Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a9aa6b8-ae24-33d1-9470-93738dd66f9c.roa
File:                     3a9aa6b8-ae24-33d1-9470-93738dd66f9c.roa (raw, json)
Hash identifier:          sl/HRGXishMfTHwHTd/y78fAgJ7IaFCzPykm8vDfLxw=
Subject key identifier:   D8:B0:02:B2:2B:FF:87:38:EE:D2:45:5E:B0:15:D5:B3:F7:CD:A3:CD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498339F7A4D36DDD8F7383CC44
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a9aa6b8-ae24-33d1-9470-93738dd66f9c.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        23.193.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f7:a4:d3:6d:dd:8f:73:83:cc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=797dfb66-afb1-4f60-b4ba-dd2fc8d0ab6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:7d:7b:16:68:27:e2:89:d6:7b:be:d7:ba:
                    51:7e:6a:6a:6e:26:07:91:57:e2:0d:00:0f:ca:1f:
                    b6:6c:f3:98:9e:cd:fa:0a:07:21:7f:8f:53:51:ff:
                    53:bd:fd:36:2a:87:9a:a0:54:3e:66:6d:64:af:a0:
                    28:96:5e:bd:ae:ce:82:8e:de:fe:d4:59:7a:78:9e:
                    60:f0:e2:c6:a5:65:bf:fa:b9:84:71:ff:ea:d2:eb:
                    60:60:b4:9c:93:1a:f8:17:f8:4c:44:20:80:98:f2:
                    e9:be:9b:1d:21:3e:6b:16:93:a9:61:52:90:7f:df:
                    13:08:99:81:e8:b3:4c:c4:a7:da:55:9a:43:b8:b7:
                    3b:45:9b:4d:a1:a4:fd:63:90:a3:64:58:62:64:cd:
                    64:d8:78:ba:b4:71:04:48:5b:5c:73:1f:75:a8:5a:
                    c2:9d:d8:97:9f:9f:84:13:3c:3a:72:b1:b3:ce:67:
                    5c:11:f8:c0:d1:1c:e5:d8:89:20:60:a4:84:81:41:
                    5b:15:4d:45:e1:6a:ae:13:24:78:13:d6:3b:2e:d4:
                    21:e0:2c:b7:53:66:83:04:50:4a:5f:bc:41:dc:f2:
                    9d:7b:5b:25:46:ab:3a:95:24:39:27:85:e5:d8:ed:
                    54:ea:78:6a:2d:a1:80:f8:9a:a0:aa:8f:a0:99:b7:
                    84:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B0:02:B2:2B:FF:87:38:EE:D2:45:5E:B0:15:D5:B3:F7:CD:A3:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a9aa6b8-ae24-33d1-9470-93738dd66f9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.193.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c5:6e:4d:65:94:54:5b:e6:c7:19:33:53:d8:e9:8a:fd:a4:
         4f:66:6c:15:c5:d4:d0:2c:0d:a4:82:14:06:6a:59:fc:be:1a:
         d8:5f:af:62:36:31:a5:ac:e9:47:1e:27:5a:f5:03:1f:23:a7:
         be:82:a8:47:1a:42:dc:d7:74:95:06:82:b8:1a:ae:1c:f4:83:
         a1:25:14:9e:6d:ab:d1:9e:42:13:b2:72:3e:9e:59:d8:eb:6d:
         84:1e:ac:a0:16:31:30:24:d8:35:5c:89:2a:8a:47:d8:90:be:
         1c:a6:95:47:ec:f3:d8:1b:f4:19:e9:4c:4a:b7:6b:0b:29:13:
         5d:60:66:8d:69:1a:fd:49:b1:a3:a2:dd:a7:02:88:d3:de:ea:
         ea:bf:ab:ed:d8:7d:11:96:72:1a:5a:37:2a:4b:05:94:ea:01:
         3e:05:94:8c:4a:d4:5f:da:7f:a5:29:23:50:82:0c:db:38:eb:
         73:ac:11:ee:e0:8a:a2:b1:ae:21:88:a8:1d:a2:39:aa:58:50:
         d1:8a:b5:8f:58:0e:84:a6:8c:1f:e3:fb:de:50:bd:62:bd:35:
         a1:90:5c:fc:9f:e4:eb:8e:1b:8f:3b:3a:36:9d:89:31:36:81:
         a2:23:29:a0:09:74:8a:53:86:f9:f8:68:7c:65:be:9d:4c:a1:
         bd:aa:da:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOfek023dj3ODzEQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
Nzk3ZGZiNjYtYWZiMS00ZjYwLWI0YmEtZGQyZmM4ZDBhYjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmJ9exZoJ+KJ1nu+17pRfmpqbiYHkVfiDQAP
yh+2bPOYns36Cgchf49TUf9Tvf02KoeaoFQ+Zm1kr6Aoll69rs6Cjt7+1Fl6eJ5g
8OLGpWW/+rmEcf/q0utgYLSckxr4F/hMRCCAmPLpvpsdIT5rFpOpYVKQf98TCJmB
6LNMxKfaVZpDuLc7RZtNoaT9Y5CjZFhiZM1k2Hi6tHEESFtccx91qFrCndiXn5+E
Ezw6crGzzmdcEfjA0Rzl2IkgYKSEgUFbFU1F4WquEyR4E9Y7LtQh4Cy3U2aDBFBK
X7xB3PKde1slRqs6lSQ5J4Xl2O1U6nhqLaGA+Jqgqo+gmbeEfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNiwArIr/4c47tJFXrAV1bP3zaPNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2E5YWE2YjgtYWUyNC0z
M2QxLTk0NzAtOTM3MzhkZDY2ZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8G3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfFbk1llFRb5scZM1PY6Yr9pE9mbBXF1NAsDaSCFAZqWfy+Gthfr2I2
MaWs6UceJ1r1Ax8jp76CqEcaQtzXdJUGgrgarhz0g6ElFJ5tq9GeQhOycj6eWdjr
bYQerKAWMTAk2DVciSqKR9iQvhymlUfs89gb9BnpTEq3awspE11gZo1pGv1JsaOi
3acCiNPe6uq/q+3YfRGWchpaNypLBZTqAT4FlIxK1F/af6UpI1CCDNs463OsEe7g
iqKxriGIqB2iOapYUNGKtY9YDoSmjB/j+95QvWK9NaGQXPyf5OuOG487OjadiTE2
gaIjKaAJdIpThvn4aHxlvp1Mob2q2k4=
-----END CERTIFICATE-----
Generated at Tue May 6 10:48:39 2025 by rpki-client