Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1e776e1-bd19-3aa8-881d-97f6084cb16f.roa
File:                     e1e776e1-bd19-3aa8-881d-97f6084cb16f.roa (raw, json)
Hash identifier:          W5+E9Xw8k9q4L96deiSEEEEOSa6cYAgCMC5JAekSKCc=
Subject key identifier:   84:D2:4E:EA:76:96:CA:74:6C:5F:B8:C8:65:25:C6:E0:55:64:7C:10
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B72C1F0E7BB4D6F5ECC132F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1e776e1-bd19-3aa8-881d-97f6084cb16f.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     16625
IP address blocks:        23.48.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:f0:e7:bb:4d:6f:5e:cc:13:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=037cfa94-e6f6-4087-bba6-b5b3c6f95e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b1:a2:75:92:d2:ea:49:f1:d1:53:f3:c8:86:
                    e2:cb:0c:e2:79:4c:07:21:ee:d5:f4:0b:8a:c3:57:
                    70:c4:03:00:5a:b5:1a:d4:78:a9:d3:ed:5b:db:9b:
                    23:66:a3:63:7c:06:ba:30:07:e3:60:7b:c4:06:45:
                    70:fd:50:c1:ee:bd:5e:e1:72:8a:7c:67:14:e8:23:
                    df:c3:04:ce:67:db:a9:a1:cf:27:d5:12:16:87:62:
                    4a:60:71:9c:4d:96:ab:3d:5c:9c:92:fc:ac:0a:65:
                    db:11:4a:13:ce:88:e9:cb:67:77:12:e3:38:ca:1a:
                    69:09:7f:53:60:59:9d:02:2f:ec:9e:3e:a2:38:6e:
                    91:01:d9:c4:08:fd:c2:54:4c:b8:c6:5c:8a:5f:d8:
                    84:f2:81:71:de:89:f4:90:f1:c0:02:0b:99:f8:a7:
                    94:77:2e:e4:4d:e4:c0:57:20:1d:18:0b:bc:a2:35:
                    0f:c3:db:35:d0:bd:3b:99:e8:71:a5:8a:93:3f:14:
                    92:7c:f5:8a:49:0d:9f:53:cc:25:69:34:5d:76:6a:
                    e5:ed:b7:cb:49:18:ef:67:2d:cf:c7:c7:ce:d2:49:
                    70:0e:74:b9:cf:e6:1c:9c:96:d8:5b:61:b8:f3:d7:
                    2b:a0:d3:bc:2c:2d:18:b0:86:6d:bd:3b:7e:1c:10:
                    31:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D2:4E:EA:76:96:CA:74:6C:5F:B8:C8:65:25:C6:E0:55:64:7C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1e776e1-bd19-3aa8-881d-97f6084cb16f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ca:9d:9f:9b:6e:b5:91:a5:21:6e:65:8d:10:e2:e8:9a:16:
         70:04:89:b7:0a:0e:a8:27:c3:9d:1c:bc:92:b7:c7:17:ce:fd:
         25:fe:e6:25:74:b3:25:29:72:d0:cf:09:91:e0:42:89:65:31:
         48:17:20:5d:8b:30:dd:00:3f:ee:71:60:74:9c:52:93:54:b0:
         b6:54:ea:ca:c2:6e:a0:92:5b:06:3a:f7:d4:20:5e:90:c4:8e:
         9a:a9:79:32:99:cf:b9:f0:95:00:a0:9b:94:39:b6:a4:98:60:
         d2:72:63:95:f1:fe:0b:bb:45:b4:90:d6:f9:97:04:e6:5d:84:
         0d:d2:19:b0:18:86:17:84:0b:07:06:e6:a3:2d:b4:20:1b:34:
         bc:30:df:65:d7:32:76:54:f0:86:e2:af:20:f4:eb:36:14:27:
         02:de:05:97:22:85:cf:59:cf:a2:22:2f:da:2a:e4:8e:2c:41:
         3e:b1:ec:cf:1f:2d:b5:73:51:48:38:d5:4f:e1:33:88:77:13:
         76:bd:33:62:26:09:6f:9d:a2:1d:88:77:bd:1b:19:f7:4c:2d:
         67:92:02:0f:f6:2c:fa:d0:fe:aa:da:46:f6:8c:73:55:af:09:
         04:91:b5:71:fc:f8:26:83:58:9d:14:c3:30:db:5b:ce:0c:ab:
         2e:a2:3c:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtywfDnu01vXswTLwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk
MDM3Y2ZhOTQtZTZmNi00MDg3LWJiYTYtYjViM2M2Zjk1ZTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbGidZLS6knx0VPzyIbiywzieUwHIe7V9AuK
w1dwxAMAWrUa1Hip0+1b25sjZqNjfAa6MAfjYHvEBkVw/VDB7r1e4XKKfGcU6CPf
wwTOZ9upoc8n1RIWh2JKYHGcTZarPVyckvysCmXbEUoTzojpy2d3EuM4yhppCX9T
YFmdAi/snj6iOG6RAdnECP3CVEy4xlyKX9iE8oFx3on0kPHAAguZ+KeUdy7kTeTA
VyAdGAu8ojUPw9s10L07mehxpYqTPxSSfPWKSQ2fU8wlaTRddmrl7bfLSRjvZy3P
x8fO0klwDnS5z+YcnJbYW2G489croNO8LC0YsIZtvTt+HBAxLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFITSTup2lsp0bF+4yGUlxuBVZHwQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTFlNzc2ZTEtYmQxOS0z
YWE4LTg4MWQtOTdmNjA4NGNiMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzCcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE3KnZ+bbrWRpSFuZY0Q4uiaFnAEibcKDqgnw50cvJK3xxfO/SX+5iV0
syUpctDPCZHgQollMUgXIF2LMN0AP+5xYHScUpNUsLZU6srCbqCSWwY699QgXpDE
jpqpeTKZz7nwlQCgm5Q5tqSYYNJyY5Xx/gu7RbSQ1vmXBOZdhA3SGbAYhheECwcG
5qMttCAbNLww32XXMnZU8IbiryD06zYUJwLeBZcihc9Zz6IiL9oq5I4sQT6x7M8f
LbVzUUg41U/hM4h3E3a9M2ImCW+doh2Id70bGfdMLWeSAg/2LPrQ/qraRvaMc1Wv
CQSRtXH8+CaDWJ0UwzDbW84Mqy6iPBY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:23:09 2025 by rpki-client