Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ba6c4f-c14f-33e1-b840-78fc58ce8ca0.roa
File:                     d9ba6c4f-c14f-33e1-b840-78fc58ce8ca0.roa (raw, json)
Hash identifier:          /IiM1nD+HVzNpjOGhPIp3G9T9Xw6Q/zngsaTfkLqBDM=
Subject key identifier:   7B:06:BA:36:80:70:66:61:7A:F1:1B:9D:04:14:B2:6C:70:2A:A8:AA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2CF70E00B04A4263899BF680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ba6c4f-c14f-33e1-b840-78fc58ce8ca0.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     5432
IP address blocks:        23.61.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:0e:00:b0:4a:42:63:89:9b:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=1c596d13-f446-4eda-bce1-a4f8288f1f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:6e:6e:5e:da:a4:c2:a9:f4:cf:56:10:f4:
                    e5:52:1c:35:55:61:c9:fc:6e:d7:d3:47:87:07:95:
                    07:ba:d6:a7:bc:3f:b9:ee:3c:b1:8d:f0:1d:a8:f6:
                    2a:47:df:63:e6:05:d9:16:52:f8:cb:df:5f:27:32:
                    aa:ca:61:03:9b:32:14:d7:e7:bf:ce:d0:a9:de:2e:
                    dd:99:f6:7c:c7:04:ad:82:a3:20:12:54:7b:6f:b6:
                    e0:06:0d:e9:0b:c1:77:23:66:43:b0:3b:58:f7:5f:
                    11:bf:cd:6c:0e:61:1b:bd:ca:06:bf:a8:93:42:9a:
                    2d:c3:f7:69:2f:2b:a3:ed:5e:9e:01:20:05:ec:ad:
                    ec:80:88:90:5f:21:96:e5:b6:00:99:e1:15:9a:65:
                    32:ab:6f:93:e0:9f:50:f6:e5:22:c4:e6:3b:4f:e6:
                    f6:b7:65:9e:69:82:d8:ae:a3:5f:30:7e:86:5a:b3:
                    91:33:70:0b:2c:8b:5d:4c:2d:d2:2f:c2:15:4a:f0:
                    3c:ab:6f:e1:c6:d1:dd:64:f1:3d:63:85:67:9e:51:
                    88:1f:c5:e2:38:ae:c6:5f:d2:74:29:68:a7:d9:c3:
                    05:43:c3:0f:f7:c1:b6:4c:23:3b:78:38:29:84:07:
                    23:be:6e:fa:4c:a4:cd:71:34:15:14:35:ab:49:17:
                    5c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:06:BA:36:80:70:66:61:7A:F1:1B:9D:04:14:B2:6C:70:2A:A8:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ba6c4f-c14f-33e1-b840-78fc58ce8ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.61.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:a2:82:d3:8d:3a:f1:e3:ba:f5:bc:48:1e:81:54:46:a7:
         55:e2:e8:90:78:0b:cb:d1:f1:a2:8e:72:c5:2a:21:46:fc:4a:
         ef:66:f7:a3:4e:0a:9e:b9:1a:c7:06:02:59:7a:d8:c7:d7:2e:
         d0:a7:9f:b7:4f:f1:0d:90:44:45:4f:28:dc:cb:fa:5e:a1:04:
         39:f7:b9:90:63:20:ad:9b:6b:23:b5:89:46:79:99:33:f7:ae:
         ee:ae:5a:ad:7f:4d:0f:39:83:11:6d:57:52:8c:7c:18:90:79:
         00:0c:e5:8e:3d:55:6f:0b:de:90:3c:d3:fa:44:34:3b:22:60:
         6d:ca:0e:b6:a2:fb:cc:e8:20:ee:93:4c:4b:42:f4:ab:fa:66:
         79:8e:37:ce:e0:ce:ca:fd:00:ac:f3:fc:30:ae:bf:ec:e0:13:
         91:64:bd:92:1f:a1:24:e3:3c:0f:c5:63:ee:94:26:d2:f8:cd:
         dd:ca:0c:a5:48:ba:72:91:aa:8b:65:44:af:18:af:e3:20:82:
         bc:cd:89:9b:e2:2a:3f:00:14:96:d4:1a:d4:5f:4b:72:4b:1e:
         30:e5:5b:ee:4d:7f:c5:af:40:33:22:98:ab:e1:12:66:50:e1:
         59:82:a1:f6:b9:ac:c4:3d:b5:29:c6:54:6d:97:59:87:b2:b6:
         82:76:e7:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9w4AsEpCY4mb9oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk
MWM1OTZkMTMtZjQ0Ni00ZWRhLWJjZTEtYTRmODI4OGYxZjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXlubl7apMKp9M9WEPTlUhw1VWHJ/G7X00eH
B5UHutanvD+57jyxjfAdqPYqR99j5gXZFlL4y99fJzKqymEDmzIU1+e/ztCp3i7d
mfZ8xwStgqMgElR7b7bgBg3pC8F3I2ZDsDtY918Rv81sDmEbvcoGv6iTQpotw/dp
Lyuj7V6eASAF7K3sgIiQXyGW5bYAmeEVmmUyq2+T4J9Q9uUixOY7T+b2t2WeaYLY
rqNfMH6GWrORM3ALLItdTC3SL8IVSvA8q2/hxtHdZPE9Y4VnnlGIH8XiOK7GX9J0
KWin2cMFQ8MP98G2TCM7eDgphAcjvm76TKTNcTQVFDWrSRdcbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHsGujaAcGZhevEbnQQUsmxwKqiqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDliYTZjNGYtYzE0Zi0z
M2UxLWI4NDAtNzhmYzU4Y2U4Y2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFz0EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHrooLTjTrx47r1vEgegVRGp1Xi6JB4C8vR8aKOcsUqIUb8Su9m96NO
Cp65GscGAll62MfXLtCnn7dP8Q2QREVPKNzL+l6hBDn3uZBjIK2bayO1iUZ5mTP3
ru6uWq1/TQ85gxFtV1KMfBiQeQAM5Y49VW8L3pA80/pENDsiYG3KDrai+8zoIO6T
TEtC9Kv6ZnmON87gzsr9AKzz/DCuv+zgE5FkvZIfoSTjPA/FY+6UJtL4zd3KDKVI
unKRqotlRK8Yr+MggrzNiZviKj8AFJbUGtRfS3JLHjDlW+5Nf8WvQDMimKvhEmZQ
4VmCofa5rMQ9tSnGVG2XWYeytoJ2558=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:53:28 2025 by rpki-client