Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8ecbb0c-dd54-37fc-a608-d333bef477ed.roa
File:                     f8ecbb0c-dd54-37fc-a608-d333bef477ed.roa (raw, json)
Hash identifier:          AIC956TbsOxuF6HjCMnDl73r0vTD+F+HnDJYFiKlT6M=
Subject key identifier:   EC:2F:77:70:C7:74:5A:B8:D7:83:D6:E8:8E:82:74:85:68:B4:28:9C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B328C4C9D2A70F37932457150
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8ecbb0c-dd54-37fc-a608-d333bef477ed.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        23.209.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:4c:9d:2a:70:f3:79:32:45:71:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=6409fb12-b54e-47a3-8665-52bdc51d48f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:8a:bd:e2:6f:71:59:60:eb:d5:a7:79:55:
                    cc:27:5d:62:fe:1c:e0:86:9f:4f:78:5c:e2:40:9d:
                    5e:8a:f2:ca:ec:8c:0a:ec:74:19:8a:39:1a:36:b9:
                    90:6a:03:ad:57:61:d1:8a:25:ed:98:cc:04:ae:34:
                    b2:46:f7:ba:2f:a1:82:70:ca:87:51:76:a6:05:34:
                    71:1a:85:e9:00:da:27:9d:da:b7:a3:98:6a:39:d3:
                    cc:59:c9:ea:91:95:e7:84:cc:e8:64:90:d9:1a:82:
                    6c:18:fe:58:58:3f:51:33:15:8a:e0:ae:8e:f5:a7:
                    95:5f:da:76:29:6c:5f:75:1b:b0:d8:e9:68:28:13:
                    db:08:18:f0:9e:ef:49:7b:bd:8f:11:4a:fa:b7:8b:
                    82:1c:41:1e:55:8d:fc:56:a8:36:b2:ef:e4:11:37:
                    8d:27:15:9c:35:3a:f8:b0:c6:3d:2f:0f:85:d2:8d:
                    5f:0a:f1:59:94:1b:09:89:37:6c:34:ab:2e:19:81:
                    9b:de:21:bb:32:80:ef:e5:99:b6:7f:b6:ba:fc:42:
                    6b:16:8e:ec:0c:01:74:a5:4f:e0:ce:36:d4:29:c9:
                    1f:40:db:7c:4e:78:ff:73:01:e6:ac:c3:e3:d7:7e:
                    15:22:78:02:33:59:2b:37:34:d6:d4:e5:0c:fa:e2:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2F:77:70:C7:74:5A:B8:D7:83:D6:E8:8E:82:74:85:68:B4:28:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8ecbb0c-dd54-37fc-a608-d333bef477ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.209.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:18:20:df:45:a1:53:e1:ae:2b:e5:82:6a:d0:90:06:a2:f0:
         31:55:ce:a4:38:70:ba:34:9b:50:46:22:2b:50:0f:b6:37:26:
         44:37:3d:aa:72:05:d9:4d:d2:8d:2a:69:fb:ba:1e:9a:36:77:
         6c:06:06:f8:a4:18:b2:53:71:7c:6d:30:c9:b9:38:cc:f5:66:
         84:a8:35:c1:d4:e6:6f:42:91:a4:05:c7:17:8d:e2:97:05:5e:
         65:9d:fe:51:8e:23:72:86:4e:89:e3:c6:bc:87:3a:5f:14:02:
         08:65:8b:25:29:a3:6a:0d:80:84:61:26:15:2e:10:3b:d8:30:
         21:41:8f:b2:72:3d:02:be:7c:5b:1a:79:a7:a3:9f:e8:5b:4f:
         2a:33:2f:8a:37:40:bf:43:20:0a:f9:c4:99:bf:de:c4:0e:07:
         43:08:f2:c6:bc:b5:d4:86:3e:11:6b:10:b0:5d:12:9e:3a:36:
         34:db:0c:1e:d1:74:c1:79:80:61:9a:ce:a7:d9:bf:64:48:3d:
         c4:93:bd:0c:f3:7a:d5:61:99:50:8d:e9:e4:d4:56:74:ee:a7:
         82:4b:0c:82:3b:0d:c1:19:e6:52:30:50:0c:ea:59:91:5f:33:
         6b:3e:c9:58:66:7a:7d:52:4b:bc:55:93:1d:85:1a:65:25:8f:
         82:ef:f7:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEydKnDzeTJFcVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
NjQwOWZiMTItYjU0ZS00N2EzLTg2NjUtNTJiZGM1MWQ0OGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsweKveJvcVlg69WneVXMJ11i/hzghp9PeFzi
QJ1eivLK7IwK7HQZijkaNrmQagOtV2HRiiXtmMwErjSyRve6L6GCcMqHUXamBTRx
GoXpANonndq3o5hqOdPMWcnqkZXnhMzoZJDZGoJsGP5YWD9RMxWK4K6O9aeVX9p2
KWxfdRuw2OloKBPbCBjwnu9Je72PEUr6t4uCHEEeVY38Vqg2su/kETeNJxWcNTr4
sMY9Lw+F0o1fCvFZlBsJiTdsNKsuGYGb3iG7MoDv5Zm2f7a6/EJrFo7sDAF0pU/g
zjbUKckfQNt8Tnj/cwHmrMPj134VIngCM1krNzTW1OUM+uL+owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOwvd3DHdFq414PW6I6CdIVotCicMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjhlY2JiMGMtZGQ1NC0z
N2ZjLWE2MDgtZDMzM2JlZjQ3N2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9GkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgYIN9FoVPhrivlgmrQkAai8DFVzqQ4cLo0m1BGIitQD7Y3JkQ3Papy
BdlN0o0qafu6Hpo2d2wGBvikGLJTcXxtMMm5OMz1ZoSoNcHU5m9CkaQFxxeN4pcF
XmWd/lGOI3KGTonjxryHOl8UAghliyUpo2oNgIRhJhUuEDvYMCFBj7JyPQK+fFsa
eaejn+hbTyozL4o3QL9DIAr5xJm/3sQOB0MI8sa8tdSGPhFrELBdEp46NjTbDB7R
dMF5gGGazqfZv2RIPcSTvQzzetVhmVCN6eTUVnTup4JLDII7DcEZ5lIwUAzqWZFf
M2s+yVhmen1SS7xVkx2FGmUlj4Lv90o=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:31:19 2025 by rpki-client