Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55feb56f-9063-35fa-b052-afb680dd3ade.roa
File:                     55feb56f-9063-35fa-b052-afb680dd3ade.roa (raw, json)
Hash identifier:          rf5thJcOOmYe0c3E/17pF5Bt62ga5HSddtYRE8VktEI=
Subject key identifier:   DA:0D:D5:B4:D3:69:CE:0A:69:BB:E3:1C:B2:90:B3:CF:51:3F:AA:E6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5765DB8BD03C8DB921819680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55feb56f-9063-35fa-b052-afb680dd3ade.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     20940
IP address blocks:        23.192.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:db:8b:d0:3c:8d:b9:21:81:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=8acbd9b1-a8e1-4abb-a382-138819d31cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:58:f1:b9:82:b8:2b:77:55:0a:2f:32:ce:
                    86:85:8d:14:ff:25:5f:d1:5c:2c:eb:f5:17:37:ac:
                    51:4a:f5:92:7e:12:a7:c7:b1:93:a4:b3:df:e2:b4:
                    5d:10:5a:a8:6a:f0:7b:14:e1:b1:69:8d:59:67:05:
                    99:60:97:4b:8e:21:be:dc:b2:a5:ba:a2:cf:c2:4d:
                    30:6c:97:0e:5d:81:97:0b:f6:58:9a:66:e5:2a:3a:
                    a3:e5:c5:9a:31:37:4a:a3:af:01:0c:80:b1:1f:40:
                    2d:0d:0d:8c:1b:a0:ba:ba:9a:6b:45:ef:43:40:3f:
                    88:eb:92:ab:99:95:90:7d:78:2d:37:b3:d0:fd:c0:
                    8a:a3:79:7a:66:af:8c:4b:34:fe:38:03:ef:4b:e3:
                    9a:a7:69:7e:ab:92:a7:af:8e:22:83:7d:83:63:05:
                    fd:42:39:14:6c:f1:23:f2:12:5e:a1:bf:48:d2:14:
                    87:24:e2:fd:c8:78:35:ac:ab:1c:5b:0f:55:f7:25:
                    42:6d:d6:e6:fe:e8:af:dd:92:36:f7:3f:4a:70:84:
                    f0:2a:bf:7d:b8:2f:e8:14:b7:12:7c:ae:30:e3:c3:
                    7e:d0:ae:7e:5c:e1:64:08:f6:a5:70:1a:91:3e:d1:
                    5f:da:5c:45:93:b8:bf:6f:36:54:6c:66:da:51:7c:
                    e5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0D:D5:B4:D3:69:CE:0A:69:BB:E3:1C:B2:90:B3:CF:51:3F:AA:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55feb56f-9063-35fa-b052-afb680dd3ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:58:7a:33:a8:01:54:8e:44:b8:a7:bd:a8:75:c4:42:63:dc:
         c9:63:d7:c1:2b:e6:22:46:5e:4b:92:d1:a2:49:54:46:f4:95:
         d4:10:92:f2:0b:4b:94:72:af:6d:29:4e:1b:e3:45:70:b6:30:
         2a:7d:ad:4e:03:bd:55:12:3c:31:01:6a:b8:66:86:a9:b0:55:
         38:35:23:fc:44:7a:7d:6b:4f:ce:aa:0d:87:91:c9:5f:41:b2:
         6d:fe:53:0e:ca:ab:73:8f:ae:66:8a:ca:5c:81:20:cd:45:aa:
         10:6f:a7:63:eb:3a:c6:12:dc:0a:69:99:09:bf:6d:c4:84:39:
         c4:f3:14:5e:4a:63:36:59:29:0a:9d:82:15:bd:0d:86:0b:7b:
         3d:29:94:b6:82:92:61:1b:49:d3:59:00:bc:56:fb:22:ef:29:
         b7:9d:2f:78:98:e7:17:4f:0e:7a:58:16:b5:bb:e1:e4:65:3e:
         0d:40:7b:18:6e:56:ba:8e:d3:9e:4b:b1:ec:ad:f6:13:25:4d:
         07:9f:76:36:19:6e:72:b3:7c:d1:96:b2:5a:b0:d4:c4:db:2f:
         93:ac:78:61:75:f9:fc:3a:a2:93:d4:ce:03:cd:60:8f:3a:82:
         73:1d:4a:93:2a:4c:8a:99:e6:ec:2a:bf:a7:4d:4e:4c:c9:6d:
         ce:d1:f3:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZduL0DyNuSGBloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk
OGFjYmQ5YjEtYThlMS00YWJiLWEzODItMTM4ODE5ZDMxY2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp9Y8bmCuCt3VQovMs6GhY0U/yVf0Vws6/UX
N6xRSvWSfhKnx7GTpLPf4rRdEFqoavB7FOGxaY1ZZwWZYJdLjiG+3LKluqLPwk0w
bJcOXYGXC/ZYmmblKjqj5cWaMTdKo68BDICxH0AtDQ2MG6C6upprRe9DQD+I65Kr
mZWQfXgtN7PQ/cCKo3l6Zq+MSzT+OAPvS+Oap2l+q5Knr44ig32DYwX9QjkUbPEj
8hJeob9I0hSHJOL9yHg1rKscWw9V9yVCbdbm/uiv3ZI29z9KcITwKr99uC/oFLcS
fK4w48N+0K5+XOFkCPalcBqRPtFf2lxFk7i/bzZUbGbaUXzlEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNoN1bTTac4KabvjHLKQs89RP6rmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTVmZWI1NmYtOTA2My0z
NWZhLWIwNTItYWZiNjgwZGQzYWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8B3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAENYejOoAVSORLinvah1xEJj3Mlj18Er5iJGXkuS0aJJVEb0ldQQkvIL
S5Ryr20pThvjRXC2MCp9rU4DvVUSPDEBarhmhqmwVTg1I/xEen1rT86qDYeRyV9B
sm3+Uw7Kq3OPrmaKylyBIM1FqhBvp2PrOsYS3AppmQm/bcSEOcTzFF5KYzZZKQqd
ghW9DYYLez0plLaCkmEbSdNZALxW+yLvKbedL3iY5xdPDnpYFrW74eRlPg1Aexhu
VrqO055Lseyt9hMlTQefdjYZbnKzfNGWslqw1MTbL5OseGF1+fw6opPUzgPNYI86
gnMdSpMqTIqZ5uwqv6dNTkzJbc7R86c=
-----END CERTIFICATE-----
Generated at Sun Jun 29 13:51:25 2025 by rpki-client