Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/baa70988-7b5c-349e-b1ee-23e34d4c9e08.roa
File:                     baa70988-7b5c-349e-b1ee-23e34d4c9e08.roa (raw, json)
Hash identifier:          VGL3nx2qEtLCRq3fQAay8G1L0um7kwgpEbXf30dTtE4=
Subject key identifier:   69:C4:D0:D5:B4:6F:DC:57:31:3A:79:84:74:92:E4:47:1F:A7:B9:6D
Certificate issuer:       /CN=2db54220-b640-4de5-bf21-207b4ffc20dd
Certificate serial:       010D0C9F4328584A2C2018CC97B3D35BEFBF6C00
Authority key identifier: E4:E3:84:C6:FA:C4:11:1E:37:2F:F3:AD:8F:FB:C6:BB:97:62:03:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/baa70988-7b5c-349e-b1ee-23e34d4c9e08.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     198487
IP address blocks:        23.155.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/2db54220-b640-4de5-bf21-207b4ffc20dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/2db54220-b640-4de5-bf21-207b4ffc20dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:18:cc:97:b3:d3:5b:ef:bf:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2db54220-b640-4de5-bf21-207b4ffc20dd
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=4a154624-b001-41a8-8a4b-f8f642e6ac8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a0:0c:2f:47:fe:20:05:0e:7d:9d:22:f9:31:
                    3c:c4:26:5b:e0:51:ea:34:a7:e3:b5:46:a4:52:d8:
                    da:a3:b8:30:29:1b:15:eb:8d:a9:bb:17:be:b9:e4:
                    be:06:b9:6e:82:1f:c8:7f:c6:28:51:0b:02:d1:74:
                    92:90:db:f4:52:f6:89:d6:06:cb:96:ff:85:0d:1a:
                    4b:1a:d2:e1:4b:96:fc:e9:3e:da:c7:c0:7b:da:5f:
                    77:10:fe:f3:52:d5:8a:c1:be:a8:24:78:09:18:e0:
                    94:f4:dc:df:54:3d:1b:4e:81:d5:3b:10:85:48:ce:
                    35:a4:36:84:cf:1f:ba:f9:aa:cb:c5:01:04:a8:7b:
                    67:bb:6b:6e:fb:ee:0d:28:b8:b0:fc:dc:b8:a0:1b:
                    cd:99:70:71:e9:66:40:89:8c:91:f3:19:48:a7:cd:
                    bc:d7:86:25:41:4b:7f:b2:fe:d6:ed:dc:28:45:ae:
                    58:c7:81:9c:2c:41:2b:d7:b0:e8:2b:da:6a:6f:56:
                    bf:f6:6e:be:ee:a2:95:24:11:05:45:5c:82:4c:94:
                    39:e3:60:ba:38:fc:8c:b8:44:d6:0c:d8:90:3a:01:
                    18:02:42:88:4b:9d:dd:42:81:a7:bb:54:de:2b:e9:
                    09:44:8d:74:18:0c:5e:99:2d:a6:6d:b5:13:94:34:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C4:D0:D5:B4:6F:DC:57:31:3A:79:84:74:92:E4:47:1F:A7:B9:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/baa70988-7b5c-349e-b1ee-23e34d4c9e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/2db54220-b640-4de5-bf21-207b4ffc20dd.crl

            X509v3 Authority Key Identifier:
