Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/948edde8-1857-46f3-a037-28fa868bc61d/7742cc35-0939-3ad1-b09a-a487604bb2c6.roa
File:                     7742cc35-0939-3ad1-b09a-a487604bb2c6.roa (raw, json)
Hash identifier:          Kq3WzAFVZbN0wvaTa9bBKeuHPxMRKlJJJcwltdCp38M=
Subject key identifier:   FD:C3:39:03:A4:43:C5:67:A9:CE:34:BE:05:2F:AD:6B:31:06:6B:69
Certificate issuer:       /CN=948edde8-1857-46f3-a037-28fa868bc61d
Certificate serial:       010D0C9F4328584B2E5C43D24BAEDC90B74D85E0
Authority key identifier: CA:14:6A:BE:48:BF:DB:F5:2B:43:8F:FF:A6:1A:66:78:D7:40:9E:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/948edde8-1857-46f3-a037-28fa868bc61d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/948edde8-1857-46f3-a037-28fa868bc61d/7742cc35-0939-3ad1-b09a-a487604bb2c6.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     8095
IP address blocks:        23.181.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/948edde8-1857-46f3-a037-28fa868bc61d/948edde8-1857-46f3-a037-28fa868bc61d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/948edde8-1857-46f3-a037-28fa868bc61d/948edde8-1857-46f3-a037-28fa868bc61d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/948edde8-1857-46f3-a037-28fa868bc61d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:43:d2:4b:ae:dc:90:b7:4d:85:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=948edde8-1857-46f3-a037-28fa868bc61d
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=5232547c-1bad-4b93-916e-1ef23044c229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:9d:b9:8c:49:2b:56:32:47:79:ad:72:a0:
                    f3:83:95:9f:5f:6e:dc:0b:9b:09:d0:01:db:b5:6a:
                    01:df:a0:27:19:08:bb:de:d1:cb:e7:47:3e:5a:73:
                    9f:14:48:8c:01:f0:36:76:b3:5e:1f:b5:5b:8f:fc:
                    6b:eb:3a:48:66:13:63:d4:de:bb:48:56:af:af:89:
                    19:da:55:24:16:48:f6:4e:f4:2a:71:38:04:9d:6b:
                    56:de:97:93:37:39:da:aa:de:24:ab:d5:70:60:05:
                    67:09:5b:04:52:6e:74:20:17:42:5a:c2:53:57:a2:
                    f8:3b:55:68:25:6d:43:e4:d5:66:26:42:49:e5:f9:
                    e0:33:40:3f:32:3c:ed:b2:b3:dd:be:5a:3c:3a:91:
                    f5:c1:4a:30:bf:5a:3c:01:c1:f7:3d:89:b1:d5:c7:
                    b2:ca:e0:39:0e:d6:98:fb:5e:fc:b3:c0:62:11:25:
                    8a:84:63:3d:fc:61:ba:95:cf:f9:bf:47:a8:11:88:
                    9b:07:8b:ab:dd:2c:42:12:ca:35:96:8d:35:14:14:
                    75:79:4c:f1:2b:cc:46:b2:34:4d:b2:b5:b2:dd:c9:
                    bd:b7:d9:2e:26:8f:b4:08:aa:13:4d:31:88:42:31:
                    c6:c3:3e:51:92:b8:1b:cf:d3:af:b1:f2:78:82:c4:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C3:39:03:A4:43:C5:67:A9:CE:34:BE:05:2F:AD:6B:31:06:6B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/948edde8-1857-46f3-a037-28fa868bc61d/7742cc35-0939-3ad1-b09a-a487604bb2c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/948edde8-1857-46f3-a037-28fa868bc61d/948edde8-1857-46f3-a037-28fa868bc61d.crl

