Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f9eee90-326b-3257-ab82-d3ba1c5a2b15.roa
File:                     5f9eee90-326b-3257-ab82-d3ba1c5a2b15.roa (raw, json)
Hash identifier:          XxDf/CnogOSvt7oUIABJVOavCIrMFwbtDNj05Kb5sk4=
Subject key identifier:   47:79:E2:84:EB:96:D0:1D:80:E3:4D:D1:2E:C4:B4:D0:E3:63:E8:17
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A3A1598DC85407F65B3FD6D40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f9eee90-326b-3257-ab82-d3ba1c5a2b15.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     16625
IP address blocks:        23.40.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:98:dc:85:40:7f:65:b3:fd:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=3fbf9569-8670-47c8-9a4f-57ef23bda13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:64:d6:aa:a5:04:5c:73:e5:55:bd:58:c7:5c:
                    87:51:50:c4:c6:c0:76:1f:6e:68:94:29:14:f2:71:
                    10:22:f4:84:2b:ec:d4:59:88:75:80:28:1f:10:e5:
                    f0:5b:60:06:84:71:e2:5d:04:32:1a:1e:80:3f:db:
                    76:cd:09:f0:f4:ed:31:0c:38:6d:8e:a9:b1:4f:56:
                    29:92:e1:7e:1f:ba:dd:10:c1:52:e3:4d:c4:ac:66:
                    f2:18:2a:8c:f4:ff:57:46:5b:b2:a0:fe:12:58:83:
                    d5:eb:fd:5a:27:8f:d6:c6:e8:a4:ca:ce:80:9f:f0:
                    63:75:dc:80:f5:b8:89:81:a5:6a:67:93:48:71:e1:
                    25:1a:58:45:37:9f:37:06:73:ab:84:e0:85:da:86:
                    35:73:de:ce:5d:e4:b6:95:73:da:ca:24:a6:34:fb:
                    bc:d0:81:f7:3b:34:94:47:75:fb:ea:c6:a3:47:4c:
                    6d:13:a0:6d:56:de:5b:56:0b:be:11:92:0d:12:8d:
                    38:b3:42:94:b3:44:e1:22:c8:d2:34:3e:6a:10:f2:
                    8c:bb:f8:05:bc:41:d4:a3:1f:2f:2b:d1:2b:1c:a3:
                    be:36:44:ba:39:f9:25:b6:d0:e5:5c:09:63:36:e4:
                    a3:0a:3c:ef:ea:f8:2d:6e:77:31:d5:47:0a:ca:dd:
                    b6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:79:E2:84:EB:96:D0:1D:80:E3:4D:D1:2E:C4:B4:D0:E3:63:E8:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f9eee90-326b-3257-ab82-d3ba1c5a2b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.40.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:12:75:ae:5f:60:e7:22:8e:36:99:49:4d:49:ff:3e:53:eb:
         9e:b8:a0:37:c6:ba:69:83:56:9f:7f:e2:73:9f:82:7c:98:ce:
         e4:85:92:2d:a6:a6:2b:28:c6:f6:c5:fd:f4:12:4e:a2:63:78:
         b4:38:37:21:a8:fb:65:aa:fc:96:25:16:b4:a8:b5:0f:4c:e6:
         cc:45:7d:86:80:c1:bd:3c:36:48:17:e3:c6:d5:4a:c1:08:c4:
         3a:c4:ac:67:8d:c4:fb:8d:e2:93:a0:46:3d:f7:8d:0f:26:5f:
         51:a6:60:ca:23:52:05:6d:ea:6b:7f:fc:45:23:9c:ca:87:87:
         f9:87:27:8d:ea:be:e1:7c:fc:7f:ce:e9:ab:48:50:85:db:20:
         e5:76:2a:53:86:df:8c:2c:8a:b2:91:58:05:b1:3d:ad:46:6b:
         29:54:84:e0:a9:d7:ae:15:37:c8:2d:f6:cc:d2:f8:af:ce:73:
         04:74:80:68:61:7a:5a:2c:3e:ed:8d:87:f8:7f:09:b5:96:b8:
         e0:d8:6d:e8:a7:98:91:a8:d7:8a:96:bb:0d:88:69:d3:6f:a7:
         e7:c1:a1:71:5f:43:2d:c8:19:0b:03:65:49:9a:97:5f:17:ac:
         bb:fc:72:b1:7a:80:a7:c5:d7:af:26:72:ef:23:ec:44:0a:c4:
         06:6b:aa:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZjchUB/ZbP9bUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk
M2ZiZjk1NjktODY3MC00N2M4LTlhNGYtNTdlZjIzYmRhMTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWTWqqUEXHPlVb1Yx1yHUVDExsB2H25olCkU
8nEQIvSEK+zUWYh1gCgfEOXwW2AGhHHiXQQyGh6AP9t2zQnw9O0xDDhtjqmxT1Yp
kuF+H7rdEMFS403ErGbyGCqM9P9XRluyoP4SWIPV6/1aJ4/Wxuikys6An/BjddyA
9biJgaVqZ5NIceElGlhFN583BnOrhOCF2oY1c97OXeS2lXPayiSmNPu80IH3OzSU
R3X76sajR0xtE6BtVt5bVgu+EZINEo04s0KUs0ThIsjSND5qEPKMu/gFvEHUox8v
K9ErHKO+NkS6OfklttDlXAljNuSjCjzv6vgtbncx1UcKyt22CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEd54oTrltAdgONN0S7EtNDjY+gXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWY5ZWVlOTAtMzI2Yi0z
MjU3LWFiODItZDNiYTFjNWEyYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFygcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAgSda5fYOcijjaZSU1J/z5T6564oDfGummDVp9/4nOfgnyYzuSFki2m
pisoxvbF/fQSTqJjeLQ4NyGo+2Wq/JYlFrSotQ9M5sxFfYaAwb08NkgX48bVSsEI
xDrErGeNxPuN4pOgRj33jQ8mX1GmYMojUgVt6mt//EUjnMqHh/mHJ43qvuF8/H/O
6atIUIXbIOV2KlOG34wsirKRWAWxPa1GaylUhOCp164VN8gt9szS+K/OcwR0gGhh
elosPu2Nh/h/CbWWuODYbeinmJGo14qWuw2IadNvp+fBoXFfQy3IGQsDZUmal18X
rLv8crF6gKfF168mcu8j7EQKxAZrqjg=
-----END CERTIFICATE-----
Generated at Sun Jun 29 19:20:33 2025 by rpki-client