Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1334152e-2583-37bf-87f6-7f569ffa4d42.roa
File:                     1334152e-2583-37bf-87f6-7f569ffa4d42.roa (raw, json)
Hash identifier:          rFNmXpQEmhkJpRcCO1I8kdxtF89mn29naT3bd3NX4aY=
Subject key identifier:   58:FA:62:33:13:3C:8D:32:64:E2:27:1B:36:07:BD:36:14:53:22:34
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F4328584AD7D107C25A793676B557BE00
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1334152e-2583-37bf-87f6-7f569ffa4d42.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     400536
IP address blocks:        23.134.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:07:c2:5a:79:36:76:b5:57:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=ceca3cca-703c-48e2-aaee-3df3552e039f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:9e:19:2a:58:98:40:bc:06:ae:e7:dc:e6:
                    48:a6:0d:1f:4d:9e:70:ab:05:d8:da:3b:97:41:b6:
                    ec:30:e4:dd:2f:40:f1:0b:7e:5b:fd:a8:39:7f:0d:
                    78:ee:5d:cd:de:17:ca:e4:dc:86:73:4a:c3:22:8f:
                    b1:0d:bc:52:d6:d7:53:1b:60:60:5b:5f:f7:31:c1:
                    9a:4b:a8:27:51:13:c1:57:2f:66:c6:7d:d7:9c:b3:
                    80:35:24:f9:f8:11:4e:59:3d:3b:fa:70:19:29:ac:
                    f0:ed:26:07:df:0e:90:e4:dc:01:97:fb:f9:73:44:
                    bd:53:5f:bf:07:37:4d:f5:fa:da:05:fa:c9:c8:e0:
                    77:eb:ed:41:23:e3:09:12:bc:4a:1c:f2:1f:74:5d:
                    84:34:f4:f7:b3:a6:c4:c3:2a:96:66:56:9d:70:8f:
                    0c:82:de:64:36:c5:da:61:b3:70:23:d6:88:f1:b0:
                    eb:97:cf:a6:a7:a9:33:81:e1:b6:4d:ca:09:75:80:
                    ec:0a:46:cd:57:79:18:47:81:9c:fd:ba:28:ab:bd:
                    3b:6a:67:f9:bd:01:93:f6:75:6d:52:91:81:73:6b:
                    af:3c:6c:af:8b:f1:d1:f8:7e:00:16:71:fb:4b:bf:
                    6d:6f:3a:d6:a9:ef:1d:cd:4c:a5:77:d5:9a:71:24:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FA:62:33:13:3C:8D:32:64:E2:27:1B:36:07:BD:36:14:53:22:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1334152e-2583-37bf-87f6-7f569ffa4d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:07:60:4f:72:fe:74:9e:17:ef:07:6f:f1:fe:72:c7:05:6f:
         71:a0:74:a3:5a:bf:7e:19:40:28:d3:d6:cf:e8:19:5a:9d:80:
         7d:fc:b6:be:e6:2d:a6:0b:fb:19:f6:e7:63:03:30:b4:35:0a:
         63:db:1e:b8:01:aa:e1:84:d9:be:88:90:bc:92:79:33:aa:25:
         2f:30:f7:9f:44:a3:bb:c4:88:8e:c8:b1:ef:0f:75:6e:93:3d:
         b9:df:0e:26:c7:67:8d:3a:1f:f9:3c:db:82:91:ea:56:83:d2:
         c4:73:63:e2:6f:3d:30:ec:74:94:2e:98:c7:86:85:33:62:a1:
         3c:0c:2d:f1:2d:26:14:5e:07:87:2f:86:7d:b5:73:8e:f5:f2:
         c4:4a:17:03:9a:66:98:b6:94:ab:52:85:87:e1:79:0a:f4:26:
         1a:6b:90:13:92:0c:64:59:0d:2c:30:32:94:12:7c:8f:fc:6b:
         11:3d:de:4e:aa:ad:fe:33:3b:02:0d:14:11:af:8f:a8:aa:00:
         95:a3:e9:d1:b3:53:19:36:8b:de:6e:bc:48:02:3d:f8:31:5f:
         9b:99:d4:05:f4:8e:a1:6f:ca:2d:41:ec:39:9c:01:98:46:24:
         b2:65:cc:8d:7e:62:e1:cc:9f:19:0b:20:89:55:e7:b8:8d:fe:
         05:c4:3f:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0QfCWnk2drVXvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz
Y2ZlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
Y2VjYTNjY2EtNzAzYy00OGUyLWFhZWUtM2RmMzU1MmUwMzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOGeGSpYmEC8Bq7n3OZIpg0fTZ5wqwXY2juX
QbbsMOTdL0DxC35b/ag5fw147l3N3hfK5NyGc0rDIo+xDbxS1tdTG2BgW1/3McGa
S6gnURPBVy9mxn3XnLOANST5+BFOWT07+nAZKazw7SYH3w6Q5NwBl/v5c0S9U1+/
BzdN9fraBfrJyOB36+1BI+MJErxKHPIfdF2ENPT3s6bEwyqWZladcI8Mgt5kNsXa
YbNwI9aI8bDrl8+mp6kzgeG2TcoJdYDsCkbNV3kYR4Gc/booq707amf5vQGT9nVt
UpGBc2uvPGyvi/HR+H4AFnH7S79tbzrWqe8dzUyld9WacSTw4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFj6YjMTPI0yZOInGzYHvTYUUyI0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4
ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvMTMzNDE1MmUtMjU4My0z
N2JmLTg3ZjYtN2Y1NjlmZmE0ZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj
M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5
M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4
MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4bYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEIHYE9y/nSeF+8Hb/H+cscFb3GgdKNav34ZQCjT1s/oGVqdgH38tr7m
LaYL+xn252MDMLQ1CmPbHrgBquGE2b6IkLySeTOqJS8w959Eo7vEiI7Ise8PdW6T
PbnfDibHZ406H/k824KR6laD0sRzY+JvPTDsdJQumMeGhTNioTwMLfEtJhReB4cv
hn21c4718sRKFwOaZpi2lKtShYfheQr0JhprkBOSDGRZDSwwMpQSfI/8axE93k6q
rf4zOwINFBGvj6iqAJWj6dGzUxk2i95uvEgCPfgxX5uZ1AX0jqFvyi1B7DmcAZhG
JLJlzI1+YuHMnxkLIIlV57iN/gXEPx8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:35:03 2025 by rpki-client