Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/5038e415-936d-36b4-b347-422bca3e97e0.roa
File:                     5038e415-936d-36b4-b347-422bca3e97e0.roa (raw, json)
Hash identifier:          aXHo/f3XYpcq2aemnYO6KWBVbhkD8vcAIs9u98QTrWY=
Subject key identifier:   EB:02:56:2E:76:AB:18:67:3D:F5:31:94:5D:D3:AE:ED:B0:66:1E:C7
Certificate issuer:       /CN=75c2d703-b68a-47d9-8657-d65247155419
Certificate serial:       010D0C9F43285849A8E9E0735EB5A1E4F2E35E00
Authority key identifier: 06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/5038e415-936d-36b4-b347-422bca3e97e0.roa
Signing time:             Sun 27 Apr 2025 01:00:46 +0000
ROA not before:           Sun 27 Apr 2025 01:00:46 +0000
ROA not after:            Sat 26 Jul 2025 01:00:46 +0000
asID:                     21658
IP address blocks:        23.175.40.0/24 maxlen: 24
                          23.175.41.0/24 maxlen: 24
                          149.112.109.0/24 maxlen: 24
                          2602:f926::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:e9:e0:73:5e:b5:a1:e4:f2:e3:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c2d703-b68a-47d9-8657-d65247155419
        Validity
            Not Before: Apr 27 01:00:46 2025 GMT
            Not After : Jul 26 01:00:46 2025 GMT
        Subject: CN=a3110d7d-8957-4bd8-a79c-c3f7a5d5b2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:19:ac:5d:22:b9:8d:4a:3a:b9:5f:8e:a9:c5:
                    de:51:66:42:4e:72:f8:04:38:93:d0:ad:9c:98:66:
                    d5:58:7c:a1:6d:13:ec:9d:25:ec:f1:c0:fb:c2:bc:
                    37:a3:42:dc:db:cc:74:f0:7d:f8:a8:3f:a4:97:4e:
                    58:b1:d5:7c:97:2b:53:bf:81:2f:6d:49:7f:4d:65:
                    de:62:7e:59:48:6e:68:d5:02:d2:03:1b:64:f7:70:
                    ac:a9:3b:54:e1:91:9d:46:7b:c6:ef:ee:a0:d7:ab:
                    8a:91:e7:9f:d9:70:92:a8:a9:a3:0d:6e:37:88:e9:
                    d1:72:50:ef:87:01:eb:ab:b8:93:7c:ce:28:b6:bf:
                    3d:35:79:c2:a6:b0:b8:79:1b:01:10:13:3e:16:34:
                    9e:d1:57:03:1a:bf:30:c0:ff:a3:50:b0:07:9c:12:
                    3a:91:95:93:88:30:10:cf:da:a4:45:c9:9d:04:9b:
                    92:07:91:15:e3:e7:7c:91:3a:79:53:de:6f:7b:b8:
                    cd:fc:d5:a9:7f:ae:92:b4:90:60:65:69:c2:8f:29:
                    d9:c7:82:05:50:67:3c:8d:12:c8:01:bc:ab:54:8f:
                    b9:d2:4d:95:35:be:19:78:41:f3:7a:b0:5d:b1:f8:
                    d2:b5:c6:0a:db:70:bd:38:07:67:d1:54:84:51:e8:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:02:56:2E:76:AB:18:67:3D:F5:31:94:5D:D3:AE:ED:B0:66:1E:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/5038e415-936d-36b4-b347-422bca3e97e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl

            X509v3 Authority Key Identifier:
                keyid:06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.40.0/23
