Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/f2a82324-0c03-3692-bfe0-a862152be9fd.roa
File:                     f2a82324-0c03-3692-bfe0-a862152be9fd.roa (raw, json)
Hash identifier:          RoPnieJKt1sks1y5HOjL8p4To3y46wh1210f1Z+oANU=
Subject key identifier:   A7:1F:59:BB:E7:13:E3:AB:81:55:E3:FF:DA:EA:13:41:55:C4:57:35
Certificate issuer:       /CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
Certificate serial:       010D0C9F4328584B233182E1709B3249A65CC200
Authority key identifier: EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/f2a82324-0c03-3692-bfe0-a862152be9fd.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     6461
IP address blocks:        23.172.184.0/24 maxlen: 24
                          2607:75c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:82:e1:70:9b:32:49:a6:5c:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=d6bdbaf7-9b77-44bf-8721-61c0646bf053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1f:5f:7a:fc:02:db:a9:4c:52:09:71:33:87:
                    f9:41:19:08:06:bd:3d:31:57:ce:51:6f:eb:fa:98:
                    f1:b6:ca:98:95:88:4c:86:ee:b0:27:61:9f:ed:81:
                    10:23:6c:40:59:6f:39:65:f1:01:9f:06:c4:ef:bd:
                    2d:ee:e5:17:dd:de:74:d6:04:9b:c9:fc:c1:43:9c:
                    37:5f:ec:71:33:ff:47:db:f9:21:d7:c6:69:39:3e:
                    11:de:fd:06:67:e5:e0:d7:ba:59:f0:4e:c2:8b:f5:
                    9e:ed:ea:eb:fd:6b:2b:e3:8d:f1:6f:2b:3b:23:dd:
                    c6:48:09:3a:60:16:d9:ab:ca:f5:4d:ea:c3:90:0b:
                    18:0c:53:b9:6e:6f:82:2d:70:88:3a:c5:4c:17:27:
                    f2:1d:24:24:11:83:c7:05:50:26:f8:5d:80:14:24:
                    9b:9d:d1:f6:1e:88:e9:fc:8e:26:16:8a:b0:ce:ea:
                    f8:96:ea:ac:a6:40:a7:92:c5:cf:14:de:35:e6:06:
                    55:54:da:e0:f9:e5:cd:0c:02:1a:3a:03:9f:6e:da:
                    a1:e5:f1:b2:83:0d:46:8f:9a:8b:b9:95:a7:44:10:
                    63:f0:de:a9:75:60:b3:52:dd:47:6e:46:9d:23:2d:
                    73:ef:0e:18:ea:d7:a2:7a:4b:99:ca:ce:63:0b:16:
                    dd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1F:59:BB:E7:13:E3:AB:81:55:E3:FF:DA:EA:13:41:55:C4:57:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/f2a82324-0c03-3692-bfe0-a862152be9fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl

            X509v3 Authority Key Identifier:
                keyid:EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.184.0/24
                IPv6:
                  2607:75c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d4:23:64:64:87:29:d8:d8:7c:58:6c:33:bd:de:cf:7c:8e:
         f4:cb:86:a2:79:cd:4c:4f:81:5d:48:f5:66:32:2d:b4:e4:1d:
         2b:e9:db:f6:39:49:ef:4a:0a:ca:4c:7a:5e:2f:63:58:63:04:
         91:92:f4:8d:c8:90:e9:2c:9d:42:29:b0:d6:a2:0a:ab:49:d0:
         12:05:7a:9b:0c:a4:c8:d2:3b:33:c2:4b:3a:13:e8:23:c3:23:
         fe:41:7d:33:b9:2c:78:f5:9f:62:c9:5d:a5:4d:83:5a:19:77:
         da:e8:bf:80:61:3e:76:75:83:03:05:65:95:66:78:58:8b:9d:
         7d:c2:6d:74:81:80:f7:42:8d:f5:8f:88:fc:5f:f4:5c:f8:bc:
         d3:46:00:d6:55:d7:30:c0:d2:15:2a:4c:5c:eb:6a:b3:a9:6b:
         54:dd:37:f0:d1:a9:e6:ed:e9:f1:c6:9b:86:26:15:c3:5a:1b:
         85:d6:8d:23:e6:77:bc:75:04:c1:48:4a:c1:cb:a3:64:e4:06:
         41:9c:b6:e3:a6:b5:2f:bd:ca:52:8a:df:09:65:a8:40:5e:a3:
         c5:47:99:79:69:4c:7e:7d:7b:89:53:9e:63:23:6d:2a:5c:5d:
         e5:05:40:89:e6:97:02:54:3a:11:c4:04:dc:84:30:a8:59:f5:
         13:41:de:b8
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEsjMYLhcJsySaZcwgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVlOGJhMzQtYmE0YS00NzVlLTlmOTgtNmZkODJhYWJj
NTk5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk
ZDZiZGJhZjctOWI3Ny00NGJmLTg3MjEtNjFjMDY0NmJmMDUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB9fevwC26lMUglxM4f5QRkIBr09MVfOUW/r
+pjxtsqYlYhMhu6wJ2Gf7YEQI2xAWW85ZfEBnwbE770t7uUX3d501gSbyfzBQ5w3
X+xxM/9H2/kh18ZpOT4R3v0GZ+Xg17pZ8E7Ci/We7err/Wsr443xbys7I93GSAk6
YBbZq8r1TerDkAsYDFO5bm+CLXCIOsVMFyfyHSQkEYPHBVAm+F2AFCSbndH2Hojp
/I4mFoqwzur4luqspkCnksXPFN415gZVVNrg+eXNDAIaOgOfbtqh5fGygw1Gj5qL
uZWnRBBj8N6pdWCzUt1HbkadIy1z7w4Y6teiekuZys5jCxbdCQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFKcfWbvnE+OrgVXj/9rqE0FVxFc1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kNWU4
YmEzNC1iYTRhLTQ3NWUtOWY5OC02ZmQ4MmFhYmM1OTkvZjJhODIzMjQtMGMwMy0z
NjkyLWJmZTAtYTg2MjE1MmJlOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDVlOGJhMzQtYmE0YS00NzVlLTlm
OTgtNmZkODJhYWJjNTk5L2Q1ZThiYTM0LWJhNGEtNDc1ZS05Zjk4LTZmZDgyYWFi
YzU5OS5jcmwwHwYDVR0jBBgwFoAU6gBu+RXgaHTpQEG6NUEVRA7yqmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kNWU4YmEzNC1iYTRhLTQ3NWUtOWY5OC02ZmQ4
MmFhYmM1OTkuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6y4MA0E
AgACMAcDBQAmB3XAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBACPUI2RkhynY2HxYbDO93s98jvTLhqJ5zUxP
gV1I9WYyLbTkHSvp2/Y5Se9KCspMel4vY1hjBJGS9I3IkOksnUIpsNaiCqtJ0BIF
epsMpMjSOzPCSzoT6CPDI/5BfTO5LHj1n2LJXaVNg1oZd9rov4BhPnZ1gwMFZZVm
eFiLnX3CbXSBgPdCjfWPiPxf9Fz4vNNGANZV1zDA0hUqTFzrarOpa1TdN/DRqebt
6fHGm4YmFcNaG4XWjSPmd7x1BMFISsHLo2TkBkGctuOmtS+9ylKK3wllqEBeo8VH
mXlpTH59e4lTnmMjbSpcXeUFQInmlwJUOhHEBNyEMKhZ9RNB3rg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:25 2025 by rpki-client