Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/535a32ab-3dd9-3d77-84e0-1305e35edb43.roa
File:                     535a32ab-3dd9-3d77-84e0-1305e35edb43.roa (raw, json)
Hash identifier:          5LR31ZNHaxgqatKBIr5NTmsbRi3JqXK+A71A0VcsnjI=
Subject key identifier:   4E:96:FD:10:2D:E1:26:C5:DC:9F:37:9A:AE:13:8A:EC:CB:56:0A:AF
Certificate issuer:       /CN=ea182918-fbda-4bd7-9427-e289276ef48c
Certificate serial:       010D0C9F4328584A1B4A87FA1D4767D1B9F2A9A8
Authority key identifier: F4:EE:97:6B:CE:0C:49:07:0C:32:C2:B0:E0:F3:27:89:C8:21:7A:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/535a32ab-3dd9-3d77-84e0-1305e35edb43.roa
Signing time:             Sat 07 Jun 2025 00:17:46 +0000
ROA not before:           Sat 07 Jun 2025 00:17:46 +0000
ROA not after:            Fri 05 Sep 2025 00:17:46 +0000
asID:                     21868
IP address blocks:        23.168.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/ea182918-fbda-4bd7-9427-e289276ef48c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/ea182918-fbda-4bd7-9427-e289276ef48c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:4a:87:fa:1d:47:67:d1:b9:f2:a9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea182918-fbda-4bd7-9427-e289276ef48c
        Validity
            Not Before: Jun  7 00:17:46 2025 GMT
            Not After : Sep  5 00:17:46 2025 GMT
        Subject: CN=2cc37b5f-10a4-4543-b81c-4823559c8def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:76:c7:95:49:2a:67:1d:3e:69:13:49:d6:47:
                    a9:63:8a:d8:a5:4e:48:4f:0c:93:26:4f:f3:f6:e4:
                    cf:d9:e9:4d:29:fe:5d:48:14:da:98:56:42:03:44:
                    8e:35:56:87:1b:cc:bf:7b:cb:00:0e:19:d8:62:fe:
                    d8:f0:dc:17:53:dc:e7:07:1d:4c:cb:7b:6e:06:a6:
                    66:d3:a6:dc:06:37:f5:8b:09:b8:15:44:c0:6b:d6:
                    12:14:b6:a5:4f:5b:d1:65:f4:fe:1c:72:fc:6c:c1:
                    15:9a:4b:4d:90:01:34:cd:b2:0d:74:bc:f5:f5:ed:
                    f6:95:66:8c:cb:6a:ff:31:e7:ad:83:71:41:a1:34:
                    12:f1:0c:45:64:35:1e:43:8d:74:88:bd:36:6a:ef:
                    03:0e:b6:cf:80:19:7d:43:62:b5:f5:fe:59:1e:d6:
                    26:7c:0d:c7:4c:3d:22:8c:86:fb:b8:cf:2f:e5:76:
                    70:1e:40:e7:99:f9:c6:77:a1:f5:df:3e:9c:77:6d:
                    3b:59:18:d6:41:ff:01:33:d8:f1:d7:97:2f:e9:c0:
                    8f:6f:5e:e0:3c:07:2f:1e:04:be:53:dd:0f:75:a3:
                    88:3f:a2:4e:a8:64:76:11:b2:f0:8f:eb:51:d9:87:
                    1f:c1:d8:0e:55:3d:3f:d8:9f:83:b0:68:fe:7b:d8:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:96:FD:10:2D:E1:26:C5:DC:9F:37:9A:AE:13:8A:EC:CB:56:0A:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/535a32ab-3dd9-3d77-84e0-1305e35edb43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/ea182918-fbda-4bd7-9427-e289276ef48c.crl

