Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa
File:                     233688fe-a33c-3a81-9597-da16bac00035.roa (raw, json)
Hash identifier:          OKI0+0Idl3uhQpshUfeoYepIzkglZ88VApMuEUhouaI=
Subject key identifier:   DF:78:16:BD:8F:1B:B5:BC:52:67:58:04:D1:7B:A6:4E:7C:61:E4:D0
Certificate issuer:       /CN=1a4a4def-a575-48e1-87d5-56942434422a
Certificate serial:       010D0C9F43285849BF3F675DA82C1CFC8F64AB00
Authority key identifier: 05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        192.41.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:67:5d:a8:2c:1c:fc:8f:64:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4a4def-a575-48e1-87d5-56942434422a
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=1df15fa2-7244-43fc-8b12-c141c442cec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:87:e3:cd:da:06:95:a3:41:ba:38:1b:75:0f:
                    8e:23:f5:10:95:4b:0a:30:4d:80:03:75:bc:86:dd:
                    c2:c6:09:68:1c:ac:7d:38:d8:63:2b:e6:7f:fe:ec:
                    d4:92:8f:83:54:32:2b:91:fb:48:ff:03:a5:73:2f:
                    33:08:d0:d3:77:da:1a:3e:4b:57:4b:5e:be:47:cb:
                    bd:dc:38:8a:b9:75:d4:11:a8:ab:4e:95:56:fc:ca:
                    2f:f8:81:64:54:1b:e3:79:a4:a5:ea:aa:60:2e:37:
                    35:69:0c:31:30:b8:3d:b2:0b:4e:a7:48:2e:d5:97:
                    74:b7:1e:de:08:18:a5:95:63:df:8d:64:fa:2a:7d:
                    e5:cd:9f:1e:bf:5e:db:6a:b0:e3:bb:f4:48:33:ba:
                    a7:52:35:18:6f:75:35:59:22:4a:1c:d5:36:86:a6:
                    fb:66:f7:ee:87:94:13:f2:a9:98:6f:60:9b:00:94:
                    06:ee:4d:9a:57:37:9a:d4:d7:4d:74:ce:17:d4:7a:
                    00:fc:2a:56:df:67:cf:87:e7:07:36:08:e2:26:be:
                    41:30:f5:4a:04:b2:ca:8a:68:fe:f9:d4:9e:1c:f6:
                    5c:a9:ad:6a:18:73:ea:ac:da:ef:24:eb:4c:8e:0c:
                    f0:1f:8b:ce:dd:37:c5:5b:d5:7b:3b:34:ba:d4:82:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:78:16:BD:8F:1B:B5:BC:52:67:58:04:D1:7B:A6:4E:7C:61:E4:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl

            X509v3 Authority Key Identifier:
                keyid:05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9c:5b:8d:f7:41:28:f1:e9:84:20:34:23:2a:00:85:08:bd:
         8c:ca:4d:93:07:a8:27:d4:89:ba:7a:37:a1:15:9b:fd:47:c2:
         a8:6f:7f:65:ac:bf:fc:3f:c5:32:69:18:58:55:bb:00:bd:81:
         3b:b8:51:b3:3f:3c:18:36:03:52:13:a2:51:db:9a:28:8f:37:
         6a:27:12:76:48:b2:54:ab:8a:4c:67:2b:b1:3b:2a:b2:5b:ef:
         37:e6:ae:6c:a6:bb:cd:6b:53:11:1d:42:98:0a:3f:43:24:89:
         4b:f7:da:3c:e7:b9:5f:b5:84:8c:a6:21:af:f7:07:aa:16:a6:
         2a:d2:e1:a3:6f:a8:fa:23:b3:5b:21:71:b9:e6:42:9b:ec:c5:
         54:b3:69:19:75:84:92:63:e3:e4:77:1a:04:63:76:fb:97:77:
         9f:1a:d1:74:57:1b:89:e1:48:66:ee:bf:89:e6:86:99:ef:73:
         9c:77:11:27:c5:25:6a:65:3d:98:26:e6:4e:9c:a3:be:e4:7e:
         5e:8a:39:00:6e:7c:5e:a6:e9:ef:25:a2:5e:a7:0e:55:1f:53:
         3d:3b:62:45:35:e3:08:4d:32:a3:ba:fc:b9:fa:0b:7e:84:96:
         bc:aa:21:80:77:58:20:b2:50:1c:46:3f:9e:0a:ed:7f:78:63:
         34:fd:ba:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2ddqCwc/I9kqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE0YTRkZWYtYTU3NS00OGUxLTg3ZDUtNTY5NDI0MzQ0
MjJhMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
MWRmMTVmYTItNzI0NC00M2ZjLThiMTItYzE0MWM0NDJjZWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgofjzdoGlaNBujgbdQ+OI/UQlUsKME2AA3W8
ht3CxgloHKx9ONhjK+Z//uzUko+DVDIrkftI/wOlcy8zCNDTd9oaPktXS16+R8u9
3DiKuXXUEairTpVW/Mov+IFkVBvjeaSl6qpgLjc1aQwxMLg9sgtOp0gu1Zd0tx7e
CBillWPfjWT6Kn3lzZ8ev17barDju/RIM7qnUjUYb3U1WSJKHNU2hqb7Zvfuh5QT
8qmYb2CbAJQG7k2aVzea1NdNdM4X1HoA/CpW32fPh+cHNgjiJr5BMPVKBLLKimj+
+dSeHPZcqa1qGHPqrNrvJOtMjgzwH4vO3TfFW9V7OzS61IJsdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN94Fr2PG7W8UmdYBNF7pk58YeTQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRh
NGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0MjQzNDQyMmEvMjMzNjg4ZmUtYTMzYy0z
YTgxLTk1OTctZGExNmJhYzAwMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWE0YTRkZWYtYTU3NS00OGUxLTg3
ZDUtNTY5NDI0MzQ0MjJhLzFhNGE0ZGVmLWE1NzUtNDhlMS04N2Q1LTU2OTQyNDM0
NDIyYS5jcmwwHwYDVR0jBBgwFoAUBW4Y3lSa3v6pP3yK6HLSiS8mL0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRhNGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0
MjQzNDQyMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCnfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6cW433QSjx6YQgNCMqAIUIvYzKTZMHqCfUibp6N6EVm/1Hwqhvf2Ws
v/w/xTJpGFhVuwC9gTu4UbM/PBg2A1ITolHbmiiPN2onEnZIslSrikxnK7E7KrJb
7zfmrmymu81rUxEdQpgKP0MkiUv32jznuV+1hIymIa/3B6oWpirS4aNvqPojs1sh
cbnmQpvsxVSzaRl1hJJj4+R3GgRjdvuXd58a0XRXG4nhSGbuv4nmhpnvc5x3ESfF
JWplPZgm5k6co77kfl6KOQBufF6m6e8lol6nDlUfUz07YkU14whNMqO6/Ln6C36E
lryqIYB3WCCyUBxGP54K7X94YzT9umI=
-----END CERTIFICATE-----
Generated at Sat May 10 13:33:25 2025 by rpki-client