Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/0e947897-5fb8-3b5f-85cb-e1063fa48a60.roa
File:                     0e947897-5fb8-3b5f-85cb-e1063fa48a60.roa (raw, json)
Hash identifier:          FjOkeNSGZYKYDPc7SvR7KkFKgLvpWnLlo9PXx2j2n7A=
Subject key identifier:   6A:71:82:63:0F:06:40:8D:3D:A7:5D:EA:16:CD:38:85:96:5A:AA:29
Certificate issuer:       /CN=83ab5212-bed9-4bb3-8d8e-83a8705c4e88
Certificate serial:       010D0C9F4328584A41105DA6522B3F7EC2208580
Authority key identifier: 94:12:A6:E3:E3:4F:DB:A2:B8:38:93:96:88:21:81:FB:38:B5:36:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/0e947897-5fb8-3b5f-85cb-e1063fa48a60.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     61112
IP address blocks:        23.166.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:5d:a6:52:2b:3f:7e:c2:20:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83ab5212-bed9-4bb3-8d8e-83a8705c4e88
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=686273d8-15d6-4ae0-a193-82d97cda288b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fc:ce:ff:82:b3:9f:dd:69:af:dd:70:5a:c2:
                    8b:4b:1c:c2:33:2a:db:88:ef:d3:0c:11:c0:af:2d:
                    77:aa:8d:1e:38:99:0a:6d:70:e8:7b:77:e6:35:88:
                    a8:71:c5:bf:f7:d8:cc:e2:88:8b:73:d3:8e:54:e8:
                    8c:c6:f7:a3:f7:97:4b:68:0b:43:7f:e8:0a:dd:da:
                    ee:4b:d3:30:51:18:5a:e5:cc:48:2c:3e:ee:28:75:
                    4a:95:c7:e7:db:83:05:17:81:0b:4e:b5:18:08:e4:
                    6b:5e:fb:fd:3b:fa:0b:93:db:e2:45:b3:65:20:19:
                    cb:35:af:70:83:6c:fd:e6:01:d3:63:ca:7b:ce:1b:
                    cf:87:1f:0f:ae:89:c3:8a:f4:ce:a5:4d:e1:65:b7:
                    a5:6a:eb:68:7a:0a:54:e2:cc:8f:18:66:c6:16:71:
                    fe:b6:9f:b9:c0:c9:a5:13:78:0e:37:a7:00:26:1a:
                    ba:ca:26:d3:2e:9b:a0:27:69:f1:32:34:37:41:53:
                    52:ae:d4:ce:85:a6:a9:b1:03:dc:bc:5c:98:50:18:
                    88:32:54:c7:c1:ef:5f:05:21:92:00:d9:87:73:0e:
                    b2:6e:fa:cb:e9:05:2d:b5:4d:d9:61:d0:21:77:f0:
                    a3:64:44:7d:1a:b2:4c:13:93:4f:3b:de:f8:04:d8:
                    93:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:71:82:63:0F:06:40:8D:3D:A7:5D:EA:16:CD:38:85:96:5A:AA:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/0e947897-5fb8-3b5f-85cb-e1063fa48a60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.crl

            X509v3 Authority Key Identifier:
                keyid:94:12:A6:E3:E3:4F:DB:A2:B8:38:93:96:88:21:81:FB:38:B5:36:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:1b:a9:f8:74:22:7e:78:34:92:d8:11:fc:a4:e3:16:3e:f4:
