Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/16ea430d-5377-3810-a412-dca5c4682907.roa
File:                     16ea430d-5377-3810-a412-dca5c4682907.roa (raw, json)
Hash identifier:          WZzPE9JiL9M6T+3+Jy8/y3yLg8PtUFTyNTXhBixA9Fk=
Subject key identifier:   23:1D:63:F7:82:1B:B6:AE:1B:F3:FA:83:F6:E2:2F:47:95:95:57:1F
Certificate issuer:       /CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
Certificate serial:       010D0C9F43285849C904E8FD0BE83040FC46AA00
Authority key identifier: D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/16ea430d-5377-3810-a412-dca5c4682907.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     46539
IP address blocks:        23.159.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e8:fd:0b:e8:30:40:fc:46:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=0d078893-48aa-42a1-8137-1dc412499730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:19:57:e3:5e:54:9a:fe:b1:55:89:9d:5c:67:
                    a5:fd:23:ca:4f:cc:e3:b3:7d:1e:8c:f7:61:db:8b:
                    79:fe:10:d9:84:7c:14:90:f9:01:81:b9:a3:3c:2d:
                    d2:c8:37:45:79:a2:0f:3b:af:ce:2a:93:9e:13:43:
                    d5:43:a7:91:33:8e:cd:08:8d:ce:de:04:80:72:f8:
                    c7:89:1a:4a:e0:7c:d6:cb:38:89:b4:ae:22:02:44:
                    2f:a6:a7:d3:be:12:a0:25:83:d7:10:61:a0:37:2c:
                    05:00:b2:7d:d4:1f:dc:c5:a3:c4:86:8a:ca:da:25:
                    50:0a:94:46:25:38:c9:f5:5f:f0:74:fb:48:f6:b4:
                    44:87:a6:23:38:a7:1d:09:7b:fa:4e:b0:b3:73:f0:
                    8d:6e:1b:bb:c1:67:5e:2d:18:86:4b:f0:00:52:de:
                    86:ae:e5:5a:b6:8a:49:85:7b:6b:fb:78:c1:f1:68:
                    ad:3a:c7:f6:c3:ca:5e:58:eb:f5:9d:2b:c8:ee:8f:
                    99:4c:02:fd:62:e4:da:fe:e6:e5:22:ac:82:bd:72:
                    f8:04:49:ab:eb:44:f3:d1:12:e9:e0:f2:80:99:5c:
                    4a:8d:bf:55:11:ae:19:72:7d:53:ba:3e:a5:d5:86:
                    98:b0:e6:2b:67:39:75:09:99:bd:d8:80:c2:60:fe:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1D:63:F7:82:1B:B6:AE:1B:F3:FA:83:F6:E2:2F:47:95:95:57:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/16ea430d-5377-3810-a412-dca5c4682907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl

            X509v3 Authority Key Identifier:
                keyid:D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:40:b5:6b:c4:7c:a8:48:2b:29:d5:bb:bb:76:6c:06:a5:46:
         47:0d:77:2e:64:3b:cb:f9:1a:19:9b:20:76:95:6a:d1:c8:10:
         fc:3f:a0:46:f5:b0:42:3b:91:cd:09:93:3a:77:53:70:ac:4c:
         21:b9:18:89:ed:78:69:93:03:bc:67:62:f4:06:8f:54:f0:0a:
         5d:c0:99:b4:7d:ab:f7:dc:a4:27:28:57:85:0a:02:77:64:2e:
         eb:dd:b5:d4:a0:87:4c:03:19:af:3d:67:23:f3:5d:73:aa:c5:
         84:4b:d4:81:8d:f0:8e:8a:65:f7:be:c1:5a:76:15:b6:94:a8:
         21:f9:a7:73:06:8b:48:31:eb:44:28:b9:9d:82:ed:e1:f4:25:
         c7:85:56:82:71:94:5b:c6:d2:36:7d:8d:f4:67:da:20:78:ff:
         0d:a4:a7:9e:e8:f4:f1:6b:8c:b7:88:22:b7:2e:a4:d8:19:25:
         16:93:0e:25:fc:b3:57:fb:81:09:b8:3a:7a:1e:dd:9e:b4:b0:
         27:44:35:92:64:35:16:1b:20:af:77:49:48:5a:0a:d4:11:10:
         6d:9a:6f:53:5c:91:8c:84:92:e5:c5:94:eb:cd:1f:97:8b:a8:
         ec:b4:11:d0:31:64:df:ac:f0:43:8a:fc:16:a9:07:76:8a:7d:
         8c:71:8e:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBOj9C+gwQPxGqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE3OWNlMjgtMjNjNy00NWUxLTliMGUtZDkwMzU4Yzk0
ZjU3MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
MGQwNzg4OTMtNDhhYS00MmExLTgxMzctMWRjNDEyNDk5NzMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRlX415Umv6xVYmdXGel/SPKT8zjs30ejPdh
24t5/hDZhHwUkPkBgbmjPC3SyDdFeaIPO6/OKpOeE0PVQ6eRM47NCI3O3gSAcvjH
iRpK4HzWyziJtK4iAkQvpqfTvhKgJYPXEGGgNywFALJ91B/cxaPEhorK2iVQCpRG
JTjJ9V/wdPtI9rREh6YjOKcdCXv6TrCzc/CNbhu7wWdeLRiGS/AAUt6GruVatopJ
hXtr+3jB8WitOsf2w8peWOv1nSvI7o+ZTAL9YuTa/ublIqyCvXL4BEmr60Tz0RLp
4PKAmVxKjb9VEa4Zcn1Tuj6l1YaYsOYrZzl1CZm92IDCYP7a0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCMdY/eCG7auG/P6g/biL0eVlVcfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTc5
Y2UyOC0yM2M3LTQ1ZTEtOWIwZS1kOTAzNThjOTRmNTcvMTZlYTQzMGQtNTM3Ny0z
ODEwLWE0MTItZGNhNWM0NjgyOTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE3OWNlMjgtMjNjNy00NWUxLTli
MGUtZDkwMzU4Yzk0ZjU3L2UxNzljZTI4LTIzYzctNDVlMS05YjBlLWQ5MDM1OGM5
NGY1Ny5jcmwwHwYDVR0jBBgwFoAU2AXHLiY/2rj1Q+/5UZWEQBye9GAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMTc5Y2UyOC0yM2M3LTQ1ZTEtOWIwZS1kOTAz
NThjOTRmNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5+QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACRAtWvEfKhIKynVu7t2bAalRkcNdy5kO8v5GhmbIHaVatHIEPw/oEb1
sEI7kc0Jkzp3U3CsTCG5GInteGmTA7xnYvQGj1TwCl3AmbR9q/fcpCcoV4UKAndk
LuvdtdSgh0wDGa89ZyPzXXOqxYRL1IGN8I6KZfe+wVp2FbaUqCH5p3MGi0gx60Qo
uZ2C7eH0JceFVoJxlFvG0jZ9jfRn2iB4/w2kp57o9PFrjLeIIrcupNgZJRaTDiX8
s1f7gQm4Onoe3Z60sCdENZJkNRYbIK93SUhaCtQREG2ab1NckYyEkuXFlOvNH5eL
qOy0EdAxZN+s8EOK/BapB3aKfYxxjmQ=
-----END CERTIFICATE-----
Generated at Sat May 10 10:17:46 2025 by rpki-client