Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/6bb560ec-aa19-3633-98be-a5a2e7708fd6.roa
File:                     6bb560ec-aa19-3633-98be-a5a2e7708fd6.roa (raw, json)
Hash identifier:          bU5gHbMWFx0YMJ5co5EWJhu2CiLCVfMidqlEI8YywOY=
Subject key identifier:   53:8D:44:BF:2B:86:03:04:0C:3A:BA:C6:7C:BA:3C:20:CF:A9:5D:24
Certificate issuer:       /CN=8792fa78-8f07-41ad-aaa5-9b445516bf82
Certificate serial:       010D0C9F43285849BCE61C883A0533BB821CB080
Authority key identifier: DE:A7:FE:B2:9E:14:63:F6:09:E5:68:DE:A8:F6:01:5B:6C:92:69:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/6bb560ec-aa19-3633-98be-a5a2e7708fd6.roa
Signing time:             Sun 04 May 2025 04:49:26 +0000
ROA not before:           Sun 04 May 2025 04:49:26 +0000
ROA not after:            Sat 02 Aug 2025 04:49:26 +0000
asID:                     26286
IP address blocks:        23.138.156.0/24 maxlen: 24
                          2602:f661::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/8792fa78-8f07-41ad-aaa5-9b445516bf82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/8792fa78-8f07-41ad-aaa5-9b445516bf82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:e6:1c:88:3a:05:33:bb:82:1c:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8792fa78-8f07-41ad-aaa5-9b445516bf82
        Validity
            Not Before: May  4 04:49:26 2025 GMT
            Not After : Aug  2 04:49:26 2025 GMT
        Subject: CN=7b0fe792-98f7-4b8a-9012-ca926830d78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:74:c0:40:3c:6b:ef:03:65:b8:f6:93:38:
                    ed:c6:b6:2d:22:d5:5c:17:49:64:7e:4d:91:f6:24:
                    fd:1b:99:ce:2f:1a:21:14:3b:e5:bb:18:ed:50:6e:
                    f8:e1:56:93:85:8e:1c:69:ec:dd:f0:49:e6:83:12:
                    65:e0:1f:de:05:55:0d:e2:f5:8a:65:ac:14:af:24:
                    87:64:41:08:dc:17:e8:39:41:9b:70:a3:4a:ae:f4:
                    f4:4e:fc:ff:fb:d7:b1:ed:92:3d:fb:01:65:e0:0d:
                    63:6d:94:17:f1:60:f8:43:39:9a:7c:93:6d:af:32:
                    81:bb:cc:65:c4:f4:66:03:13:3a:87:d5:7d:c8:28:
                    3a:05:35:b8:8d:b2:28:8f:f2:ac:84:1a:a2:01:49:
                    00:73:d2:05:26:8f:e6:c2:cf:25:f5:77:97:51:5b:
                    84:ea:67:9b:9b:c4:af:96:61:0c:56:ac:9e:11:61:
                    ad:c3:dd:d2:b3:db:ac:49:34:7c:a0:5d:45:8c:34:
                    3c:dc:cc:70:c8:73:82:0c:ac:32:fa:a6:4d:1e:b8:
                    fd:6f:9f:a4:ea:dc:7b:22:b7:8f:bf:93:b4:3a:fa:
                    16:09:ff:dc:89:36:d6:bb:2d:a0:30:85:2f:af:3d:
                    cc:24:e0:f5:f0:56:dd:ff:6e:fd:e6:0e:50:a8:fd:
                    6d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8D:44:BF:2B:86:03:04:0C:3A:BA:C6:7C:BA:3C:20:CF:A9:5D:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/6bb560ec-aa19-3633-98be-a5a2e7708fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/8792fa78-8f07-41ad-aaa5-9b445516bf82.crl

            X509v3 Authority Key Identifier:
