Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/34d5b2cf-fe8c-3a23-80b2-aac6d65f948e.roa
File:                     34d5b2cf-fe8c-3a23-80b2-aac6d65f948e.roa (raw, json)
Hash identifier:          2P3qUy5/8YhsTaX76DXYbn49ZB4zVaZh+x29CUmDn4U=
Subject key identifier:   49:08:7B:27:BC:8B:DD:CF:9A:38:3C:2C:D2:58:AE:AE:55:DB:5C:14
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584AD23BADF773C132F699C55880
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/34d5b2cf-fe8c-3a23-80b2-aac6d65f948e.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     396982
IP address blocks:        23.227.56.0/24 maxlen: 24
                          23.227.57.0/24 maxlen: 24
                          23.227.58.0/24 maxlen: 24
                          23.227.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:ad:f7:73:c1:32:f6:99:c5:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=37a8dbe3-53d4-4078-8af9-08e84beac8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:cc:64:ea:9b:fb:14:c4:73:f2:67:d2:6d:
                    44:5d:9a:a1:58:92:ae:13:60:3f:9b:f8:d1:0f:f4:
                    04:b8:f3:14:44:b0:ec:b4:86:03:12:2d:5b:c3:69:
                    25:2d:1b:6a:af:0f:38:37:72:fb:2b:3f:ff:12:8b:
                    50:72:8f:c4:20:8b:2a:d8:11:4f:32:f8:aa:7d:64:
                    43:5c:2a:3d:57:42:75:eb:0c:d0:be:b0:f7:8b:6a:
                    de:8f:fa:ea:ce:d1:24:9f:ac:41:f7:7d:c3:a7:df:
                    71:c0:0e:8f:e5:66:35:dd:d8:c6:22:6f:0a:74:a3:
                    bf:0b:8f:8c:e9:29:fc:32:4a:7b:83:c8:6d:9d:7f:
                    a8:e2:0f:c4:26:b3:22:23:f8:b5:95:d9:f0:e3:a6:
                    1d:b0:49:44:d4:05:d7:54:71:cd:78:45:29:7f:5c:
                    ae:0d:e3:26:50:0e:c4:9b:fd:07:88:de:31:b1:b2:
                    87:c7:e4:5f:12:1a:8e:48:86:99:9e:1a:e7:30:91:
                    06:f1:78:d7:1e:f5:4a:cb:7b:f5:33:ea:2b:60:65:
                    b5:85:d7:c1:4e:27:91:15:8f:3b:f4:48:3c:4f:61:
                    51:87:e7:40:d4:cc:56:af:89:28:f7:f2:08:8d:14:
                    1f:d5:ed:69:45:cf:73:14:e9:f0:53:a2:e5:cb:5a:
                    6b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:08:7B:27:BC:8B:DD:CF:9A:38:3C:2C:D2:58:AE:AE:55:DB:5C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/34d5b2cf-fe8c-3a23-80b2-aac6d65f948e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:81:89:0f:99:c5:ff:b5:2f:a4:23:c5:48:08:6e:97:4e:e0:
         cc:e6:42:bb:2e:1b:96:9e:04:31:93:70:ca:d4:c6:e7:c8:70:
         3f:3a:40:60:fe:2e:ad:9c:94:37:e1:da:f1:c6:e9:77:ef:17:
         9d:3f:79:9c:a0:71:f2:cc:cd:e5:7c:f0:03:7a:21:45:d7:c5:
         62:38:28:1a:1b:b2:64:e1:cd:67:b6:97:55:75:58:31:12:e3:
         f2:a6:9f:53:c5:95:ad:6c:46:81:fa:4f:6f:40:d7:a4:d0:ee:
         50:00:6b:7a:0b:fa:59:dc:b9:05:13:38:e2:06:8b:d3:5b:08:
         a8:51:64:87:52:bd:96:0e:4e:54:9b:df:db:62:87:d4:31:53:
         74:cd:0b:9d:aa:a8:a8:96:a8:9c:47:fc:a6:4c:37:d1:e2:d1:
         7a:aa:ef:73:09:60:a9:c2:c9:6f:5d:3f:0f:d4:61:9d:1c:a6:
         c7:df:86:25:60:17:a9:00:79:60:99:2d:8f:93:e4:c9:12:ba:
         71:08:52:7d:ff:ee:37:9f:9d:e0:d4:29:23:32:13:0b:eb:b2:
         63:13:de:19:3b:92:5a:1e:90:53:42:31:38:f6:ee:ea:98:f2:
         cb:ae:60:81:ab:df:74:13:b1:be:2b:1e:78:66:71:31:23:9d:
         45:a9:9c:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO633c8Ey9pnFWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ1NGIzNmEtYzcyNS00YzE4LTkzZTEtODI1YWZjNjQ1
ZTJjMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
MzdhOGRiZTMtNTNkNC00MDc4LThhZjktMDhlODRiZWFjOGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0HMZOqb+xTEc/Jn0m1EXZqhWJKuE2A/m/jR
D/QEuPMURLDstIYDEi1bw2klLRtqrw84N3L7Kz//EotQco/EIIsq2BFPMviqfWRD
XCo9V0J16wzQvrD3i2rej/rqztEkn6xB933Dp99xwA6P5WY13djGIm8KdKO/C4+M
6Sn8Mkp7g8htnX+o4g/EJrMiI/i1ldnw46YdsElE1AXXVHHNeEUpf1yuDeMmUA7E
m/0HiN4xsbKHx+RfEhqOSIaZnhrnMJEG8XjXHvVKy3v1M+orYGW1hdfBTieRFY87
9Eg8T2FRh+dA1MxWr4ko9/IIjRQf1e1pRc9zFOnwU6Lly1pr9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkIeye8i93Pmjg8LNJYrq5V21wUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0
YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVhZmM2NDVlMmMvMzRkNWIyY2YtZmU4Yy0z
YTIzLTgwYjItYWFjNmQ2NWY5NDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmQ1NGIzNmEtYzcyNS00YzE4LTkz
ZTEtODI1YWZjNjQ1ZTJjLzZkNTRiMzZhLWM3MjUtNGMxOC05M2UxLTgyNWFmYzY0
NWUyYy5jcmwwHwYDVR0jBBgwFoAUOFjVJZUYEHsaUpZxvbiCe8GGfbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVh
ZmM2NDVlMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+M4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGBiQ+Zxf+1L6QjxUgIbpdO4MzmQrsuG5aeBDGTcMrUxufIcD86QGD+
Lq2clDfh2vHG6XfvF50/eZygcfLMzeV88AN6IUXXxWI4KBobsmThzWe2l1V1WDES
4/Kmn1PFla1sRoH6T29A16TQ7lAAa3oL+lncuQUTOOIGi9NbCKhRZIdSvZYOTlSb
39tih9QxU3TNC52qqKiWqJxH/KZMN9Hi0Xqq73MJYKnCyW9dPw/UYZ0cpsffhiVg
F6kAeWCZLY+T5MkSunEIUn3/7jefneDUKSMyEwvrsmMT3hk7kloekFNCMTj27uqY
8suuYIGr33QTsb4rHnhmcTEjnUWpnMQ=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:18:59 2025 by rpki-client