Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/311037d3-113d-368a-9a53-cef320b0c81d.roa
File:                     311037d3-113d-368a-9a53-cef320b0c81d.roa (raw, json)
Hash identifier:          abH6ldBYNLyYoDLhz13uARIqcEn7ZwE0Ds2o5WWpskM=
Subject key identifier:   4D:78:78:62:8A:51:8F:13:88:9D:BC:DC:88:BD:95:5B:13:27:66:F4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A4C3B21727452B1ADA6A3CA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/311037d3-113d-368a-9a53-cef320b0c81d.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     20940
IP address blocks:        23.54.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:21:72:74:52:b1:ad:a6:a3:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=a8d4e106-1178-447d-bc0c-74eb4d3921e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9b:ab:ec:55:8a:fe:49:24:7c:d6:a0:f4:30:
                    d3:f3:28:86:e7:10:46:d3:f9:47:ec:26:f3:9f:e4:
                    08:be:40:be:9c:e4:af:f4:84:cd:d7:b0:2b:43:05:
                    d5:a2:0f:bd:d6:27:aa:2d:92:f0:ef:f1:5c:1b:07:
                    da:98:76:29:e4:48:a5:3b:91:a9:13:5c:44:3b:6c:
                    03:4c:58:c7:04:65:fe:2b:d3:f0:bb:30:49:1e:91:
                    2f:2a:ee:3c:49:90:67:93:11:a2:ca:3e:6d:b7:ee:
                    d1:7a:56:fc:52:22:7c:d9:0f:37:bb:cb:94:ff:2b:
                    1f:9e:97:77:40:48:bd:7b:a4:0a:49:0f:f8:07:64:
                    37:db:c2:7d:53:28:9b:b8:05:04:5c:f8:2a:48:96:
                    44:d0:72:40:60:74:1c:18:54:1b:40:53:24:0e:ce:
                    06:1a:99:e9:02:25:c2:e4:05:15:5a:58:8c:43:8f:
                    cf:36:c1:9a:5b:0b:66:e2:78:10:5a:cd:89:ba:dd:
                    f0:6d:0f:d6:6a:25:62:97:77:af:87:d8:28:11:b4:
                    f6:ad:d5:d8:9f:24:a0:2d:ef:2c:c0:f3:34:c6:84:
                    da:0f:cb:d3:dc:cc:d8:84:1c:f7:01:13:30:81:4f:
                    93:cb:b9:1c:eb:b0:f6:ba:8b:e6:e7:73:a2:76:1d:
                    d7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:78:78:62:8A:51:8F:13:88:9D:BC:DC:88:BD:95:5B:13:27:66:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/311037d3-113d-368a-9a53-cef320b0c81d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a8:54:3b:6b:f4:3e:ee:69:47:7d:51:e1:c7:12:5c:c7:ae:
         dd:31:6e:32:63:cd:94:40:23:ff:67:b8:58:da:ce:b9:d8:1a:
         5f:1e:48:a1:e0:45:fc:70:0d:2c:82:db:3e:c9:78:b9:64:75:
         d3:ff:78:df:01:05:4f:1c:78:ea:f0:d7:77:d0:b8:89:85:c7:
         f1:ab:66:df:25:e7:ed:0e:ff:9a:a8:a4:b3:2e:ef:f3:4c:dd:
         57:90:fc:32:e6:5e:72:9c:96:49:2f:bb:2e:7f:ab:46:d8:2e:
         9d:af:e7:e8:ca:f4:04:72:8e:7a:b9:bf:c5:f6:c7:2f:9c:42:
         58:a0:d7:57:f8:a4:0a:d0:50:eb:ee:e2:34:2a:20:da:12:d1:
         4a:b4:4f:dd:1c:f0:17:d2:c4:df:d2:c9:30:d2:38:22:c9:1f:
         c6:d2:87:9a:8c:38:4c:19:82:5d:67:aa:b5:f3:17:3e:51:a3:
         b8:a0:67:12:99:f7:db:ac:98:6d:a8:ba:c5:f6:4a:11:fb:d3:
         18:59:19:e3:ee:f8:5c:03:90:f1:36:2e:82:2a:e1:d2:b8:dc:
         f0:69:db:bb:65:05:3b:6c:9e:e0:bd:b4:e8:f5:98:f1:2e:8d:
         a4:88:3e:20:74:60:48:84:4d:bd:22:08:0b:e1:7b:ec:ca:26:
         5d:1c:37:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOyFydFKxraajyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk
YThkNGUxMDYtMTE3OC00NDdkLWJjMGMtNzRlYjRkMzkyMWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZur7FWK/kkkfNag9DDT8yiG5xBG0/lH7Cbz
n+QIvkC+nOSv9ITN17ArQwXVog+91ieqLZLw7/FcGwfamHYp5EilO5GpE1xEO2wD
TFjHBGX+K9PwuzBJHpEvKu48SZBnkxGiyj5tt+7Relb8UiJ82Q83u8uU/ysfnpd3
QEi9e6QKSQ/4B2Q328J9UyibuAUEXPgqSJZE0HJAYHQcGFQbQFMkDs4GGpnpAiXC
5AUVWliMQ4/PNsGaWwtm4ngQWs2Jut3wbQ/WaiVil3evh9goEbT2rdXYnySgLe8s
wPM0xoTaD8vT3MzYhBz3ARMwgU+Ty7kc67D2uovm53Oidh3XfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE14eGKKUY8TiJ283Ii9lVsTJ2b0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzExMDM3ZDMtMTEzZC0z
NjhhLTlhNTMtY2VmMzIwYjBjODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzaeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAaoVDtr9D7uaUd9UeHHElzHrt0xbjJjzZRAI/9nuFjazrnYGl8eSKHg
RfxwDSyC2z7JeLlkddP/eN8BBU8ceOrw13fQuImFx/GrZt8l5+0O/5qopLMu7/NM
3VeQ/DLmXnKclkkvuy5/q0bYLp2v5+jK9ARyjnq5v8X2xy+cQlig11f4pArQUOvu
4jQqINoS0Uq0T90c8BfSxN/SyTDSOCLJH8bSh5qMOEwZgl1nqrXzFz5Ro7igZxKZ
99usmG2ousX2ShH70xhZGePu+FwDkPE2LoIq4dK43PBp27tlBTtsnuC9tOj1mPEu
jaSIPiB0YEiETb0iCAvhe+zKJl0cN3Q=
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:27:22 2025 by rpki-client