                keyid:DE:A7:FE:B2:9E:14:63:F6:09:E5:68:DE:A8:F6:01:5B:6C:92:69:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.156.0/24
                IPv6:
                  2602:f661::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f6:4e:ea:f5:78:81:96:af:31:6f:8b:b4:ae:33:82:5f:77:
         b8:ed:42:3f:26:43:50:a5:4d:02:de:bd:90:58:f0:e0:1b:b9:
         4e:bf:14:10:86:84:6c:db:6a:64:a9:54:43:2d:10:a8:47:f9:
         21:f6:44:ea:94:8d:9b:7f:fa:bc:c2:39:48:ec:ce:dd:82:f8:
         09:6a:44:5a:af:c6:b5:fb:11:d9:f0:30:1c:13:6e:c2:42:43:
         c4:5a:99:5c:8b:ae:47:63:6f:fd:95:54:a1:f4:01:60:61:6c:
         2c:43:54:19:98:59:79:28:32:2d:ec:90:d9:af:3e:56:7a:4c:
         04:a0:cd:97:57:fa:5c:fd:24:6c:b8:9b:4e:61:40:a5:db:8d:
         7a:37:09:a0:38:12:5a:14:14:72:b4:4c:99:cb:a6:41:17:d6:
         1d:38:01:b8:9c:4c:74:b5:ff:58:2d:88:36:c8:35:0a:28:6e:
         48:f9:bf:a2:1f:4a:1b:42:0f:99:15:9d:73:56:9f:5a:ba:4c:
         af:10:1c:32:7c:9c:8f:da:24:66:80:d7:e8:3d:12:14:72:be:
         7e:b5:06:aa:1f:fc:ed:60:5a:47:10:26:70:44:e1:fe:e9:08:
         f7:cd:fa:13:22:0b:c0:1c:8b:f5:06:d7:06:89:26:9b:26:e5:
         81:23:db:e3
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEm85hyIOgUzu4IcsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc5MmZhNzgtOGYwNy00MWFkLWFhYTUtOWI0NDU1MTZi
ZjgyMB4XDTI1MDUwNDA0NDkyNloXDTI1MDgwMjA0NDkyNlowLzEtMCsGA1UEAxMk
N2IwZmU3OTItOThmNy00YjhhLTkwMTItY2E5MjY4MzBkNzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBx0wEA8a+8DZbj2kzjtxrYtItVcF0lkfk2R
9iT9G5nOLxohFDvluxjtUG744VaThY4caezd8EnmgxJl4B/eBVUN4vWKZawUrySH
ZEEI3BfoOUGbcKNKrvT0Tvz/+9ex7ZI9+wFl4A1jbZQX8WD4QzmafJNtrzKBu8xl
xPRmAxM6h9V9yCg6BTW4jbIoj/KshBqiAUkAc9IFJo/mws8l9XeXUVuE6mebm8Sv
lmEMVqyeEWGtw93Ss9usSTR8oF1FjDQ83MxwyHOCDKwy+qZNHrj9b5+k6tx7IreP
v5O0OvoWCf/ciTbWuy2gMIUvrz3MJOD18Fbd/2795g5QqP1tEQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFFONRL8rhgMEDDq6xny6PCDPqV0kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84Nzky
ZmE3OC04ZjA3LTQxYWQtYWFhNS05YjQ0NTUxNmJmODIvNmJiNTYwZWMtYWExOS0z
NjMzLTk4YmUtYTVhMmU3NzA4ZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODc5MmZhNzgtOGYwNy00MWFkLWFh
YTUtOWI0NDU1MTZiZjgyLzg3OTJmYTc4LThmMDctNDFhZC1hYWE1LTliNDQ1NTE2
YmY4Mi5jcmwwHwYDVR0jBBgwFoAU3qf+sp4UY/YJ5WjeqPYBW2ySadowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy84NzkyZmE3OC04ZjA3LTQxYWQtYWFhNS05YjQ0
NTUxNmJmODIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4qcMA4E
AgACMAgDBgAmAvZhADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBg9k7q9XiBlq8xb4u0rjOCX3e47UI/JkNQ
pU0C3r2QWPDgG7lOvxQQhoRs22pkqVRDLRCoR/kh9kTqlI2bf/q8wjlI7M7dgvgJ
akRar8a1+xHZ8DAcE27CQkPEWplci65HY2/9lVSh9AFgYWwsQ1QZmFl5KDIt7JDZ
rz5WekwEoM2XV/pc/SRsuJtOYUCl2416NwmgOBJaFBRytEyZy6ZBF9YdOAG4nEx0
tf9YLYg2yDUKKG5I+b+iH0obQg+ZFZ1zVp9aukyvEBwyfJyP2iRmgNfoPRIUcr5+
tQaqH/ztYFpHECZwROH+6Qj3zfoTIgvAHIv1BtcGiSabJuWBI9vj
-----END CERTIFICATE-----
Generated at Mon May 12 12:41:00 2025 by rpki-client