Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa
File:                     853d2761-430f-3406-8353-e291e87c8b19.roa (raw, json)
Hash identifier:          ecgmvaz+ui4vOz+jhyUW18cn8vGg1exWNBLXOkBWpqg=
Subject key identifier:   63:D2:4C:58:AA:68:EB:97:FE:63:14:B7:1A:B5:76:7D:49:55:F7:B4
Certificate issuer:       /CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098
Certificate serial:       010D0C9F43285849C0A4EC4383295F3D095B3880
Authority key identifier: 10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     399935
IP address blocks:        23.168.216.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:ec:43:83:29:5f:3d:09:5b:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=54360743-6da6-4f69-9354-de7bececd00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ad:c9:2e:b7:f4:ea:a6:f0:e5:61:3c:9a:6f:
                    79:6a:88:a2:e2:a8:90:ec:61:c7:54:a9:c6:1b:86:
                    21:fd:e6:f3:4f:86:7d:1e:26:81:d4:34:b4:6a:b6:
                    06:28:9a:89:58:67:4b:f1:bf:38:01:be:90:ef:68:
                    b8:1b:3e:a5:d0:0d:6e:ef:35:ff:79:0b:66:dd:02:
                    ce:6d:f9:c8:6b:fd:07:c3:c9:00:1c:f5:a4:03:93:
                    65:27:d3:27:8f:20:00:c6:a0:a9:2e:30:12:e3:9d:
                    5a:74:f9:5b:db:1a:83:bf:6b:26:02:12:7c:63:3e:
                    d6:9f:86:93:4b:f8:79:32:f1:9e:c9:77:f7:7d:08:
                    88:e2:b2:c3:b7:fd:38:9e:e5:56:e2:c9:5b:6a:02:
                    8a:01:0f:99:cd:fb:42:4e:02:95:9c:e6:7e:55:46:
                    73:92:84:6d:45:2b:ab:8b:ac:37:db:18:ad:17:b7:
                    5a:a2:5d:9e:73:46:88:d6:b1:a0:7a:b0:d7:54:f2:
                    34:db:6d:f6:2c:00:95:77:32:0b:2d:4a:71:7d:70:
                    88:21:59:0b:64:2a:c8:3b:35:15:e5:a5:06:ba:b5:
                    25:a0:6a:c9:52:80:8b:06:0a:0f:ac:78:76:83:7a:
                    70:d5:7e:90:ac:ff:ce:7b:47:82:da:43:e7:db:96:
                    e9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D2:4C:58:AA:68:EB:97:FE:63:14:B7:1A:B5:76:7D:49:55:F7:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl

            X509v3 Authority Key Identifier:
                keyid:10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:0a:1f:f7:36:bb:b9:ed:63:06:55:b6:e2:4b:fa:9b:9b:5c:
         69:b4:8f:ec:08:12:40:f1:5a:ed:e7:8a:1f:3d:f9:f7:a5:de:
         2c:0b:11:ff:76:6a:e6:40:20:0b:a2:75:46:e8:7d:dc:d7:b3:
         30:25:a8:b5:21:28:70:33:ae:b0:2c:55:2b:01:fe:21:ad:28:
         41:81:61:85:7f:df:dc:45:87:0b:b5:4d:8d:6d:53:eb:c3:5f:
         97:ab:7b:31:70:91:27:a6:2e:bd:18:f0:84:5e:33:a1:10:92:
         26:b7:62:c5:5a:2c:c2:56:a7:58:0b:38:22:29:90:ce:80:a9:
         a8:11:22:b7:4b:82:d5:f8:c8:ab:a3:3c:34:c4:13:a5:54:82:
         d8:a9:fa:85:c4:bd:80:7b:a8:40:e1:56:86:46:0d:e1:31:18:
         8e:f6:37:b2:58:c7:02:cb:53:e7:39:ad:b3:39:c7:8a:e4:19:
         1e:6d:07:eb:f9:bb:c0:85:82:fb:ea:99:e0:de:85:bc:a2:3e:
         31:53:aa:eb:4d:d8:b8:eb:c6:10:c9:4f:99:93:bc:6b:f9:61:
         5c:c7:b3:cf:9d:64:21:f0:80:34:8e:3d:b6:67:4e:c3:49:40:
         5b:51:49:1e:81:46:6b:fb:e6:34:af:fe:b9:68:b9:57:ee:d2:
         c9:01:94:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOxDgylfPQlbOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU2OWU3YWUtNDY5ZC00MDBlLThmMmUtNGViZmMxYmUw
MDk4MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk
NTQzNjA3NDMtNmRhNi00ZjY5LTkzNTQtZGU3YmVjZWNkMDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha3JLrf06qbw5WE8mm95aoii4qiQ7GHHVKnG
G4Yh/ebzT4Z9HiaB1DS0arYGKJqJWGdL8b84Ab6Q72i4Gz6l0A1u7zX/eQtm3QLO
bfnIa/0Hw8kAHPWkA5NlJ9MnjyAAxqCpLjAS451adPlb2xqDv2smAhJ8Yz7Wn4aT
S/h5MvGeyXf3fQiI4rLDt/04nuVW4slbagKKAQ+ZzftCTgKVnOZ+VUZzkoRtRSur
i6w32xitF7daol2ec0aI1rGgerDXVPI02232LACVdzILLUpxfXCIIVkLZCrIOzUV
5aUGurUloGrJUoCLBgoPrHh2g3pw1X6QrP/Oe0eC2kPn25bpRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGPSTFiqaOuX/mMUtxq1dn1JVfe0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTY5
ZTdhZS00NjlkLTQwMGUtOGYyZS00ZWJmYzFiZTAwOTgvODUzZDI3NjEtNDMwZi0z
NDA2LTgzNTMtZTI5MWU4N2M4YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmU2OWU3YWUtNDY5ZC00MDBlLThm
MmUtNGViZmMxYmUwMDk4L2JlNjllN2FlLTQ2OWQtNDAwZS04ZjJlLTRlYmZjMWJl
MDA5OC5jcmwwHwYDVR0jBBgwFoAUEESif13LewEam23rbUc+n7ZRpYQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTY5ZTdhZS00NjlkLTQwMGUtOGYyZS00ZWJm
YzFiZTAwOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6jYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYKH/c2u7ntYwZVtuJL+pubXGm0j+wIEkDxWu3nih89+fel3iwLEf92
auZAIAuidUbofdzXszAlqLUhKHAzrrAsVSsB/iGtKEGBYYV/39xFhwu1TY1tU+vD
X5erezFwkSemLr0Y8IReM6EQkia3YsVaLMJWp1gLOCIpkM6AqagRIrdLgtX4yKuj
PDTEE6VUgtip+oXEvYB7qEDhVoZGDeExGI72N7JYxwLLU+c5rbM5x4rkGR5tB+v5
u8CFgvvqmeDehbyiPjFTqutN2LjrxhDJT5mTvGv5YVzHs8+dZCHwgDSOPbZnTsNJ
QFtRSR6BRmv75jSv/rlouVfu0skBlN4=
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:01:14 2025 by rpki-client