Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/348b678f-2094-3b08-9bea-241cf4481a30.roa
File:                     348b678f-2094-3b08-9bea-241cf4481a30.roa (raw, json)
Hash identifier:          hbc2V2HD2rF23FHDlwp1YLPHhIp9E3dA7ahI00qR2v4=
Subject key identifier:   81:79:35:73:F4:27:BE:B6:7A:79:49:42:92:E6:6C:7A:11:69:BF:18
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AD3A11C3807386C2E1AFF060A
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/348b678f-2094-3b08-9bea-241cf4481a30.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     16625
IP address blocks:        23.67.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:1c:38:07:38:6c:2e:1a:ff:06:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=e35d2c6e-38ad-4f9d-b90f-071d5b8db9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:71:83:ef:d1:a5:dc:3f:87:81:9a:08:e2:
                    61:f5:5f:d1:34:e1:01:80:32:1a:bd:19:d6:44:0c:
                    a5:b4:b2:44:3a:c0:5c:f6:9c:3d:20:d8:c9:22:2f:
                    ae:b2:c1:34:e7:f8:a1:e8:ec:f2:64:be:a7:74:92:
                    a1:86:12:40:7f:85:44:e6:75:09:21:3e:80:29:b0:
                    af:0c:67:da:03:49:d0:32:80:c7:79:c6:96:ff:32:
                    28:db:1a:77:8d:3b:39:84:84:af:c4:38:ee:e2:a2:
                    40:d3:50:7b:b7:75:24:7b:48:9d:78:55:59:ff:44:
                    96:87:93:93:57:f1:70:ce:6e:e6:c0:0e:3c:f9:16:
                    d8:d9:d2:d8:40:20:22:96:39:18:e6:57:d1:70:2d:
                    38:5d:a3:ad:e7:70:da:6a:51:73:0d:d9:22:f6:89:
                    62:43:cc:4b:79:d0:4a:bc:c3:2a:ef:00:8f:1b:03:
                    29:19:c1:72:a8:f4:fe:98:8c:50:79:3c:f1:79:d6:
                    b2:45:73:02:ce:9f:ca:e0:c5:d5:54:e2:63:38:a6:
                    71:41:37:03:e7:09:96:7a:17:23:f9:72:55:e6:63:
                    91:b8:4e:1d:f2:94:57:06:98:71:62:6f:3a:17:d3:
                    40:45:d9:49:db:66:e8:9c:cc:20:50:b5:27:a4:50:
                    22:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:79:35:73:F4:27:BE:B6:7A:79:49:42:92:E6:6C:7A:11:69:BF:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/348b678f-2094-3b08-9bea-241cf4481a30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.67.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c6:be:6b:a1:19:ce:e0:43:71:62:e7:59:91:35:4e:dc:f4:
         f4:2f:51:5d:76:7d:a6:54:d0:71:61:b3:a9:7e:48:bd:42:6d:
         0e:dc:b7:eb:54:0e:52:bc:6f:a7:f1:ea:d4:4b:e3:eb:28:23:
         f1:d4:09:8f:4b:c4:1d:68:91:c9:a0:2c:47:3c:ca:bd:14:ad:
         d4:f2:a3:4a:15:09:46:2a:32:0c:dc:67:88:67:c2:b6:de:47:
         ec:70:25:db:ce:b7:46:ec:cc:b5:a9:11:59:34:f0:b5:1d:64:
         20:d6:f8:ee:9b:11:f7:80:d5:3c:91:07:64:73:91:f0:95:d9:
         1b:8a:48:5b:47:d6:3d:a3:56:2d:43:bb:d5:ff:50:55:8f:11:
         84:b0:0f:fc:3e:a8:dc:02:52:ab:4b:f8:15:6e:86:62:26:e8:
         e3:46:6f:55:09:ea:ee:08:b6:46:6f:98:8d:59:97:8b:2f:fd:
         e0:f9:6e:53:a7:77:6e:ce:d7:78:4d:01:2e:8a:9d:17:4f:37:
         61:7f:e7:5c:fb:53:9a:11:36:4b:bb:84:e4:d9:f7:ab:0f:94:
         78:8a:1a:2e:ae:dc:c3:97:01:47:33:09:7b:3a:ed:c5:a5:9a:
         06:6a:b6:0a:33:3b:95:68:6a:1f:86:c6:be:b6:aa:75:c0:04:
         f4:ab:9e:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToRw4BzhsLhr/BgowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk
ZTM1ZDJjNmUtMzhhZC00ZjlkLWI5MGYtMDcxZDViOGRiOWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtZxg+/Rpdw/h4GaCOJh9V/RNOEBgDIavRnW
RAyltLJEOsBc9pw9INjJIi+ussE05/ih6OzyZL6ndJKhhhJAf4VE5nUJIT6AKbCv
DGfaA0nQMoDHecaW/zIo2xp3jTs5hISvxDju4qJA01B7t3Uke0ideFVZ/0SWh5OT
V/Fwzm7mwA48+RbY2dLYQCAiljkY5lfRcC04XaOt53DaalFzDdki9oliQ8xLedBK
vMMq7wCPGwMpGcFyqPT+mIxQeTzxedayRXMCzp/K4MXVVOJjOKZxQTcD5wmWehcj
+XJV5mORuE4d8pRXBphxYm86F9NARdlJ22bonMwgULUnpFAiYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIF5NXP0J762enlJQpLmbHoRab8YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQ4YjY3OGYtMjA5NC0z
YjA4LTliZWEtMjQxY2Y0NDgxYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF0OgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADXGvmuhGc7gQ3Fi51mRNU7c9PQvUV12faZU0HFhs6l+SL1CbQ7ct+tU
DlK8b6fx6tRL4+soI/HUCY9LxB1okcmgLEc8yr0UrdTyo0oVCUYqMgzcZ4hnwrbe
R+xwJdvOt0bszLWpEVk08LUdZCDW+O6bEfeA1TyRB2RzkfCV2RuKSFtH1j2jVi1D
u9X/UFWPEYSwD/w+qNwCUqtL+BVuhmIm6ONGb1UJ6u4ItkZvmI1Zl4sv/eD5blOn
d27O13hNAS6KnRdPN2F/51z7U5oRNku7hOTZ96sPlHiKGi6u3MOXAUczCXs67cWl
mgZqtgozO5Voah+Gxr62qnXABPSrnlc=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:35:44 2025 by rpki-client