                keyid:E4:E3:84:C6:FA:C4:11:1E:37:2F:F3:AD:8F:FB:C6:BB:97:62:03:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:22:cd:cf:74:7a:db:b8:80:70:1f:34:1b:aa:a3:5c:76:f4:
         57:8d:10:62:ec:e5:c0:30:33:53:4e:47:c2:70:57:8a:18:36:
         dd:6c:4f:ff:d2:11:4c:0e:10:37:ef:54:bc:15:10:5e:cc:05:
         b4:a8:a7:18:67:ab:4c:d3:39:68:5a:89:68:66:dd:4d:f5:a3:
         64:e3:05:0e:84:15:0b:0b:ad:28:40:f9:3e:8d:f2:7d:62:61:
         36:86:5a:0d:45:fd:97:3a:98:75:8e:58:70:74:d6:09:41:87:
         35:85:c8:e4:c2:18:53:4e:47:72:3b:3e:e1:dc:5b:15:bf:03:
         a8:97:da:25:98:58:d3:6f:40:56:e6:d9:c7:8b:60:f6:60:0c:
         16:96:06:da:f5:0a:09:59:89:1b:3f:3e:01:3b:73:ec:67:e2:
         b1:a4:17:fb:e8:82:bc:2b:e4:ae:78:71:ba:c3:62:91:74:4f:
         e1:29:8e:e2:06:39:ae:b2:3f:d7:a5:21:8c:11:a1:b6:7e:5c:
         e7:a1:d8:05:c4:fa:dd:97:06:a6:a7:8a:91:96:f8:36:ce:9a:
         1a:92:bd:c3:0d:48:d5:21:df:d3:95:c0:08:9e:69:1b:7e:2e:
         53:d8:85:1d:3c:5c:b2:72:16:0a:2b:52:ed:30:ac:86:2e:1d:
         11:2c:33:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBjMl7PTW++/bAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRiNTQyMjAtYjY0MC00ZGU1LWJmMjEtMjA3YjRmZmMy
MGRkMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk
NGExNTQ2MjQtYjAwMS00MWE4LThhNGItZjhmNjQyZTZhYzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqAML0f+IAUOfZ0i+TE8xCZb4FHqNKfjtUak
Utjao7gwKRsV642puxe+ueS+Brlugh/If8YoUQsC0XSSkNv0UvaJ1gbLlv+FDRpL
GtLhS5b86T7ax8B72l93EP7zUtWKwb6oJHgJGOCU9NzfVD0bToHVOxCFSM41pDaE
zx+6+arLxQEEqHtnu2tu++4NKLiw/Ny4oBvNmXBx6WZAiYyR8xlIp82814YlQUt/
sv7W7dwoRa5Yx4GcLEEr17DoK9pqb1a/9m6+7qKVJBEFRVyCTJQ542C6OPyMuETW
DNiQOgEYAkKIS53dQoGnu1TeK+kJRI10GAxemS2mbbUTlDTXiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGnE0NW0b9xXMTp5hHSS5Ecfp7ltMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZGI1
NDIyMC1iNjQwLTRkZTUtYmYyMS0yMDdiNGZmYzIwZGQvYmFhNzA5ODgtN2I1Yy0z
NDllLWIxZWUtMjNlMzRkNGM5ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmRiNTQyMjAtYjY0MC00ZGU1LWJm
MjEtMjA3YjRmZmMyMGRkLzJkYjU0MjIwLWI2NDAtNGRlNS1iZjIxLTIwN2I0ZmZj
MjBkZC5jcmwwHwYDVR0jBBgwFoAU5OOExvrEER43L/Otj/vGu5diA5YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZGI1NDIyMC1iNjQwLTRkZTUtYmYyMS0yMDdi
NGZmYzIwZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5t4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYizc90etu4gHAfNBuqo1x29FeNEGLs5cAwM1NOR8JwV4oYNt1sT//S
EUwOEDfvVLwVEF7MBbSopxhnq0zTOWhaiWhm3U31o2TjBQ6EFQsLrShA+T6N8n1i
YTaGWg1F/Zc6mHWOWHB01glBhzWFyOTCGFNOR3I7PuHcWxW/A6iX2iWYWNNvQFbm
2ceLYPZgDBaWBtr1CglZiRs/PgE7c+xn4rGkF/vogrwr5K54cbrDYpF0T+EpjuIG
Oa6yP9elIYwRobZ+XOeh2AXE+t2XBqanipGW+DbOmhqSvcMNSNUh39OVwAieaRt+
LlPYhR08XLJyFgorUu0wrIYuHREsM+8=
-----END CERTIFICATE-----
Generated at Mon Jun 30 01:01:00 2025 by rpki-client