d:a3:fe:4f:f5:a6:cd:60:62:80:ee:f4:48:fb:db:83:
         e2:9a:c2:44:22:6d:aa:e0:cd:05:7f:07:38:82:1b:9f:e7:ad:
         14:2e:bc:a3:8e:ab:d5:2e:4f:80:dc:a1:cc:6e:d5:88:68:d9:
         64:21:51:91:7e:69:94:20:64:e0:7b:f9:35:4a:5c:fe:70:98:
         67:c8:e2:fd:74:e4:e0:9d:dc:7e:1a:7d:bf:16:81:f7:fc:30:
         30:e0:0b:80:3f:21:0c:17:d3:74:e5:36:e5:0f:af:8b:2e:b3:
         e5:29:fe:09:4c:33:56:78:96:41:be:37:f3:32:9d:2f:da:e9:
         d9:d2:8a:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQDrCvUK075hO5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk
NjE3ZWIzZDEtNWE1OC00NzlhLWFkZWEtZWQ1NWQ4MTUxNGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t+oFK7fVRNL8mLb4igI+aIS6rNY7UHK4gps
OOTTCdTKi1IMc6D4yfhUW+b+2Y2+5g3H1rAMXzxjEnYz9BE/aRDWeQW5O8PnisuS
JoJKHl3BY2WZ5+f9pkIdo/8xmyzf1aGSFiA0SFgr53nMwGXnb/faCTPBuYIqFOyn
Y1YV8Rb3xjLu1Cr5gOHO0eBjmlULBuQE/XPBG3XTp3S50Sy0MbFfkb0bVkaExWwJ
w+2mVhW+AEhg930XrKBulFxKfiQF7tjs1uR4ex5y8nAUFfl3MAmHOMtk+jGw1XNl
b4xqvPQQejTz4V2+8cO/HZrY61SNHbQVEeOWbbdqmvTj0vkA8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMVD70+xA6jZ7Z+ZnOhw3GznpYORMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMzg3ODg5MzItMDBhYi0z
MDg5LTllMmEtNDQ4ODdmMzk4Y2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzxdYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFKKz4ho3OGseffxO1Jmz5uBk0OFLOT8MQLqeJypxnmaVBW1X7hVYZTa
wR8aQk6P2rygQBuI6Hyuylloo/CWVttPaoRrQOmom9aRDrMl9szzGvlMDV5OwWjA
i6qd+ffZupTuniPu0Lzc/HpOVE5m7FVSJSsiP4m8gFl3m0wYTiXxPaP+T/WmzWBi
gO70SPvbg+KawkQibargzQV/BziCG5/nrRQuvKOOq9UuT4Dcocxu1Yho2WQhUZF+
aZQgZOB7+TVKXP5wmGfI4v105OCd3H4afb8Wgff8MDDgC4A/IQwX03TlNuUPr4su
s+Up/glMM1Z4lkG+N/MynS/a6dnSiqI=
-----END CERTIFICATE-----
Generated at Mon Jun 30 11:49:25 2025 by rpki-client