         f8:02:03:dd:0c:1c:ab:75:67:50:c4:ee:50:d5:21:d0:97:c3:
         ce:fa:ad:60:e4:1e:03:bb:99:6d:16:61:93:b1:08:69:c4:fe:
         5e:17:2e:a7:c9:b3:85:f3:4f:3f:05:1b:f6:5f:81:0d:6a:99:
         76:6e:cb:c7:a1:44:91:47:9a:25:3a:e2:d5:8e:19:66:20:a7:
         23:0c:e4:80:6e:e7:5f:11:30:cb:6a:96:a5:98:c9:9a:b4:5f:
         d9:43:e4:fc:60:2d:c6:fd:47:da:65:83:75:7f:03:78:5e:c5:
         fc:91:b8:f5:f7:05:26:03:22:de:cd:7a:75:ca:f4:13:e4:01:
         05:8d:ec:2b:01:4e:04:d5:44:4e:cc:53:19:a2:c8:08:f0:2c:
         a9:13:7a:ef:2e:6f:b4:06:f9:3c:13:eb:dd:5e:84:e3:e8:de:
         f3:f3:a9:d2:84:77:e3:64:cf:9c:10:19:3f:65:d9:44:70:4f:
         aa:31:e8:df:53:fc:93:a4:72:88:26:3b:0f:06:f9:37:55:22:
         78:d3:2c:60:5b:ea:fa:bc:3d:ee:b8:2d:5b:b2:0e:bf:6e:7a:
         cd:85:0d:1d:b7:1c:a1:55:a4:a0:bc:17:e6:7b:2e:e7:29:18:
         99:61:59:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEF2mUis/fsIghYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODNhYjUyMTItYmVkOS00YmIzLThkOGUtODNhODcwNWM0
ZTg4MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk
Njg2MjczZDgtMTVkNi00YWUwLWExOTMtODJkOTdjZGEyODhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvzO/4Kzn91pr91wWsKLSxzCMyrbiO/TDBHA
ry13qo0eOJkKbXDoe3fmNYioccW/99jM4oiLc9OOVOiMxvej95dLaAtDf+gK3dru
S9MwURha5cxILD7uKHVKlcfn24MFF4ELTrUYCORrXvv9O/oLk9viRbNlIBnLNa9w
g2z95gHTY8p7zhvPhx8PronDivTOpU3hZbelautoegpU4syPGGbGFnH+tp+5wMml
E3gON6cAJhq6yibTLpugJ2nxMjQ3QVNSrtTOhaapsQPcvFyYUBiIMlTHwe9fBSGS
ANmHcw6ybvrL6QUttU3ZYdAhd/CjZER9GrJME5NPO974BNiTfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGpxgmMPBkCNPadd6hbNOIWWWqopMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84M2Fi
NTIxMi1iZWQ5LTRiYjMtOGQ4ZS04M2E4NzA1YzRlODgvMGU5NDc4OTctNWZiOC0z
YjVmLTg1Y2ItZTEwNjNmYTQ4YTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODNhYjUyMTItYmVkOS00YmIzLThk
OGUtODNhODcwNWM0ZTg4LzgzYWI1MjEyLWJlZDktNGJiMy04ZDhlLTgzYTg3MDVj
NGU4OC5jcmwwHwYDVR0jBBgwFoAUlBKm4+NP26K4OJOWiCGB+zi1NvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84M2FiNTIxMi1iZWQ5LTRiYjMtOGQ4ZS04M2E4
NzA1YzRlODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6YYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABUbqfh0In54NJLYEfyk4xY+9PgCA90MHKt1Z1DE7lDVIdCXw876rWDk
HgO7mW0WYZOxCGnE/l4XLqfJs4XzTz8FG/ZfgQ1qmXZuy8ehRJFHmiU64tWOGWYg
pyMM5IBu518RMMtqlqWYyZq0X9lD5PxgLcb9R9plg3V/A3hexfyRuPX3BSYDIt7N
enXK9BPkAQWN7CsBTgTVRE7MUxmiyAjwLKkTeu8ub7QG+TwT691ehOPo3vPzqdKE
d+Nkz5wQGT9l2URwT6ox6N9T/JOkcogmOw8G+TdVInjTLGBb6vq8Pe64LVuyDr9u
es2FDR23HKFVpKC8F+Z7LucpGJlhWZ0=
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:53:54 2025 by rpki-client