Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3378795a-a2e1-3e64-9eeb-71fc09ebddfd.roa
File:                     3378795a-a2e1-3e64-9eeb-71fc09ebddfd.roa (raw, json)
Hash identifier:          J8E3fnSeNmGEBni3XRNiaDEjOc+NCGlAy2VHewkZEoQ=
Subject key identifier:   37:4D:78:2A:E5:E1:94:84:05:F4:73:4B:5B:BD:3D:09:CD:8F:FC:1B
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584AD7D11792C36573E0A505B640
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3378795a-a2e1-3e64-9eeb-71fc09ebddfd.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     30238
IP address blocks:        23.90.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:17:92:c3:65:73:e0:a5:05:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=8d8fa1ad-f5ec-4b5a-bfb7-332c0e4eed84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:61:2f:c1:b8:3e:34:62:c1:6b:04:c5:55:
                    d1:9e:c3:2d:55:ea:7b:08:01:9a:33:4c:06:f1:a6:
                    55:d4:1d:e0:87:f4:09:6c:d1:93:9b:e2:45:b3:df:
                    0f:ff:9e:ae:3f:44:65:5e:43:6d:9d:ad:d3:5f:f0:
                    7c:02:4d:7b:76:42:0c:9a:7c:93:85:1d:7a:ae:72:
                    0c:62:62:7b:c4:91:e2:0e:9d:f4:e1:67:89:89:0f:
                    d6:e0:4b:ac:cb:9d:08:75:2b:80:9a:db:78:29:16:
                    b1:fb:0e:02:37:7f:9c:39:eb:02:cc:fc:f5:ab:2c:
                    a6:a4:c5:7c:54:7e:13:d9:1e:e4:c4:69:36:9d:11:
                    91:0f:3d:61:c9:3a:a5:d7:60:83:1d:d9:cd:e4:26:
                    57:c0:b4:4d:0f:ef:e3:de:ba:21:81:21:5d:6b:c8:
                    95:15:75:88:1b:51:b1:84:4f:0f:51:98:e7:b6:20:
                    d7:28:ab:eb:86:e4:eb:f9:ba:b6:e3:3b:21:dd:b4:
                    44:f6:0b:11:7f:50:e3:bb:13:41:ff:f7:39:61:a7:
                    a0:0b:f2:40:c2:b3:dd:21:e7:11:3e:f4:d9:0c:00:
                    e1:55:22:01:e3:d8:0b:85:6c:44:21:7c:a7:3a:db:
                    2c:41:a5:92:66:62:c9:00:98:51:68:62:d5:1b:57:
                    01:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4D:78:2A:E5:E1:94:84:05:F4:73:4B:5B:BD:3D:09:CD:8F:FC:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3378795a-a2e1-3e64-9eeb-71fc09ebddfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:0e:47:d0:c7:68:89:33:1d:5c:50:84:69:e5:1d:07:5f:24:
         a8:6e:cd:a0:82:14:7d:cd:af:47:bf:25:d0:f9:59:ed:53:b5:
         e7:eb:1e:42:76:6d:6a:00:5e:01:df:a6:01:bb:f4:2a:0e:8b:
         1b:56:e4:0c:48:62:4e:cd:5c:10:ee:ab:19:a9:3f:17:91:fd:
         db:e3:ce:1a:7a:54:b5:f2:e1:50:92:e4:4d:c2:c4:51:25:3b:
         54:ed:90:45:b9:9e:ff:7d:d2:21:b8:5a:ae:0c:9f:f4:c3:24:
         34:cd:a4:36:cf:96:84:c6:86:f8:a0:56:b4:68:55:a0:55:11:
         e3:16:aa:d6:d8:d6:05:65:c3:d6:4e:f2:05:ba:78:ed:d0:f0:
         71:b1:33:6a:74:e2:0d:dd:ae:1b:e2:8e:88:e7:f1:08:57:42:
         8b:03:7c:7c:cb:35:ce:7d:1d:3b:68:b6:23:f6:3b:9c:2f:7a:
         f0:f9:27:7f:c9:3e:4c:af:d7:ca:e6:8b:50:86:09:cb:ab:23:
         1a:74:8e:4c:5a:37:c9:30:27:99:42:3a:09:fa:e5:1e:e8:8e:
         a9:be:05:d6:d1:3b:43:20:30:3f:a7:36:fa:25:2c:b7:9d:90:
         d5:43:1d:d3:fc:d5:9f:56:80:7b:74:cf:42:73:fb:30:11:3f:
         6f:e6:3b:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0ReSw2Vz4KUFtkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
OGQ4ZmExYWQtZjVlYy00YjVhLWJmYjctMzMyYzBlNGVlZDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnphL8G4PjRiwWsExVXRnsMtVep7CAGaM0wG
8aZV1B3gh/QJbNGTm+JFs98P/56uP0RlXkNtna3TX/B8Ak17dkIMmnyThR16rnIM
YmJ7xJHiDp304WeJiQ/W4Eusy50IdSuAmtt4KRax+w4CN3+cOesCzPz1qyympMV8
VH4T2R7kxGk2nRGRDz1hyTql12CDHdnN5CZXwLRND+/j3rohgSFda8iVFXWIG1Gx
hE8PUZjntiDXKKvrhuTr+bq24zsh3bRE9gsRf1DjuxNB//c5YaegC/JAwrPdIecR
PvTZDADhVSIB49gLhWxEIXynOtssQaWSZmLJAJhRaGLVG1cBWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdNeCrl4ZSEBfRzS1u9PQnNj/wbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzM3ODc5NWEtYTJlMS0z
ZTY0LTllZWItNzFmYzA5ZWJkZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1poMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACUOR9DHaIkzHVxQhGnlHQdfJKhuzaCCFH3Nr0e/JdD5We1TtefrHkJ2
bWoAXgHfpgG79CoOixtW5AxIYk7NXBDuqxmpPxeR/dvjzhp6VLXy4VCS5E3CxFEl
O1TtkEW5nv990iG4Wq4Mn/TDJDTNpDbPloTGhvigVrRoVaBVEeMWqtbY1gVlw9ZO
8gW6eO3Q8HGxM2p04g3drhvijojn8QhXQosDfHzLNc59HTtotiP2O5wvevD5J3/J
Pkyv18rmi1CGCcurIxp0jkxaN8kwJ5lCOgn65R7ojqm+BdbRO0MgMD+nNvolLLed
kNVDHdP81Z9WgHt0z0Jz+zARP2/mO5o=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:21:39 2025 by rpki-client