            X509v3 Authority Key Identifier:
                keyid:CA:14:6A:BE:48:BF:DB:F5:2B:43:8F:FF:A6:1A:66:78:D7:40:9E:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/948edde8-1857-46f3-a037-28fa868bc61d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:cf:13:08:e6:41:1a:5c:fc:b2:e1:1c:15:51:dd:6a:f7:da:
         e7:42:95:b5:c6:c4:6a:6d:98:dd:50:4b:29:96:a8:ea:c8:fb:
         5f:32:61:91:fb:2e:ef:27:f6:d8:be:ea:4f:76:86:3f:c6:f1:
         57:14:f7:3e:06:22:0c:d0:aa:7a:9a:11:4b:2a:67:08:74:ee:
         f5:e4:72:64:ed:c6:39:e1:ed:54:d4:04:1f:57:8a:8f:a8:ca:
         5d:81:a1:e1:f0:1e:ea:32:4f:55:00:8c:b4:95:82:5f:13:b1:
         d0:e1:cd:a2:2e:78:8c:2f:36:4a:e2:27:79:64:4d:58:6e:85:
         f4:08:74:25:ae:18:0d:c7:a0:7d:16:48:da:88:d2:dc:ea:fb:
         8b:31:d0:96:ef:49:c8:36:f6:b4:e9:f4:2a:54:6b:02:fb:df:
         e3:b5:d3:ce:48:dd:d1:59:61:d4:c7:6a:97:a3:9b:17:96:c0:
         c7:d1:79:55:a3:6c:71:68:2f:1b:b8:ce:e0:70:bd:fc:8a:48:
         46:9a:43:e7:fe:f1:e2:3b:8e:82:ff:45:ab:f1:ec:7a:7d:c0:
         3f:b6:f5:08:0c:ce:61:b4:2a:75:64:7d:9b:9e:ee:79:f5:35:
         e0:a5:76:5b:5c:43:6d:92:72:a8:d6:02:45:08:cd:1b:0f:6d:
         70:65:c1:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXEPSS67ckLdNheAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ4ZWRkZTgtMTg1Ny00NmYzLWEwMzctMjhmYTg2OGJj
NjFkMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk
NTIzMjU0N2MtMWJhZC00YjkzLTkxNmUtMWVmMjMwNDRjMjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzOduYxJK1YyR3mtcqDzg5WfX27cC5sJ0AHb
tWoB36AnGQi73tHL50c+WnOfFEiMAfA2drNeH7Vbj/xr6zpIZhNj1N67SFavr4kZ
2lUkFkj2TvQqcTgEnWtW3peTNznaqt4kq9VwYAVnCVsEUm50IBdCWsJTV6L4O1Vo
JW1D5NVmJkJJ5fngM0A/MjztsrPdvlo8OpH1wUowv1o8AcH3PYmx1ceyyuA5DtaY
+178s8BiESWKhGM9/GG6lc/5v0eoEYibB4ur3SxCEso1lo01FBR1eUzxK8xGsjRN
srWy3cm9t9kuJo+0CKoTTTGIQjHGwz5Rkrgbz9OvsfJ4gsQkRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3DOQOkQ8Vnqc40vgUvrWsxBmtpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85NDhl
ZGRlOC0xODU3LTQ2ZjMtYTAzNy0yOGZhODY4YmM2MWQvNzc0MmNjMzUtMDkzOS0z
YWQxLWIwOWEtYTQ4NzYwNGJiMmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTQ4ZWRkZTgtMTg1Ny00NmYzLWEw
MzctMjhmYTg2OGJjNjFkLzk0OGVkZGU4LTE4NTctNDZmMy1hMDM3LTI4ZmE4Njhi
YzYxZC5jcmwwHwYDVR0jBBgwFoAUyhRqvki/2/UrQ4//phpmeNdAnmkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy85NDhlZGRlOC0xODU3LTQ2ZjMtYTAzNy0yOGZh
ODY4YmM2MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7XYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABHPEwjmQRpc/LLhHBVR3Wr32udClbXGxGptmN1QSymWqOrI+18yYZH7
Lu8n9ti+6k92hj/G8VcU9z4GIgzQqnqaEUsqZwh07vXkcmTtxjnh7VTUBB9Xio+o
yl2BoeHwHuoyT1UAjLSVgl8TsdDhzaIueIwvNkriJ3lkTVhuhfQIdCWuGA3HoH0W
SNqI0tzq+4sx0JbvScg29rTp9CpUawL73+O1085I3dFZYdTHapejmxeWwMfReVWj
bHFoLxu4zuBwvfyKSEaaQ+f+8eI7joL/Ravx7Hp9wD+29QgMzmG0KnVkfZue7nn1
NeCldltcQ22ScqjWAkUIzRsPbXBlwQQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:08:01 2025 by rpki-client