Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/817a7de8-0b60-3ec9-824f-449112c81345.roa
File:                     817a7de8-0b60-3ec9-824f-449112c81345.roa (raw, json)
Hash identifier:          7iEA+v5rIA8a2z81TLwnZMwGiebNC68XCMdBKYdYoEs=
Subject key identifier:   A5:F9:94:96:CC:4A:7C:F2:71:2F:B9:78:68:F8:3B:3D:B8:EA:BB:F0
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285849D594EEA75E82954073499180
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/817a7de8-0b60-3ec9-824f-449112c81345.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     7203
IP address blocks:        23.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ee:a7:5e:82:95:40:73:49:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=39967686-8b55-4e7c-bf9a-e9ca1d180c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b2:5d:70:6f:fc:69:f4:a4:8a:f2:04:d0:4c:
                    99:1a:2a:d9:0f:10:b3:70:53:a9:cc:97:f7:99:09:
                    0f:b4:0e:31:cc:86:68:96:6d:2e:42:a6:5a:ae:c7:
                    6c:4f:f2:1b:8b:f4:58:fe:dd:3b:f0:0d:ed:3b:34:
                    b6:68:af:ec:74:86:79:ae:f5:7e:a6:d0:77:eb:9d:
                    a7:74:bd:88:2e:d8:44:58:ee:71:a2:97:f9:90:43:
                    90:4d:d5:c1:79:20:71:f1:88:65:ae:7a:0f:ed:8d:
                    55:4d:a6:6a:95:1a:39:37:28:3f:f5:44:35:bf:c3:
                    a1:ee:8b:8a:07:0a:86:34:56:98:12:a3:15:9c:71:
                    3c:d7:dc:86:06:db:6f:17:24:b8:2d:1c:2d:ac:f4:
                    8c:de:22:29:7d:33:61:16:5c:2c:c4:3a:bf:44:b2:
                    86:9a:1b:b2:52:62:4f:71:06:4d:bb:03:12:06:1c:
                    6c:84:a5:be:6d:83:1a:a0:8a:66:dc:88:1a:27:73:
                    7b:89:39:af:c0:3a:3d:7f:54:d1:5a:db:5e:84:e5:
                    93:14:f7:a2:bc:df:cc:5a:e2:43:52:97:0c:fa:15:
                    f8:61:98:4e:0b:be:db:70:9b:b5:81:22:27:af:61:
                    95:de:84:83:43:c4:e0:09:9b:a5:c3:5a:a0:8b:be:
                    a5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F9:94:96:CC:4A:7C:F2:71:2F:B9:78:68:F8:3B:3D:B8:EA:BB:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/817a7de8-0b60-3ec9-824f-449112c81345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9b:46:d9:d7:7f:39:3b:9b:23:0a:1e:ef:4b:98:f4:be:60:
         9e:57:2a:49:21:9b:a8:5c:30:d1:72:aa:a7:9d:ea:a3:8d:66:
         a2:c8:d5:9c:1a:dc:7f:97:56:8c:23:0c:96:ca:7a:a3:ad:74:
         a8:52:5f:30:8c:97:70:a9:6f:58:75:92:73:42:14:b5:e2:4c:
         ac:75:b2:a4:96:6e:d5:16:77:1d:23:f5:a0:d1:6f:48:3f:35:
         fe:07:49:e9:6c:d5:20:d8:6b:2d:d3:4e:5b:fb:35:02:0f:d3:
         3c:40:dc:4b:46:bb:37:e3:3a:1b:13:05:ac:b5:ec:55:1e:69:
         0e:11:68:87:f0:9b:6c:7c:cd:32:23:34:44:fa:0b:f0:3d:3b:
         20:d0:5c:65:ce:11:80:29:3c:ee:85:68:79:19:44:f0:c4:85:
         e6:33:45:3c:7b:29:f9:82:b7:b1:ff:f2:e6:a2:cf:c6:c4:b6:
         18:38:b1:5d:2f:75:fe:72:96:9a:94:a8:19:31:45:67:81:a1:
         29:43:14:40:08:f0:6b:b4:f0:78:cc:2c:d5:9a:71:92:ad:78:
         da:01:70:93:d5:ed:72:dc:63:70:2e:c5:08:5d:36:43:a1:2e:
         50:09:32:33:8c:de:2c:ff:6b:52:29:8b:a5:84:12:31:8f:a4:
         30:a8:7c:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlO6nXoKVQHNJkYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk
Mzk5Njc2ODYtOGI1NS00ZTdjLWJmOWEtZTljYTFkMTgwYzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobJdcG/8afSkivIE0EyZGirZDxCzcFOpzJf3
mQkPtA4xzIZolm0uQqZarsdsT/Ibi/RY/t078A3tOzS2aK/sdIZ5rvV+ptB3652n
dL2ILthEWO5xopf5kEOQTdXBeSBx8YhlrnoP7Y1VTaZqlRo5Nyg/9UQ1v8Oh7ouK
BwqGNFaYEqMVnHE819yGBttvFyS4LRwtrPSM3iIpfTNhFlwsxDq/RLKGmhuyUmJP
cQZNuwMSBhxshKW+bYMaoIpm3IgaJ3N7iTmvwDo9f1TRWttehOWTFPeivN/MWuJD
UpcM+hX4YZhOC77bcJu1gSInr2GV3oSDQ8TgCZulw1qgi76lBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKX5lJbMSnzycS+5eGj4Oz246rvwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODE3YTdkZTgtMGI2MC0z
ZWM5LTgyNGYtNDQ5MTEyYzgxMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxPEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADObRtnXfzk7myMKHu9LmPS+YJ5XKkkhm6hcMNFyqqed6qONZqLI1Zwa
3H+XVowjDJbKeqOtdKhSXzCMl3Cpb1h1knNCFLXiTKx1sqSWbtUWdx0j9aDRb0g/
Nf4HSels1SDYay3TTlv7NQIP0zxA3EtGuzfjOhsTBay17FUeaQ4RaIfwm2x8zTIj
NET6C/A9OyDQXGXOEYApPO6FaHkZRPDEheYzRTx7KfmCt7H/8uaiz8bEthg4sV0v
df5ylpqUqBkxRWeBoSlDFEAI8Gu08HjMLNWacZKteNoBcJPV7XLcY3AuxQhdNkOh
LlAJMjOM3iz/a1Ipi6WEEjGPpDCofMA=
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:59:37 2025 by rpki-client