Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/747c98aa-3dcb-318e-a7ce-35b9baa3affc.roa
File:                     747c98aa-3dcb-318e-a7ce-35b9baa3affc.roa (raw, json)
Hash identifier:          mhiO3dHQFTdqXsh9TWK24/KHJqhQga6fTrg9IbJk6yM=
Subject key identifier:   00:B4:A8:DA:7E:07:E2:01:CF:7A:CB:6B:A7:50:D0:4C:4E:24:A3:BC
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F4328584B153C2984FC67E754EE772B00
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/747c98aa-3dcb-318e-a7ce-35b9baa3affc.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        23.169.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:29:84:fc:67:e7:54:ee:77:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=e9467264-4b14-4d28-82d8-8e221ea7b0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:58:5b:4d:9f:e3:e0:36:33:f7:a1:51:d7:f1:
                    dd:8f:37:6a:65:99:ab:5e:76:ad:1e:41:e0:fb:bb:
                    ed:ad:0d:d4:76:7d:cd:a2:e7:2c:dd:6a:a7:63:8e:
                    23:0f:fe:e3:c0:6c:3d:af:2c:1b:3c:98:d7:81:da:
                    4f:ac:ae:34:e5:11:a8:56:67:20:97:cc:43:78:dc:
                    02:65:b8:04:78:da:94:bf:31:6b:c2:15:fc:c3:8f:
                    85:b1:f2:81:cd:fd:f2:1e:7c:90:4d:39:b5:8f:9a:
                    9b:ea:09:59:e6:a0:ec:9c:6b:e0:a8:db:90:a2:4d:
                    19:ad:30:96:f1:f2:f2:2e:90:ad:11:74:02:2e:4f:
                    7c:47:25:57:0b:07:75:a9:9d:83:4d:69:c0:39:13:
                    25:0f:b8:8b:dc:b7:a8:f5:32:d3:11:04:13:c6:14:
                    d7:bd:22:eb:72:a3:01:e8:c9:b8:97:ec:5d:48:1d:
                    c5:1c:1c:54:70:89:f5:29:92:4d:a1:fa:a2:cb:4e:
                    16:33:a8:2c:3b:b8:02:f3:ba:51:b1:d3:3f:6d:d0:
                    d7:65:9b:0d:70:13:9f:b7:62:ee:dd:a1:6b:3c:48:
                    02:ec:d9:f6:5e:2a:0d:81:e9:e6:83:da:56:39:08:
                    60:0e:38:d4:fb:9f:8e:48:00:1e:9d:38:17:91:8c:
                    df:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B4:A8:DA:7E:07:E2:01:CF:7A:CB:6B:A7:50:D0:4C:4E:24:A3:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/747c98aa-3dcb-318e-a7ce-35b9baa3affc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:63:a5:d7:5a:b4:90:a8:a7:6e:a8:93:12:f8:d6:37:60:ed:
         42:03:21:16:74:2d:12:44:e6:bb:4a:2c:42:01:d8:93:f0:2a:
         26:34:aa:3f:a8:4b:c3:85:65:97:42:55:93:4c:83:79:53:88:
         1d:81:d9:e1:e5:9b:0e:b3:04:20:9b:26:6d:3a:fa:b4:c3:a4:
         4d:cf:19:3b:cb:b8:bf:46:03:1a:53:3c:5d:b4:13:a6:c6:1f:
         6a:ba:28:3d:8c:ad:4e:eb:bd:49:32:40:42:2e:06:24:0b:7b:
         f8:48:f5:f4:84:d2:84:f9:b4:94:99:b1:40:3f:e3:53:cd:54:
         50:00:93:21:24:fd:ec:e4:a6:de:f1:3d:12:1c:70:a2:e4:7c:
         ea:75:59:eb:11:c2:5e:04:05:f2:6b:f7:04:74:69:b5:34:13:
         79:cd:79:b5:e9:c0:f6:37:62:f1:cb:d6:ea:dd:09:3a:a8:0c:
         bf:4b:9d:6e:0b:0a:c3:93:85:40:4c:92:df:5a:72:d4:9e:9d:
         11:20:87:39:b1:de:3d:fc:64:ea:4b:5f:6e:a0:49:5b:48:5a:
         0a:2c:ba:23:65:9e:5a:a4:c0:1c:18:56:82:f4:b1:9d:0c:55:
         48:45:0a:a3:60:c0:1c:d3:48:db:b1:93:8f:14:17:3f:e5:a0:
         4c:75:cc:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCmE/GfnVO53KwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyMjc5ZDgtMmVkNS00NzQ1LTkyMzEtOWRiZDEwYmJi
MWEyMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk
ZTk0NjcyNjQtNGIxNC00ZDI4LTgyZDgtOGUyMjFlYTdiMGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21hbTZ/j4DYz96FR1/HdjzdqZZmrXnatHkHg
+7vtrQ3Udn3Noucs3WqnY44jD/7jwGw9rywbPJjXgdpPrK405RGoVmcgl8xDeNwC
ZbgEeNqUvzFrwhX8w4+FsfKBzf3yHnyQTTm1j5qb6glZ5qDsnGvgqNuQok0ZrTCW
8fLyLpCtEXQCLk98RyVXCwd1qZ2DTWnAORMlD7iL3Leo9TLTEQQTxhTXvSLrcqMB
6Mm4l+xdSB3FHBxUcIn1KZJNofqiy04WM6gsO7gC87pRsdM/bdDXZZsNcBOft2Lu
3aFrPEgC7Nn2XioNgenmg9pWOQhgDjjU+5+OSAAenTgXkYzfowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAC0qNp+B+IBz3rLa6dQ0ExOJKO8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIy
NzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJkMTBiYmIxYTIvNzQ3Yzk4YWEtM2RjYi0z
MThlLWE3Y2UtMzViOWJhYTNhZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QyMjc5ZDgtMmVkNS00NzQ1LTky
MzEtOWRiZDEwYmJiMWEyLzNkMjI3OWQ4LTJlZDUtNDc0NS05MjMxLTlkYmQxMGJi
YjFhMi5jcmwwHwYDVR0jBBgwFoAUSb7JmMg+rj/d6ly9Ou3KOIKBHm4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIyNzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJk
MTBiYmIxYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6mpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZjpddatJCop26okxL41jdg7UIDIRZ0LRJE5rtKLEIB2JPwKiY0qj+o
S8OFZZdCVZNMg3lTiB2B2eHlmw6zBCCbJm06+rTDpE3PGTvLuL9GAxpTPF20E6bG
H2q6KD2MrU7rvUkyQEIuBiQLe/hI9fSE0oT5tJSZsUA/41PNVFAAkyEk/ezkpt7x
PRIccKLkfOp1WesRwl4EBfJr9wR0abU0E3nNebXpwPY3YvHL1urdCTqoDL9LnW4L
CsOThUBMkt9actSenREghzmx3j38ZOpLX26gSVtIWgosuiNlnlqkwBwYVoL0sZ0M
VUhFCqNgwBzTSNuxk48UFz/loEx1zOg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:09:25 2025 by rpki-client