Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/c783bf70-960d-3de3-8058-484ab957d62d.roa
File:                     c783bf70-960d-3de3-8058-484ab957d62d.roa (raw, json)
Hash identifier:          gFdAQwvjUdESlRfJzlA/epybL+xthBUMtwkT/yJGUW8=
Subject key identifier:   B8:8B:74:DC:76:79:CC:AA:54:36:5A:05:14:C1:CC:6E:91:9D:35:73
Certificate issuer:       /CN=4f12be01-5f55-4434-8f8a-921808f7c306
Certificate serial:       010D0C9F4328584B917782D37AA3156E81F57880
Authority key identifier: B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/c783bf70-960d-3de3-8058-484ab957d62d.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     62582
IP address blocks:        23.177.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:82:d3:7a:a3:15:6e:81:f5:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f12be01-5f55-4434-8f8a-921808f7c306
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=701d86ce-bd94-488c-9fe2-7486b1131649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:f5:f7:9c:1d:e7:c2:69:a8:b3:b1:ad:4b:
                    1c:bc:5d:0a:66:70:52:91:8b:8e:4d:17:25:76:25:
                    dd:20:1b:bc:88:37:b4:e0:56:32:b5:a5:d6:e7:01:
                    6a:ce:6e:b9:80:1a:61:42:d2:a8:d9:3e:58:10:31:
                    a6:62:aa:27:0d:3e:b0:d5:30:a6:b5:62:56:9b:01:
                    9d:ba:5a:4c:d8:ba:13:28:21:4c:be:77:ee:f8:c5:
                    06:42:d2:d3:94:dd:e6:e9:13:25:b9:17:28:af:e9:
                    67:36:99:ef:f2:d0:07:e8:3c:28:1e:a8:87:9b:fd:
                    df:86:1c:f0:07:b4:c1:ca:15:d9:6f:41:f9:57:eb:
                    e2:35:55:3e:24:b1:ff:02:fa:3a:2b:14:59:a6:bf:
                    49:d5:9b:21:05:c7:85:a3:47:22:13:03:40:25:33:
                    6b:72:ea:9d:79:43:c8:26:bc:a0:f2:d3:47:5b:ba:
                    24:5b:de:48:42:61:c0:1b:8d:61:fd:13:33:d8:0d:
                    41:7a:07:88:89:73:83:eb:07:84:7e:c7:7d:0a:8a:
                    c0:f5:8f:65:a5:73:9b:0b:12:e6:e4:3d:dd:0c:f0:
                    a7:8e:8b:41:38:84:85:d4:c2:12:b7:c9:08:cf:e7:
                    ec:9c:b8:d6:a9:33:68:cd:55:00:09:e4:fd:12:8c:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8B:74:DC:76:79:CC:AA:54:36:5A:05:14:C1:CC:6E:91:9D:35:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/c783bf70-960d-3de3-8058-484ab957d62d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl

            X509v3 Authority Key Identifier:
                keyid:B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d1:f8:30:da:16:e6:fb:9a:c9:e3:53:0e:df:05:ef:4e:bc:
         83:62:c9:73:10:dd:e5:66:38:6b:fe:fc:22:24:58:eb:54:03:
         80:ff:0a:24:5f:43:6a:38:63:f4:68:0c:9a:7c:7f:8d:83:0d:
         85:0b:c8:f0:12:32:c9:5a:f4:9a:87:21:f6:00:0b:9f:95:2b:
         00:98:f3:f3:fb:11:b3:b9:51:19:f7:67:72:d8:7e:14:ff:bf:
         85:e0:b5:7b:52:4b:a2:59:bf:62:5c:99:cf:6c:62:0c:37:42:
         eb:8c:0e:c2:6f:10:ba:14:85:38:d8:c1:e9:dc:fd:89:05:4f:
         ab:32:04:bf:6a:9f:e7:49:9b:5b:fa:0a:15:e8:9b:33:71:e7:
         89:db:86:9d:e7:fb:01:59:f0:22:96:e8:af:3f:30:13:58:40:
         d3:ca:e4:82:95:75:9c:73:fb:6e:87:4c:60:a0:d9:65:dc:94:
         b8:b6:7a:2f:20:7e:84:84:5c:49:ef:2e:03:21:10:28:ca:de:
         b1:14:a2:9a:ea:c1:52:9a:72:71:22:71:60:11:09:0c:ba:e5:
         80:a8:44:77:97:a9:89:23:b6:e9:15:dd:36:df:72:08:56:15:
         9a:8f:b2:15:0d:b3:43:ac:27:58:1f:13:db:7d:41:5b:9f:50:
         cb:5d:55:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuRd4LTeqMVboH1eIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxMmJlMDEtNWY1NS00NDM0LThmOGEtOTIxODA4Zjdj
MzA2MB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk
NzAxZDg2Y2UtYmQ5NC00ODhjLTlmZTItNzQ4NmIxMTMxNjQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPf195wd58JpqLOxrUscvF0KZnBSkYuOTRcl
diXdIBu8iDe04FYytaXW5wFqzm65gBphQtKo2T5YEDGmYqonDT6w1TCmtWJWmwGd
ulpM2LoTKCFMvnfu+MUGQtLTlN3m6RMluRcor+lnNpnv8tAH6DwoHqiHm/3fhhzw
B7TByhXZb0H5V+viNVU+JLH/Avo6KxRZpr9J1ZshBceFo0ciEwNAJTNrcuqdeUPI
Jryg8tNHW7okW95IQmHAG41h/RMz2A1BegeIiXOD6weEfsd9CorA9Y9lpXObCxLm
5D3dDPCnjotBOISF1MISt8kIz+fsnLjWqTNozVUACeT9EoxcTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLiLdNx2ecyqVDZaBRTBzG6RnTVzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ZjEy
YmUwMS01ZjU1LTQ0MzQtOGY4YS05MjE4MDhmN2MzMDYvYzc4M2JmNzAtOTYwZC0z
ZGUzLTgwNTgtNDg0YWI5NTdkNjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGYxMmJlMDEtNWY1NS00NDM0LThm
OGEtOTIxODA4ZjdjMzA2LzRmMTJiZTAxLTVmNTUtNDQzNC04ZjhhLTkyMTgwOGY3
YzMwNi5jcmwwHwYDVR0jBBgwFoAUtLv3vFje/C9daN2yZNjbWRopEGgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC80ZjEyYmUwMS01ZjU1LTQ0MzQtOGY4YS05MjE4
MDhmN2MzMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7FAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXR+DDaFub7msnjUw7fBe9OvINiyXMQ3eVmOGv+/CIkWOtUA4D/CiRf
Q2o4Y/RoDJp8f42DDYULyPASMsla9JqHIfYAC5+VKwCY8/P7EbO5URn3Z3LYfhT/
v4XgtXtSS6JZv2Jcmc9sYgw3QuuMDsJvELoUhTjYwenc/YkFT6syBL9qn+dJm1v6
ChXomzNx54nbhp3n+wFZ8CKW6K8/MBNYQNPK5IKVdZxz+26HTGCg2WXclLi2ei8g
foSEXEnvLgMhECjK3rEUoprqwVKacnEicWARCQy65YCoRHeXqYkjtukV3TbfcghW
FZqPshUNs0OsJ1gfE9t9QVufUMtdVW4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:23:03 2025 by rpki-client