Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/53e4a9c3-167f-351d-88fa-2d900fd6639d.roa
File:                     53e4a9c3-167f-351d-88fa-2d900fd6639d.roa (raw, json)
Hash identifier:          ZKbdNdkQU3A1CHjNui7OTTnAyzOLwyxkBXYbVP827rY=
Subject key identifier:   21:35:57:2E:9B:23:CE:D1:EB:C4:87:62:13:8C:86:E2:5C:58:B0:D8
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285849AD1A1E987CCE96BF48F73900
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/53e4a9c3-167f-351d-88fa-2d900fd6639d.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     54113
IP address blocks:        23.235.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:1e:98:7c:ce:96:bf:48:f7:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=aeba096a-1fb0-4497-a302-7a91c616fdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ed:86:d5:aa:e6:53:c8:2f:74:27:a6:a2:8b:
                    cc:1b:34:a0:aa:4a:24:01:87:73:03:96:5a:af:57:
                    48:36:ab:63:f3:48:b2:40:46:c0:c3:86:30:0a:f6:
                    14:6b:0c:7b:2c:38:eb:85:75:51:67:2d:9f:16:ff:
                    0d:e7:63:0a:0c:60:a9:fe:3f:5e:6f:50:22:28:ac:
                    14:2a:dc:6a:dd:6e:96:bb:b3:c9:b0:da:b0:25:5d:
                    54:97:8a:24:19:58:c7:6a:65:62:41:ff:8c:05:64:
                    01:bb:bf:87:22:88:96:43:2b:72:d7:a4:14:3b:85:
                    61:5d:18:92:a8:3b:de:33:dd:91:2f:7f:d0:85:db:
                    33:c7:84:5c:b7:a2:07:a6:61:b1:c7:71:19:e0:6b:
                    e1:b8:64:30:1a:ab:dd:d2:1f:a5:52:35:6c:db:20:
                    ad:cf:0c:d7:87:ca:4f:73:c2:85:f9:cb:66:d8:44:
                    cc:bf:07:29:26:46:19:ec:e2:81:1a:4c:e3:c4:78:
                    6d:92:8f:50:fa:56:15:55:ce:af:88:57:bd:35:8f:
                    98:cb:44:1d:9f:11:63:e2:2a:df:fb:37:5c:00:b9:
                    41:1e:22:59:21:f5:d4:f9:19:d3:60:f3:1e:4e:28:
                    f7:ec:2f:fe:60:a3:21:ae:b0:79:3f:51:a2:58:23:
                    de:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:35:57:2E:9B:23:CE:D1:EB:C4:87:62:13:8C:86:E2:5C:58:B0:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/53e4a9c3-167f-351d-88fa-2d900fd6639d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b7:d7:90:32:f1:4b:8e:e8:e0:bc:02:b6:50:62:4a:78:d7:
         d7:73:17:77:76:76:81:c8:be:6b:25:2f:2d:5a:85:ff:f3:50:
         48:84:e5:29:df:a3:11:e7:aa:60:11:c6:60:15:94:23:05:bd:
         53:7a:18:fd:df:d4:d7:01:df:34:29:d2:49:2b:ae:55:05:a0:
         88:c5:c3:60:43:52:b4:20:fb:ee:2d:95:b2:c3:e7:c6:66:7b:
         80:89:fa:43:0e:8f:9b:a5:c2:1b:00:9c:42:2a:5c:5f:28:e0:
         be:f7:f1:7d:75:f7:cc:52:71:48:b6:0c:ad:72:67:d3:47:32:
         32:fa:24:6d:48:38:d0:e0:1c:15:5d:1e:15:e2:f7:82:92:9e:
         3c:b8:16:e9:a2:26:5c:ab:9c:0a:ce:5a:45:01:29:7d:45:f5:
         71:31:15:3a:ad:a0:4a:22:43:c8:b0:e7:f6:a7:bc:28:57:96:
         3d:80:49:eb:5a:fe:f1:2b:14:b3:c0:39:ce:7e:57:aa:ee:43:
         92:55:60:d4:2c:b2:b1:05:c1:55:d1:b5:fa:05:bb:1c:06:51:
         ef:bf:5c:12:df:cf:9c:9a:3a:22:3a:5f:8c:a4:e1:f2:af:b4:
         19:7d:40:80:5e:18:88:1a:7d:9c:80:e0:07:44:6b:9c:f8:58:
         e1:8f:d0:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGh6YfM6Wv0j3OQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk
YWViYTA5NmEtMWZiMC00NDk3LWEzMDItN2E5MWM2MTZmZGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO2G1armU8gvdCemoovMGzSgqkokAYdzA5Za
r1dINqtj80iyQEbAw4YwCvYUawx7LDjrhXVRZy2fFv8N52MKDGCp/j9eb1AiKKwU
Ktxq3W6Wu7PJsNqwJV1Ul4okGVjHamViQf+MBWQBu7+HIoiWQyty16QUO4VhXRiS
qDveM92RL3/Qhdszx4Rct6IHpmGxx3EZ4GvhuGQwGqvd0h+lUjVs2yCtzwzXh8pP
c8KF+ctm2ETMvwcpJkYZ7OKBGkzjxHhtko9Q+lYVVc6viFe9NY+Yy0QdnxFj4irf
+zdcALlBHiJZIfXU+RnTYPMeTij37C/+YKMhrrB5P1GiWCPeRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCE1Vy6bI87R68SHYhOMhuJcWLDYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNTNlNGE5YzMtMTY3Zi0z
NTFkLTg4ZmEtMmQ5MDBmZDY2MzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+smMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIW315Ay8UuO6OC8ArZQYkp419dzF3d2doHIvmslLy1ahf/zUEiE5Snf
oxHnqmARxmAVlCMFvVN6GP3f1NcB3zQp0kkrrlUFoIjFw2BDUrQg++4tlbLD58Zm
e4CJ+kMOj5ulwhsAnEIqXF8o4L738X1198xScUi2DK1yZ9NHMjL6JG1IONDgHBVd
HhXi94KSnjy4FumiJlyrnArOWkUBKX1F9XExFTqtoEoiQ8iw5/anvChXlj2ASeta
/vErFLPAOc5+V6ruQ5JVYNQssrEFwVXRtfoFuxwGUe+/XBLfz5yaOiI6X4yk4fKv
tBl9QIBeGIgafZyA4AdEa5z4WOGP0Ps=
-----END CERTIFICATE-----
Generated at Tue May 13 06:39:45 2025 by rpki-client