Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903197c9-cdb7-354b-88c0-233ae6bec329.roa
File:                     903197c9-cdb7-354b-88c0-233ae6bec329.roa (raw, json)
Hash identifier:          +7uaWk0E8v/h5e7tAaR/Q2ESHqJxc1QED0Fu6FaD3m8=
Subject key identifier:   10:C3:DD:E5:2D:EE:2A:B0:E9:C6:5F:A6:95:88:A9:5B:E6:88:AF:B8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A43DB2DDF5D0B39A783EB6900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903197c9-cdb7-354b-88c0-233ae6bec329.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     20940
IP address blocks:        23.52.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:2d:df:5d:0b:39:a7:83:eb:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=daedd299-381b-49cf-9670-ae26dfa93c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:15:3f:aa:16:51:4e:df:a3:17:94:ba:4c:30:
                    ee:0e:a3:3b:ac:05:8d:e4:ad:0a:8d:4c:85:87:8d:
                    51:26:d4:25:c1:05:78:da:ff:34:7e:64:62:60:67:
                    45:d4:4a:c8:67:fb:f6:2c:c2:00:44:86:00:be:c6:
                    d6:4c:0f:75:ca:72:d7:fb:98:17:ea:a2:84:e3:a9:
                    a2:0f:79:6c:a4:d9:7d:e0:4e:65:f3:8b:d1:c5:e1:
                    08:f1:c2:84:e8:3c:3a:48:7c:a4:4c:47:7a:2c:ed:
                    9b:02:80:d3:4e:dd:b5:79:22:dd:f5:41:69:da:93:
                    27:a4:1c:7d:4a:94:95:09:3f:ac:b3:b2:bb:1c:a9:
                    9b:7f:b3:05:66:55:60:88:1b:ab:f3:50:e5:2f:88:
                    a4:d9:08:85:54:48:c6:d6:c0:f1:3f:41:1c:9d:fb:
                    32:44:b9:44:ea:97:b7:3d:f5:d6:c0:4a:02:b2:55:
                    f3:1b:a2:1f:e6:b2:5c:bc:a8:18:38:ac:85:c8:41:
                    ec:2b:78:f0:05:a6:3a:a5:e2:ff:5c:fe:ca:25:fd:
                    38:b9:9c:4e:92:27:04:06:06:50:bd:e0:67:51:74:
                    90:fc:3c:64:23:1b:08:4c:8d:12:6c:6c:81:2a:a0:
                    9c:98:d1:9d:25:c7:1d:52:ec:75:7b:42:42:5d:e0:
                    e9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C3:DD:E5:2D:EE:2A:B0:E9:C6:5F:A6:95:88:A9:5B:E6:88:AF:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903197c9-cdb7-354b-88c0-233ae6bec329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e1:39:b9:25:fb:b4:90:d6:6f:0e:6b:76:17:a0:e9:f5:9e:
         d5:ee:51:e6:fc:bf:49:36:92:c5:6a:e3:d2:4b:02:ee:f4:b5:
         92:c1:ab:b6:18:ab:fe:90:52:f2:c6:84:2a:52:5c:44:80:cf:
         14:95:98:08:7a:2e:fd:c6:2f:88:23:60:11:e2:57:30:ce:26:
         ed:55:d6:d6:7c:bb:c1:64:2f:c0:20:e5:14:de:d3:ae:7f:cb:
         e5:ce:fe:ea:a6:61:3f:27:95:2e:5c:19:a5:fc:5c:e3:67:2c:
         cc:21:2f:4a:6d:9d:07:21:d1:f6:d1:48:5f:67:8d:24:ed:d8:
         6f:04:89:87:68:c8:ff:ad:40:b7:03:e2:24:60:c3:5b:0c:53:
         e0:28:48:00:ca:7b:18:7f:22:dc:09:20:08:b8:9e:10:71:fd:
         c7:ce:0b:e1:f9:9b:54:36:8a:36:8e:47:6b:eb:d5:9b:7a:e4:
         2d:ec:4a:b0:ce:23:fc:79:ae:0c:6b:62:6c:82:c9:1d:f2:77:
         aa:d5:82:13:3c:e8:75:85:33:22:28:0d:67:95:99:12:f6:29:
         7e:c7:6b:e4:34:c4:d1:3f:7f:51:a0:b6:54:42:95:cf:7f:74:
         3c:aa:cd:25:6f:c9:cb:49:17:b0:8a:72:1d:b8:86:91:77:da:
         3f:01:c1:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2y3fXQs5p4PraQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk
ZGFlZGQyOTktMzgxYi00OWNmLTk2NzAtYWUyNmRmYTkzYzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRU/qhZRTt+jF5S6TDDuDqM7rAWN5K0KjUyF
h41RJtQlwQV42v80fmRiYGdF1ErIZ/v2LMIARIYAvsbWTA91ynLX+5gX6qKE46mi
D3lspNl94E5l84vRxeEI8cKE6Dw6SHykTEd6LO2bAoDTTt21eSLd9UFp2pMnpBx9
SpSVCT+ss7K7HKmbf7MFZlVgiBur81DlL4ik2QiFVEjG1sDxP0EcnfsyRLlE6pe3
PfXWwEoCslXzG6If5rJcvKgYOKyFyEHsK3jwBaY6peL/XP7KJf04uZxOkicEBgZQ
veBnUXSQ/DxkIxsITI0SbGyBKqCcmNGdJccdUux1e0JCXeDpTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBDD3eUt7iqw6cZfppWIqVvmiK+4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTAzMTk3YzktY2RiNy0z
NTRiLTg4YzAtMjMzYWU2YmVjMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzQBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvhObkl+7SQ1m8Oa3YXoOn1ntXuUeb8v0k2ksVq49JLAu70tZLBq7YY
q/6QUvLGhCpSXESAzxSVmAh6Lv3GL4gjYBHiVzDOJu1V1tZ8u8FkL8Ag5RTe065/
y+XO/uqmYT8nlS5cGaX8XONnLMwhL0ptnQch0fbRSF9njSTt2G8EiYdoyP+tQLcD
4iRgw1sMU+AoSADKexh/ItwJIAi4nhBx/cfOC+H5m1Q2ijaOR2vr1Zt65C3sSrDO
I/x5rgxrYmyCyR3yd6rVghM86HWFMyIoDWeVmRL2KX7Ha+Q0xNE/f1GgtlRClc9/
dDyqzSVvyctJF7CKch24hpF32j8Bwag=
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:13:44 2025 by rpki-client