Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/551e56a5-bb43-37d6-a288-ec146121eccf.roa
File:                     551e56a5-bb43-37d6-a288-ec146121eccf.roa (raw, json)
Hash identifier:          kOvaRJz1vAfk73i/ebTLUmtOchYdHDA7T418iRmFDbc=
Subject key identifier:   3E:A8:B7:90:FF:AB:F0:9A:5B:2A:EF:45:0F:5F:6C:CF:C2:64:1E:57
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B434C9C238A3898A58315DE40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/551e56a5-bb43-37d6-a288-ec146121eccf.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        23.41.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:9c:23:8a:38:98:a5:83:15:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=09d08aa8-4367-40ec-a173-e2088f31ca28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b9:c7:41:98:19:70:2c:25:45:4c:10:03:f9:
                    77:10:03:13:2b:52:67:ba:16:b9:95:99:92:f2:09:
                    6d:d4:4f:83:86:85:e7:b5:6f:65:19:ba:cd:b5:22:
                    37:4f:d3:a7:c7:61:54:2e:ba:e2:ce:68:86:5b:4e:
                    ff:04:0f:e2:48:3b:d2:fc:d9:63:71:7a:6a:d0:ed:
                    cc:c9:92:60:eb:ec:91:ce:30:96:d2:ff:8d:8e:06:
                    82:e3:35:b5:e3:e8:9b:a6:04:0c:d8:f3:89:91:e2:
                    11:82:3d:01:ff:39:63:f8:6f:88:a2:05:ed:44:e8:
                    26:5e:59:a0:8c:6a:3a:c8:54:6f:8b:48:29:af:0c:
                    49:91:31:5c:1a:f4:29:56:7b:0c:7b:53:25:45:3b:
                    82:60:95:69:e2:0e:43:03:6c:f2:50:38:19:65:c4:
                    55:9c:9a:c8:4f:b6:3d:6e:bc:7b:55:46:2f:a4:f3:
                    e7:fc:16:1d:8f:ac:02:0e:ed:5b:f7:33:dc:fb:59:
                    01:e6:cb:ed:77:49:09:eb:07:b5:4f:70:cc:ea:db:
                    7b:e3:d6:3d:13:c2:03:19:4f:7c:85:4c:a4:80:2f:
                    a0:05:54:5d:a6:52:ee:1d:7f:e0:c3:d4:e0:6c:16:
                    96:ff:33:d5:41:5a:64:a0:4f:a7:9b:9f:e6:3c:42:
                    70:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A8:B7:90:FF:AB:F0:9A:5B:2A:EF:45:0F:5F:6C:CF:C2:64:1E:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/551e56a5-bb43-37d6-a288-ec146121eccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.41.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:f6:3c:26:e1:82:58:c4:75:52:56:20:c4:12:11:60:da:30:
         6c:ee:26:81:e1:78:7f:fa:42:a6:37:c9:ea:0c:14:96:de:84:
         da:a8:99:e8:c2:d0:22:42:30:af:6b:31:9f:70:e7:1f:49:46:
         eb:a7:4c:a8:84:6b:6c:6a:c0:fb:6e:2a:ab:90:69:38:0e:95:
         2a:94:c7:4c:16:aa:31:fa:b2:45:5a:92:bc:a2:a6:ab:20:79:
         6e:40:91:7e:79:c1:ab:72:9a:4b:a6:70:e0:68:de:cb:0c:b2:
         1a:26:9c:e4:86:57:1f:61:2d:52:9e:31:96:3b:4d:8c:50:58:
         46:0f:1e:f0:95:c8:e8:67:e5:a3:4f:06:35:ba:43:21:ac:e4:
         e3:32:77:3c:b6:2c:b3:e4:96:4b:cb:bc:67:82:3b:4d:b5:6e:
         17:df:ee:8b:a5:5b:db:81:93:f9:01:30:d9:43:e0:af:88:c2:
         80:90:1e:7c:31:75:4d:7c:c5:9b:15:00:71:f0:00:c2:84:cb:
         a1:ff:50:5d:9a:33:ce:bc:76:ea:85:86:cf:33:e8:6f:5e:f2:
         bb:d3:4e:79:1f:03:81:27:94:25:ec:40:2c:1a:b9:6e:54:11:
         9b:26:d6:89:32:a4:4c:d1:63:41:ff:83:04:e0:2d:68:b1:2a:
         87:f1:3b:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTJwjijiYpYMV3kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
MDlkMDhhYTgtNDM2Ny00MGVjLWExNzMtZTIwODhmMzFjYTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirnHQZgZcCwlRUwQA/l3EAMTK1Jnuha5lZmS
8glt1E+DhoXntW9lGbrNtSI3T9Onx2FULrrizmiGW07/BA/iSDvS/NljcXpq0O3M
yZJg6+yRzjCW0v+NjgaC4zW14+ibpgQM2POJkeIRgj0B/zlj+G+IogXtROgmXlmg
jGo6yFRvi0gprwxJkTFcGvQpVnsMe1MlRTuCYJVp4g5DA2zyUDgZZcRVnJrIT7Y9
brx7VUYvpPPn/BYdj6wCDu1b9zPc+1kB5svtd0kJ6we1T3DM6tt749Y9E8IDGU98
hUykgC+gBVRdplLuHX/gw9TgbBaW/zPVQVpkoE+nm5/mPEJw8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6ot5D/q/CaWyrvRQ9fbM/CZB5XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTUxZTU2YTUtYmI0My0z
N2Q2LWEyODgtZWMxNDYxMjFlY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFymlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGb2PCbhgljEdVJWIMQSEWDaMGzuJoHheH/6QqY3yeoMFJbehNqomejC
0CJCMK9rMZ9w5x9JRuunTKiEa2xqwPtuKquQaTgOlSqUx0wWqjH6skVakryipqsg
eW5AkX55watymkumcOBo3ssMshomnOSGVx9hLVKeMZY7TYxQWEYPHvCVyOhn5aNP
BjW6QyGs5OMydzy2LLPklkvLvGeCO021bhff7oulW9uBk/kBMNlD4K+IwoCQHnwx
dU18xZsVAHHwAMKEy6H/UF2aM868duqFhs8z6G9e8rvTTnkfA4EnlCXsQCwauW5U
EZsm1okypEzRY0H/gwTgLWixKofxO+c=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:32:31 2025 by rpki-client