Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa
File:                     802bfd1a-4325-38af-be6f-64950728b155.roa (raw, json)
Hash identifier:          cq+Fa6xy0guD3jjoHlklqxyPKzv2SqdHGf9Bwayl2Yo=
Subject key identifier:   FB:24:60:C8:F8:46:29:9F:33:6A:3D:D3:DE:4A:9C:87:EB:51:53:65
Certificate issuer:       /CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
Certificate serial:       010D0C9F43285849D165155F9E23A3AA29A57380
Authority key identifier: 3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     13737
IP address blocks:        23.189.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:15:5f:9e:23:a3:aa:29:a5:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=fe7eb117-7654-4c6e-ae25-00d43ad1b32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:d7:40:ce:8c:2b:3b:11:5c:a3:b6:44:67:
                    0d:55:a1:a4:26:93:1c:39:7c:2b:47:4a:f1:a0:ea:
                    f0:1a:c8:6a:25:7c:1a:aa:83:a5:b7:07:d9:87:85:
                    34:f2:e5:f1:a1:6a:fd:12:48:38:67:ca:8f:b3:7b:
                    6b:61:bc:bb:b8:d8:1a:81:c7:42:39:cc:05:ce:ad:
                    1c:1a:b4:d2:12:22:9d:66:af:eb:1e:bf:6a:fb:02:
                    d8:de:da:64:9a:30:40:22:ec:2e:bb:67:2a:11:3a:
                    31:ab:38:05:04:08:35:ae:4d:6d:69:ab:da:f7:de:
                    37:f4:c1:61:f3:96:1f:ff:12:96:c4:21:bb:6f:2d:
                    5b:ea:5b:54:44:70:1d:e1:91:6e:98:ea:6f:04:4d:
                    c1:c8:5e:7a:ab:74:28:91:43:c9:3b:c1:1f:1d:24:
                    51:0d:61:6a:cf:cb:64:dd:ec:e3:89:0a:32:b6:a7:
                    6a:10:eb:6d:3d:04:fe:a4:d4:f3:95:88:7b:08:37:
                    fa:3d:73:4f:4b:25:45:be:9d:7c:5f:54:5f:50:45:
                    39:97:df:b9:34:e1:78:26:f1:b9:52:0e:39:17:08:
                    0b:5e:39:58:fe:b9:74:27:ea:98:25:9b:d6:08:14:
                    63:81:f8:89:66:16:ac:44:0f:de:b5:f5:d5:91:bc:
                    65:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:24:60:C8:F8:46:29:9F:33:6A:3D:D3:DE:4A:9C:87:EB:51:53:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl

            X509v3 Authority Key Identifier:
                keyid:3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:cb:c6:f7:d2:52:a6:69:47:81:3b:b0:b6:90:17:71:dd:91:
         08:b8:04:a9:1a:39:b4:79:18:94:de:48:42:21:a6:07:f2:ba:
         9a:41:37:47:99:d2:b5:7d:3a:42:42:92:75:6b:07:94:57:71:
         0c:fe:e5:01:7d:d9:a6:ea:38:5d:b0:95:af:a0:49:5d:d4:c4:
         ad:b6:c0:13:41:f6:1a:e9:73:38:f1:c5:5a:82:0c:e8:37:e0:
         f4:59:1a:c0:7a:9f:1f:78:8f:fc:dc:bc:14:87:9e:77:03:e8:
         a0:f6:94:2f:74:af:66:59:9d:7b:fc:f6:92:13:5e:4a:d3:90:
         67:63:5e:f7:ce:80:c2:e7:1f:af:7d:36:86:66:90:3c:73:d0:
         37:a1:7f:9e:e8:26:88:88:81:15:00:be:9c:bf:bd:bb:96:8b:
         26:53:79:b5:bf:8e:30:22:41:ca:7e:02:a6:c2:6a:a5:10:af:
         32:02:1b:ce:f8:93:1b:7a:ae:e5:94:14:ac:84:c5:cd:a3:00:
         04:d5:a8:50:7e:3f:40:2e:34:d7:54:e7:71:36:bb:fd:17:a3:
         86:c9:4a:cb:0d:60:49:2f:6e:03:69:b9:1e:4e:93:ad:6c:9b:
         60:24:c7:0f:0d:c7:74:8e:bc:df:db:b5:7d:a1:ce:fa:b3:e2:
         4e:6b:1a:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRVfniOjqimlc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWY0ZGMyYWItMWU2ZS00MTQzLTk1ZjUtZDYzZGIwYTc2
MjRiMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
ZmU3ZWIxMTctNzY1NC00YzZlLWFlMjUtMDBkNDNhZDFiMzJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvybXQM6MKzsRXKO2RGcNVaGkJpMcOXwrR0rx
oOrwGshqJXwaqoOltwfZh4U08uXxoWr9Ekg4Z8qPs3trYby7uNgagcdCOcwFzq0c
GrTSEiKdZq/rHr9q+wLY3tpkmjBAIuwuu2cqEToxqzgFBAg1rk1taava99439MFh
85Yf/xKWxCG7by1b6ltURHAd4ZFumOpvBE3ByF56q3QokUPJO8EfHSRRDWFqz8tk
3ezjiQoytqdqEOttPQT+pNTzlYh7CDf6PXNPSyVFvp18X1RfUEU5l9+5NOF4JvG5
Ug45FwgLXjlY/rl0J+qYJZvWCBRjgfiJZhasRA/etfXVkbxlawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPskYMj4RimfM2o9095KnIfrUVNlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZjRk
YzJhYi0xZTZlLTQxNDMtOTVmNS1kNjNkYjBhNzYyNGIvODAyYmZkMWEtNDMyNS0z
OGFmLWJlNmYtNjQ5NTA3MjhiMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWY0ZGMyYWItMWU2ZS00MTQzLTk1
ZjUtZDYzZGIwYTc2MjRiLzVmNGRjMmFiLTFlNmUtNDE0My05NWY1LWQ2M2RiMGE3
NjI0Yi5jcmwwHwYDVR0jBBgwFoAUP2kd3H3TxnZMU00rUA9X6WR08p4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81ZjRkYzJhYi0xZTZlLTQxNDMtOTVmNS1kNjNk
YjBhNzYyNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF72oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABnLxvfSUqZpR4E7sLaQF3HdkQi4BKkaObR5GJTeSEIhpgfyuppBN0eZ
0rV9OkJCknVrB5RXcQz+5QF92abqOF2wla+gSV3UxK22wBNB9hrpczjxxVqCDOg3
4PRZGsB6nx94j/zcvBSHnncD6KD2lC90r2ZZnXv89pITXkrTkGdjXvfOgMLnH699
NoZmkDxz0Dehf57oJoiIgRUAvpy/vbuWiyZTebW/jjAiQcp+AqbCaqUQrzICG874
kxt6ruWUFKyExc2jAATVqFB+P0AuNNdU53E2u/0Xo4bJSssNYEkvbgNpuR5Ok61s
m2Akxw8Nx3SOvN/btX2hzvqz4k5rGn4=
-----END CERTIFICATE-----
Generated at Mon Jun 30 20:36:39 2025 by rpki-client