Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e6da1dd-b67f-3597-85bd-a7ae0191effe.roa
File:                     0e6da1dd-b67f-3597-85bd-a7ae0191effe.roa (raw, json)
Hash identifier:          kCp+saM03JwRPUxr7dPYm1fscwT6sUON8uV9jFNXAtY=
Subject key identifier:   E3:57:67:F0:00:4D:48:D0:A8:B2:9B:50:8A:DE:55:E9:52:3E:2C:22
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AD3A119C4501E3A67FDFC6280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e6da1dd-b67f-3597-85bd-a7ae0191effe.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     16625
IP address blocks:        23.65.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:19:c4:50:1e:3a:67:fd:fc:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=0a2c36d5-a057-4c24-8676-8cf3ec5e4544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:3d:fd:65:93:92:aa:b8:c8:90:91:f8:05:
                    91:2c:ad:24:dd:ce:ef:a5:69:74:e4:d9:9d:27:28:
                    b2:72:ef:73:a5:59:6f:fb:c4:a3:9f:94:1e:d7:39:
                    e1:bc:36:32:3d:c1:5f:cd:0c:b0:8c:31:b2:7f:66:
                    f2:cd:d4:58:ed:dc:73:88:22:62:29:90:be:98:4a:
                    92:8c:5e:cb:44:9c:45:a5:58:d6:fd:d0:b8:1c:6d:
                    52:67:5a:e2:c0:f6:92:46:47:b2:f2:b5:e2:fa:1c:
                    f2:db:f6:a6:c0:8f:83:5b:a3:79:a2:0f:1b:53:ad:
                    f8:16:75:08:72:0a:61:84:bc:c2:2c:d1:81:f2:6e:
                    87:49:82:53:1c:b4:24:d7:ee:1e:17:6e:e4:f0:d2:
                    12:73:c8:76:d8:68:55:be:00:7d:fa:57:3c:27:15:
                    92:67:e4:ef:f7:e6:47:f8:49:0e:db:34:c1:fa:b3:
                    6d:c8:ab:bf:fb:5a:32:bf:bd:c1:4d:20:ee:9a:21:
                    97:0e:c2:b8:f7:50:b4:29:8c:43:13:ab:23:c5:c7:
                    f5:8a:f6:94:60:2c:98:1c:61:c0:0b:83:cb:29:5d:
                    b2:fc:b9:0d:f7:f8:89:52:83:17:96:96:1f:47:7a:
                    e1:6a:d2:c4:65:c6:6b:00:12:af:36:cf:a2:3a:81:
                    b3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:57:67:F0:00:4D:48:D0:A8:B2:9B:50:8A:DE:55:E9:52:3E:2C:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e6da1dd-b67f-3597-85bd-a7ae0191effe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.65.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:31:6d:64:12:a2:f1:46:91:58:6b:0a:14:ae:a1:85:f1:45:
         54:dc:29:0f:39:14:6c:f9:19:5f:7d:83:7e:fb:c9:7a:02:77:
         98:d1:d2:d0:a5:ff:fa:ad:5f:99:9d:95:b3:04:e6:a7:bf:a5:
         35:d8:82:de:cb:e6:17:f5:c9:78:d2:88:66:2b:07:e7:e3:85:
         4c:39:7d:bb:d9:bd:17:6b:5d:9a:44:24:fd:1e:f3:e6:bc:f3:
         37:45:cc:bb:e1:f6:49:ff:2a:18:56:4b:ea:ef:e4:5a:09:82:
         4f:8a:28:ee:20:da:6a:34:0b:62:93:ff:04:05:2c:16:fd:2f:
         ae:7e:84:f9:0a:51:a6:20:a3:4d:2e:a2:96:7b:5f:66:5e:58:
         c4:f5:4f:ec:83:1b:80:7a:82:e4:51:ab:79:83:10:60:5e:a8:
         48:4a:8f:83:bb:a9:19:f7:33:86:71:e8:34:f5:02:7b:85:84:
         00:e5:77:f3:3c:78:17:47:80:b7:f4:7a:1b:c9:11:f2:76:27:
         ec:4e:20:ba:c1:85:e7:93:09:70:dc:57:f5:2d:db:2e:38:95:
         22:63:e3:77:fc:3e:62:e7:ce:e6:b7:87:cf:b7:08:2f:71:ac:
         6f:72:ee:a1:82:23:81:d0:77:d6:1c:b2:a5:7c:ef:5b:b6:94:
         a1:6a:d1:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToRnEUB46Z/38YoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk
MGEyYzM2ZDUtYTA1Ny00YzI0LTg2NzYtOGNmM2VjNWU0NTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6g9/WWTkqq4yJCR+AWRLK0k3c7vpWl05Nmd
Jyiycu9zpVlv+8Sjn5Qe1znhvDYyPcFfzQywjDGyf2byzdRY7dxziCJiKZC+mEqS
jF7LRJxFpVjW/dC4HG1SZ1riwPaSRkey8rXi+hzy2/amwI+DW6N5og8bU634FnUI
cgphhLzCLNGB8m6HSYJTHLQk1+4eF27k8NISc8h22GhVvgB9+lc8JxWSZ+Tv9+ZH
+EkO2zTB+rNtyKu/+1oyv73BTSDumiGXDsK491C0KYxDE6sjxcf1ivaUYCyYHGHA
C4PLKV2y/LkN9/iJUoMXlpYfR3rhatLEZcZrABKvNs+iOoGzcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFONXZ/AATUjQqLKbUIreVelSPiwiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGU2ZGExZGQtYjY3Zi0z
NTk3LTg1YmQtYTdhZTAxOTFlZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF0EUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwxbWQSovFGkVhrChSuoYXxRVTcKQ85FGz5GV99g377yXoCd5jR0tCl
//qtX5mdlbME5qe/pTXYgt7L5hf1yXjSiGYrB+fjhUw5fbvZvRdrXZpEJP0e8+a8
8zdFzLvh9kn/KhhWS+rv5FoJgk+KKO4g2mo0C2KT/wQFLBb9L65+hPkKUaYgo00u
opZ7X2ZeWMT1T+yDG4B6guRRq3mDEGBeqEhKj4O7qRn3M4Zx6DT1AnuFhADld/M8
eBdHgLf0ehvJEfJ2J+xOILrBheeTCXDcV/Ut2y44lSJj43f8PmLnzua3h8+3CC9x
rG9y7qGCI4HQd9YcsqV871u2lKFq0To=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:35:20 2025 by rpki-client