                  149.112.109.0/24
                IPv6:
                  2602:f926::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:38:f2:67:41:8c:c7:2e:c7:08:65:e8:57:6c:56:ad:16:85:
         32:27:6a:d0:86:74:3f:62:46:ea:a9:2c:52:42:b3:72:ad:29:
         0d:b9:77:91:7d:43:58:f7:43:b6:a4:af:34:c9:53:d1:84:4e:
         6a:f9:d7:69:f6:f9:4f:02:31:b6:c4:25:7f:4e:5f:47:53:8a:
         72:0a:a7:92:cb:bb:0c:13:29:4f:b7:c1:33:e4:c9:04:3f:35:
         47:bc:91:20:49:3e:75:c9:68:4e:29:08:4b:67:c5:40:6e:42:
         dd:92:da:56:01:cf:a2:0c:3b:49:53:e7:59:27:75:99:7c:cc:
         df:93:4f:0c:3e:dc:f5:e5:4b:c8:79:e5:bf:18:b7:fb:10:5d:
         ba:29:d0:50:67:be:01:f9:2a:dc:10:91:bc:05:00:54:8b:cd:
         01:4d:3a:02:1f:e7:81:38:12:47:85:11:8c:ae:bc:8d:01:df:
         3e:71:be:2b:86:59:75:d5:32:da:cf:bf:dd:d6:61:a2:d0:f3:
         3a:1c:11:b7:e6:ed:2e:9d:c5:74:a2:d8:23:5a:fd:38:d7:9e:
         74:53:a9:71:ba:33:67:8f:fd:38:6c:b2:6b:6d:00:ab:1d:e5:
         ec:40:58:31:7d:8b:03:8c:84:ec:20:db:3a:62:89:6c:ac:85:
         0b:c9:1d:d8
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEmo6eBzXrWh5PLjXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVjMmQ3MDMtYjY4YS00N2Q5LTg2NTctZDY1MjQ3MTU1
NDE5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk
YTMxMTBkN2QtODk1Ny00YmQ4LWE3OWMtYzNmN2E1ZDViMmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRmsXSK5jUo6uV+OqcXeUWZCTnL4BDiT0K2c
mGbVWHyhbRPsnSXs8cD7wrw3o0Lc28x08H34qD+kl05YsdV8lytTv4EvbUl/TWXe
Yn5ZSG5o1QLSAxtk93CsqTtU4ZGdRnvG7+6g16uKkeef2XCSqKmjDW43iOnRclDv
hwHrq7iTfM4otr89NXnCprC4eRsBEBM+FjSe0VcDGr8wwP+jULAHnBI6kZWTiDAQ
z9qkRcmdBJuSB5EV4+d8kTp5U95ve7jN/NWpf66StJBgZWnCjynZx4IFUGc8jRLI
AbyrVI+50k2VNb4ZeEHzerBdsfjStcYK23C9OAdn0VSEUeg4ZwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFOsCVi52qxhnPfUxlF3Tru2wZh7HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83NWMy
ZDcwMy1iNjhhLTQ3ZDktODY1Ny1kNjUyNDcxNTU0MTkvNTAzOGU0MTUtOTM2ZC0z
NmI0LWIzNDctNDIyYmNhM2U5N2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzVjMmQ3MDMtYjY4YS00N2Q5LTg2
NTctZDY1MjQ3MTU1NDE5Lzc1YzJkNzAzLWI2OGEtNDdkOS04NjU3LWQ2NTI0NzE1
NTQxOS5jcmwwHwYDVR0jBBgwFoAUBp6HUUBycAS0WuwnVZI9zxaiKAowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83NWMyZDcwMy1iNjhhLTQ3ZDktODY1Ny1kNjUy
NDcxNTU0MTkuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBF68oAwQA
lXBtMA4EAgACMAgDBgQmAvkmADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+OPJnQYzHLscIZehXbFatFoUy
J2rQhnQ/YkbqqSxSQrNyrSkNuXeRfUNY90O2pK80yVPRhE5q+ddp9vlPAjG2xCV/
Tl9HU4pyCqeSy7sMEylPt8Ez5MkEPzVHvJEgST51yWhOKQhLZ8VAbkLdktpWAc+i
DDtJU+dZJ3WZfMzfk08MPtz15UvIeeW/GLf7EF26KdBQZ74B+SrcEJG8BQBUi80B
TToCH+eBOBJHhRGMrryNAd8+cb4rhll11TLaz7/d1mGi0PM6HBG35u0uncV0otgj
Wv041550U6lxujNnj/04bLJrbQCrHeXsQFgxfYsDjITsINs6YolsrIULyR3Y
-----END CERTIFICATE-----
Generated at Sat May 10 05:18:26 2025 by rpki-client