Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa
File:                     309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa (raw, json)
Hash identifier:          0zNDEexc/e5gaxHmpQonKCDMux4i+Zq9RVj2jtJ/Apc=
Subject key identifier:   B5:39:1F:50:8C:D3:87:E8:19:72:A8:21:03:F1:4C:16:AE:B3:F6:87
Certificate issuer:       /CN=7afbb48a-7a41-422c-a27b-4b92e0907153
Certificate serial:       010D0C9F4328584B2FC1B38A1217480BB3899180
Authority key identifier: 23:32:75:32:B4:3D:3A:70:02:BE:7C:A1:E6:FA:99:78:DC:8B:79:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     8095
IP address blocks:        23.180.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:b3:8a:12:17:48:0b:b3:89:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afbb48a-7a41-422c-a27b-4b92e0907153
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=4b14a380-0b7b-4d8e-b4d9-db8c0f70102a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ef:b0:69:91:14:88:83:55:bf:93:83:c4:28:
                    ee:12:c8:cb:ae:06:5c:fb:9f:7d:3d:c4:17:ae:0f:
                    70:1a:b0:11:88:35:67:4c:73:41:38:82:73:ed:03:
                    af:85:60:51:4f:cd:db:d1:9b:65:85:f1:d5:7e:89:
                    75:34:23:8b:7c:d2:d2:21:a3:b0:29:01:95:50:63:
                    06:54:af:74:6a:02:f2:7c:d4:74:38:40:e5:c8:4a:
                    e9:c8:0b:e2:6e:6f:9b:0c:47:60:98:24:ed:c4:d0:
                    1e:85:5d:d2:ef:ce:95:3e:be:fa:63:e5:44:b3:af:
                    1b:38:b3:c9:e6:e6:08:f7:7c:be:1a:39:ab:91:1e:
                    ee:14:3d:cb:05:0b:00:d0:ae:c2:6c:2c:b9:e8:7f:
                    01:c4:a4:c6:5e:0f:37:c0:ad:99:13:e9:6d:8f:c2:
                    18:b1:e8:24:57:65:2c:21:f8:ed:c3:06:d9:2c:31:
                    12:df:09:0d:5e:31:06:26:42:39:08:f2:8f:6b:f0:
                    d4:fb:82:a3:85:0b:e8:37:f1:f9:3d:68:77:1f:ae:
                    64:3c:a0:22:30:96:cd:9a:37:c6:d8:43:9e:bb:5f:
                    38:6b:b9:d4:f0:86:b6:51:64:d7:5d:01:ac:14:a0:
                    f2:ec:53:6e:05:8d:a4:20:32:84:ff:c4:6b:f7:93:
                    6c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:39:1F:50:8C:D3:87:E8:19:72:A8:21:03:F1:4C:16:AE:B3:F6:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.crl

            X509v3 Authority Key Identifier:
                keyid:23:32:75:32:B4:3D:3A:70:02:BE:7C:A1:E6:FA:99:78:DC:8B:79:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ca:6f:66:8e:82:91:da:3a:22:df:6f:26:95:22:3f:8a:0d:
         97:7a:c0:ae:33:31:29:e3:09:e3:13:8e:65:ad:72:f6:98:84:
         e8:89:09:07:0f:7d:a5:7c:72:cc:18:5c:77:a6:90:23:b2:19:
         95:8e:3e:3c:d7:ef:ef:58:46:24:b5:b6:8b:30:02:f7:6f:f9:
         21:83:4c:c1:d2:57:fc:c5:a9:9e:2f:87:e3:d5:18:be:56:18:
         25:5a:b8:41:37:ad:ca:6c:31:e5:09:19:dd:2c:af:d2:f8:6b:
         ac:78:4c:f4:d9:bb:d9:89:f7:19:0a:a9:02:a3:21:0b:b3:8b:
         9d:e9:ec:1b:c5:90:c9:c6:bd:f2:8e:75:3c:60:77:52:a9:4b:
         a0:60:4f:03:27:0b:7e:fa:67:eb:3e:a0:78:87:3d:ce:e7:55:
         7d:4b:fb:d1:8e:07:bd:43:72:69:1b:ae:0a:8d:5a:bf:b9:f2:
         79:5f:18:5d:af:31:11:a2:6b:cf:35:02:88:34:d6:20:5b:ba:
         c8:a4:b6:dd:a2:e4:5f:3b:5f:db:dd:04:3d:a1:7c:88:c6:42:
         e7:51:51:0c:20:82:2e:e9:bf:45:85:b0:fd:c8:d2:82:0a:ab:
         bc:20:79:e8:7f:9a:71:09:35:f8:82:d6:8e:87:84:9e:b6:9e:
         12:15:52:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwbOKEhdIC7OJkYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2FmYmI0OGEtN2E0MS00MjJjLWEyN2ItNGI5MmUwOTA3
MTUzMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk
NGIxNGEzODAtMGI3Yi00ZDhlLWI0ZDktZGI4YzBmNzAxMDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6u+waZEUiINVv5ODxCjuEsjLrgZc+599PcQX
rg9wGrARiDVnTHNBOIJz7QOvhWBRT83b0ZtlhfHVfol1NCOLfNLSIaOwKQGVUGMG
VK90agLyfNR0OEDlyErpyAvibm+bDEdgmCTtxNAehV3S786VPr76Y+VEs68bOLPJ
5uYI93y+GjmrkR7uFD3LBQsA0K7CbCy56H8BxKTGXg83wK2ZE+ltj8IYsegkV2Us
IfjtwwbZLDES3wkNXjEGJkI5CPKPa/DU+4KjhQvoN/H5PWh3H65kPKAiMJbNmjfG
2EOeu184a7nU8Ia2UWTXXQGsFKDy7FNuBY2kIDKE/8Rr95NsEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLU5H1CM04foGXKoIQPxTBaus/aHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83YWZi
YjQ4YS03YTQxLTQyMmMtYTI3Yi00YjkyZTA5MDcxNTMvMzA5YmNiMDEtNDk5MC0z
ODgyLWI3NzctN2VkNWY0YmZkZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvN2FmYmI0OGEtN2E0MS00MjJjLWEy
N2ItNGI5MmUwOTA3MTUzLzdhZmJiNDhhLTdhNDEtNDIyYy1hMjdiLTRiOTJlMDkw
NzE1My5jcmwwHwYDVR0jBBgwFoAUIzJ1MrQ9OnACvnyh5vqZeNyLeY4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy83YWZiYjQ4YS03YTQxLTQyMmMtYTI3Yi00Yjky
ZTA5MDcxNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7TYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC7Kb2aOgpHaOiLfbyaVIj+KDZd6wK4zMSnjCeMTjmWtcvaYhOiJCQcP
faV8cswYXHemkCOyGZWOPjzX7+9YRiS1toswAvdv+SGDTMHSV/zFqZ4vh+PVGL5W
GCVauEE3rcpsMeUJGd0sr9L4a6x4TPTZu9mJ9xkKqQKjIQuzi53p7BvFkMnGvfKO
dTxgd1KpS6BgTwMnC376Z+s+oHiHPc7nVX1L+9GOB71DcmkbrgqNWr+58nlfGF2v
MRGia881Aog01iBbusiktt2i5F87X9vdBD2hfIjGQudRUQwggi7pv0WFsP3I0oIK
q7wgeeh/mnEJNfiC1o6HhJ62nhIVUhg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:25:17 2025 by rpki-client