Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/0b0d8a04-e758-3ac0-99b8-27bcf08b14ff.roa
File:                     0b0d8a04-e758-3ac0-99b8-27bcf08b14ff.roa (raw, json)
Hash identifier:          MxOetGuGVnm3r5nvlrRfw+yF/3E8pQzq/39f8wpNNFo=
Subject key identifier:   AD:D0:D8:49:DE:49:7B:A9:99:D4:7D:3B:3E:2A:B1:8B:55:74:8F:BC
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584A3B7AFAB94A88E29F7E7476A0
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/0b0d8a04-e758-3ac0-99b8-27bcf08b14ff.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     142616
IP address blocks:        23.249.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:fa:b9:4a:88:e2:9f:7e:74:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=295a2fcc-1e51-4a1c-9411-fa2d58af704e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ad:f9:bb:ce:0c:80:49:29:6e:1f:b5:f2:f8:
                    2f:e3:5b:d7:d0:11:c0:e2:2a:6e:8e:ab:74:2a:58:
                    8c:4d:a2:d4:a3:b8:6e:e6:b6:24:61:af:bc:23:95:
                    b4:fb:fd:d5:0b:f8:6e:b6:da:5f:f5:ad:6d:c7:1c:
                    bd:c1:08:e2:34:1a:88:52:cb:47:98:5a:f5:11:f1:
                    28:8c:ee:4d:97:e4:a8:9a:fd:b0:6f:b7:6c:e8:f9:
                    03:4f:97:f5:ee:b9:4c:37:c1:cb:d0:14:64:56:f0:
                    73:ea:7d:d1:a1:6e:9a:b0:b6:43:d3:11:5f:77:0a:
                    8a:de:96:4a:f2:7f:c9:9b:04:09:af:4c:c6:55:5b:
                    b6:a4:a8:64:c0:41:cc:d5:b9:c1:1e:ac:19:1e:31:
                    ac:e3:c1:64:4b:fd:a0:fe:d4:77:87:fe:5b:ee:bb:
                    ae:6c:da:98:f2:9f:d5:b1:17:a0:ed:40:0e:36:bc:
                    7a:d0:df:4c:2f:9e:a4:52:7b:23:e4:5d:58:c0:91:
                    ae:da:7c:85:51:46:6f:4d:db:ae:3d:bd:86:b0:dd:
                    4e:7e:c6:62:6c:be:cb:d0:f9:33:a3:81:1f:58:00:
                    1e:32:17:27:99:09:7e:62:c9:05:15:fe:ed:a8:e4:
                    e3:e4:02:c1:24:9b:e5:18:0d:ba:d1:85:48:49:67:
                    ec:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D0:D8:49:DE:49:7B:A9:99:D4:7D:3B:3E:2A:B1:8B:55:74:8F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/0b0d8a04-e758-3ac0-99b8-27bcf08b14ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:18:53:37:27:b6:98:83:e1:40:69:58:9d:d5:67:40:56:92:
         90:6a:69:c3:f7:ad:10:d0:93:f2:28:6e:1e:2a:00:3d:1e:32:
         46:4f:09:47:d1:f8:c1:63:96:30:99:35:5a:bc:5c:72:50:a7:
         87:d4:7f:b6:fa:c1:1f:e5:c4:a3:c9:9d:23:44:40:10:b7:b1:
         7d:8f:e4:85:fe:60:7f:65:71:16:a9:76:d2:fa:47:ef:7e:e7:
         38:c2:9c:00:ea:8b:58:72:ac:89:7f:17:c5:90:68:bf:61:f0:
         e0:89:0c:bd:74:6e:4d:bf:96:9c:a9:1f:51:2d:63:ae:7d:69:
         98:40:3b:12:65:9b:0c:b5:94:9e:b2:3d:95:f5:fc:b1:d8:3b:
         60:c1:64:11:02:bf:3a:df:9e:d3:0e:fc:18:e8:d7:39:cf:4d:
         67:3e:54:a7:58:af:44:6b:8f:1b:71:03:f6:4a:61:53:fa:87:
         43:d9:11:81:fc:0d:11:ef:dd:ab:0a:b3:29:b5:7b:e5:86:6d:
         3f:8a:62:2f:5f:4e:0e:36:29:cc:06:46:a2:dc:12:58:9c:d7:
         98:26:8a:93:ca:77:64:7d:82:98:61:6b:40:62:a3:7c:04:06:
         a7:fb:14:2a:00:62:21:d8:91:db:eb:6f:30:e9:c9:aa:20:ee:
         4d:8f:2b:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evq5Sojin350dqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm
MDYzMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
Mjk1YTJmY2MtMWU1MS00YTFjLTk0MTEtZmEyZDU4YWY3MDRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq35u84MgEkpbh+18vgv41vX0BHA4ipujqt0
KliMTaLUo7hu5rYkYa+8I5W0+/3VC/huttpf9a1txxy9wQjiNBqIUstHmFr1EfEo
jO5Nl+Somv2wb7ds6PkDT5f17rlMN8HL0BRkVvBz6n3RoW6asLZD0xFfdwqK3pZK
8n/JmwQJr0zGVVu2pKhkwEHM1bnBHqwZHjGs48FkS/2g/tR3h/5b7ruubNqY8p/V
sReg7UAONrx60N9ML56kUnsj5F1YwJGu2nyFUUZvTduuPb2GsN1OfsZibL7L0Pkz
o4EfWAAeMhcnmQl+YskFFf7tqOTj5ALBJJvlGA260YVISWfs0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK3Q2EneSXupmdR9Oz4qsYtVdI+8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi
MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvMGIwZDhhMDQtZTc1OC0z
YWMwLTk5YjgtMjdiY2YwOGIxNGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1
YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky
ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4
NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/kYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUYUzcntpiD4UBpWJ3VZ0BWkpBqacP3rRDQk/Iobh4qAD0eMkZPCUfR
+MFjljCZNVq8XHJQp4fUf7b6wR/lxKPJnSNEQBC3sX2P5IX+YH9lcRapdtL6R+9+
5zjCnADqi1hyrIl/F8WQaL9h8OCJDL10bk2/lpypH1EtY659aZhAOxJlmwy1lJ6y
PZX1/LHYO2DBZBECvzrfntMO/Bjo1znPTWc+VKdYr0RrjxtxA/ZKYVP6h0PZEYH8
DRHv3asKsym1e+WGbT+KYi9fTg42KcwGRqLcElic15gmipPKd2R9gphha0Bio3wE
Bqf7FCoAYiHYkdvrbzDpyaog7k2PK9Q=
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:38:40 2025 by rpki-client