            X509v3 Authority Key Identifier:
                keyid:F4:EE:97:6B:CE:0C:49:07:0C:32:C2:B0:E0:F3:27:89:C8:21:7A:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9e:66:bd:55:ce:18:0a:6b:cc:36:ff:fa:5b:35:5e:99:28:
         31:f5:8d:8d:e4:39:4e:01:4d:a9:36:59:20:d7:da:93:b2:42:
         08:ab:4f:eb:f2:f7:11:7d:f3:44:1e:b1:f9:85:40:cb:c9:82:
         03:61:02:19:75:fc:29:5b:a2:a7:53:90:2c:5f:21:99:04:a8:
         24:58:e5:58:13:97:f4:9f:ec:ad:03:82:cb:08:a5:73:22:ad:
         e8:9b:07:ad:35:91:64:2b:4e:3f:2e:c5:5d:39:8e:8b:44:a7:
         1d:af:46:f4:24:9f:7b:9f:ab:2e:11:18:24:d2:c4:51:1a:0d:
         fb:02:8c:1f:08:28:ec:10:85:2c:2b:02:c1:7c:f8:f1:81:6b:
         c2:85:6d:2c:05:78:33:f6:52:23:f5:62:91:93:4d:39:89:86:
         4b:4e:40:87:79:47:8d:bb:c3:ce:c1:0a:6a:b2:6d:ae:97:9e:
         4d:bd:7d:31:ea:19:fa:ef:4f:35:9c:a6:2e:29:53:23:f3:83:
         70:3d:a9:da:01:64:e2:63:e9:ac:d3:ba:a8:68:71:df:9e:34:
         2a:d7:08:48:79:88:b8:49:cc:62:0b:ed:fe:b3:65:06:c3:47:
         2a:ee:38:e8:f7:6a:63:f0:f4:c4:ee:5f:d2:38:6f:5f:9a:d7:
         33:31:6a:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobSof6HUdn0bnyqagwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWExODI5MTgtZmJkYS00YmQ3LTk0MjctZTI4OTI3NmVm
NDhjMB4XDTI1MDYwNzAwMTc0NloXDTI1MDkwNTAwMTc0NlowLzEtMCsGA1UEAxMk
MmNjMzdiNWYtMTBhNC00NTQzLWI4MWMtNDgyMzU1OWM4ZGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nbHlUkqZx0+aRNJ1kepY4rYpU5ITwyTJk/z
9uTP2elNKf5dSBTamFZCA0SONVaHG8y/e8sADhnYYv7Y8NwXU9znBx1My3tuBqZm
06bcBjf1iwm4FUTAa9YSFLalT1vRZfT+HHL8bMEVmktNkAE0zbINdLz19e32lWaM
y2r/Meetg3FBoTQS8QxFZDUeQ410iL02au8DDrbPgBl9Q2K19f5ZHtYmfA3HTD0i
jIb7uM8v5XZwHkDnmfnGd6H13z6cd207WRjWQf8BM9jx15cv6cCPb17gPAcvHgS+
U90PdaOIP6JOqGR2EbLwj+tR2YcfwdgOVT0/2J+DsGj+e9jNRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE6W/RAt4SbF3J83mq4TiuzLVgqvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lYTE4
MjkxOC1mYmRhLTRiZDctOTQyNy1lMjg5Mjc2ZWY0OGMvNTM1YTMyYWItM2RkOS0z
ZDc3LTg0ZTAtMTMwNWUzNWVkYjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWExODI5MTgtZmJkYS00YmQ3LTk0
MjctZTI4OTI3NmVmNDhjL2VhMTgyOTE4LWZiZGEtNGJkNy05NDI3LWUyODkyNzZl
ZjQ4Yy5jcmwwHwYDVR0jBBgwFoAU9O6Xa84MSQcMMsKw4PMnicgheowwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9lYTE4MjkxOC1mYmRhLTRiZDctOTQyNy1lMjg5
Mjc2ZWY0OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6h4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACieZr1VzhgKa8w2//pbNV6ZKDH1jY3kOU4BTak2WSDX2pOyQgirT+vy
9xF980QesfmFQMvJggNhAhl1/ClboqdTkCxfIZkEqCRY5VgTl/Sf7K0DgssIpXMi
reibB601kWQrTj8uxV05jotEpx2vRvQkn3ufqy4RGCTSxFEaDfsCjB8IKOwQhSwr
AsF8+PGBa8KFbSwFeDP2UiP1YpGTTTmJhktOQId5R427w87BCmqyba6Xnk29fTHq
GfrvTzWcpi4pUyPzg3A9qdoBZOJj6azTuqhocd+eNCrXCEh5iLhJzGIL7f6zZQbD
RyruOOj3amPw9MTuX9I4b1+a1zMxak4=
-----END CERTIFICATE-----
Generated at Fri Jul 4 02:22:53 2025 by rpki-client