Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/0050983a-0db3-3529-a4a6-e31fdd013725.roa
File:                     0050983a-0db3-3529-a4a6-e31fdd013725.roa (raw, json)
Hash identifier:          5fe6jkZ7TJLLsZHG06NXc4J1qCjGW2inHMi7thDT4Rc=
Subject key identifier:   AE:6F:2D:CB:8B:4B:7B:EB:7C:AC:2C:AC:B8:6B:48:FC:DA:68:A4:7C
Certificate issuer:       /CN=743065a1-7855-4be2-941a-23bce4898410
Certificate serial:       010D0C9F4328584A2ABAE6CB473611FA2267A172
Authority key identifier: 1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/0050983a-0db3-3529-a4a6-e31fdd013725.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     211392
IP address blocks:        23.145.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e6:cb:47:36:11:fa:22:67:a1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743065a1-7855-4be2-941a-23bce4898410
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=6995f537-6480-4776-af8c-0fa52c582c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:54:f7:d1:24:b7:10:61:a5:33:5c:6e:66:87:
                    e8:e0:f6:c9:31:4f:23:ea:94:b6:e8:00:8b:38:5a:
                    27:e7:ee:6c:3e:84:33:26:bc:78:9e:5c:d8:98:8d:
                    fb:13:cb:94:88:27:6b:e7:e4:7d:9b:e3:4f:b1:e1:
                    96:df:22:cd:84:1d:85:ed:14:2f:5d:a3:24:c5:14:
                    98:04:b0:f2:18:87:f6:84:b3:8e:29:60:da:51:86:
                    c1:8c:b4:00:67:7b:a2:f6:90:de:46:1b:0b:f2:dc:
                    82:4e:43:54:2d:3e:48:c0:d1:2a:c3:9a:b7:c8:d6:
                    17:a6:77:83:d1:7c:46:8d:01:f0:bb:b0:b3:ff:46:
                    ee:c2:22:bd:04:f6:e8:13:b1:4a:15:dc:d2:c0:22:
                    1d:83:d6:64:f6:98:8c:15:ad:c3:45:d3:89:c7:3f:
                    ea:41:56:b9:09:cc:09:79:f2:b4:32:02:18:b8:d6:
                    0d:79:ad:60:c2:0f:1a:d6:9b:3a:49:60:27:41:40:
                    1b:67:ab:2f:f2:6d:69:b6:c7:10:3b:bc:6a:1a:57:
                    8f:21:e0:a7:5b:92:4b:d6:e4:8d:8d:28:2c:8e:b2:
                    ba:5c:00:78:56:33:54:26:cc:66:b6:e9:70:88:c3:
                    5d:05:a1:2f:48:f5:5b:43:00:b0:5c:94:3b:10:a6:
                    ec:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6F:2D:CB:8B:4B:7B:EB:7C:AC:2C:AC:B8:6B:48:FC:DA:68:A4:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/0050983a-0db3-3529-a4a6-e31fdd013725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl

            X509v3 Authority Key Identifier:
                keyid:1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:22:74:fe:1a:e4:ca:76:1e:1d:4d:16:47:7e:70:00:f2:23:
         d5:22:99:2f:09:91:70:08:20:25:28:c1:e9:da:fe:f4:b6:ed:
         ac:9b:ba:30:8c:f9:a0:ff:ea:5c:60:4f:2f:8c:c9:ff:6e:fb:
         84:29:fb:54:55:26:77:69:2a:76:14:f6:9a:f3:07:6f:24:b5:
         18:ec:4f:d7:e3:b8:13:b9:fe:0b:2f:d0:1b:86:01:4e:d0:6c:
         84:08:7a:ba:c0:49:33:39:f8:c5:e2:08:ad:c5:d6:6d:d0:fb:
         23:00:a8:85:0f:ab:3b:b7:03:39:77:ac:d3:9d:5d:38:60:5a:
         c0:1a:2d:72:25:58:db:67:b0:e0:65:cd:91:ba:98:4e:28:97:
         d3:37:7c:20:79:7e:fb:e1:d5:a3:8a:a2:da:88:33:79:89:e7:
         72:b2:98:53:f7:c9:80:d1:0b:7d:c7:88:c4:3d:42:ea:48:ed:
         d7:96:9c:2a:b3:37:11:b2:6c:70:73:75:c0:ed:57:0f:10:66:
         97:2a:fe:f1:8d:f6:2e:bb:19:b5:62:53:25:46:66:d1:24:00:
         16:1f:f5:ae:e9:5e:e8:89:b2:20:b9:06:82:6d:4d:97:8f:5b:
         13:0f:42:e4:c1:c9:2b:d8:65:17:5f:fe:0e:29:e7:07:c9:b9:
         8d:8b:48:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquubLRzYR+iJnoXIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQzMDY1YTEtNzg1NS00YmUyLTk0MWEtMjNiY2U0ODk4
NDEwMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
Njk5NWY1MzctNjQ4MC00Nzc2LWFmOGMtMGZhNTJjNTgyYzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VT30SS3EGGlM1xuZofo4PbJMU8j6pS26ACL
OFon5+5sPoQzJrx4nlzYmI37E8uUiCdr5+R9m+NPseGW3yLNhB2F7RQvXaMkxRSY
BLDyGIf2hLOOKWDaUYbBjLQAZ3ui9pDeRhsL8tyCTkNULT5IwNEqw5q3yNYXpneD
0XxGjQHwu7Cz/0buwiK9BPboE7FKFdzSwCIdg9Zk9piMFa3DRdOJxz/qQVa5CcwJ
efK0MgIYuNYNea1gwg8a1ps6SWAnQUAbZ6sv8m1ptscQO7xqGlePIeCnW5JL1uSN
jSgsjrK6XAB4VjNUJsxmtulwiMNdBaEvSPVbQwCwXJQ7EKbsLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK5vLcuLS3vrfKwsrLhrSPzaaKR8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NDMw
NjVhMS03ODU1LTRiZTItOTQxYS0yM2JjZTQ4OTg0MTAvMDA1MDk4M2EtMGRiMy0z
NTI5LWE0YTYtZTMxZmRkMDEzNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzQzMDY1YTEtNzg1NS00YmUyLTk0
MWEtMjNiY2U0ODk4NDEwLzc0MzA2NWExLTc4NTUtNGJlMi05NDFhLTIzYmNlNDg5
ODQxMC5jcmwwHwYDVR0jBBgwFoAUHeCt7o13h6jhBF+BO8nZfFhbERwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83NDMwNjVhMS03ODU1LTRiZTItOTQxYS0yM2Jj
ZTQ4OTg0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgidP4a5Mp2Hh1NFkd+cADyI9UimS8JkXAIICUowena/vS27aybujCM
+aD/6lxgTy+Myf9u+4Qp+1RVJndpKnYU9przB28ktRjsT9fjuBO5/gsv0BuGAU7Q
bIQIerrASTM5+MXiCK3F1m3Q+yMAqIUPqzu3Azl3rNOdXThgWsAaLXIlWNtnsOBl
zZG6mE4ol9M3fCB5fvvh1aOKotqIM3mJ53KymFP3yYDRC33HiMQ9QupI7deWnCqz
NxGybHBzdcDtVw8QZpcq/vGN9i67GbViUyVGZtEkABYf9a7pXuiJsiC5BoJtTZeP
WxMPQuTBySvYZRdf/g4p5wfJuY2LSFU=
-----END CERTIFICATE-----
Generated at Wed Jul 2 12:02:21 2025 by rpki-client