Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83e884b4-b347-32b8-9a51-37ace8318143.roa
File:                     83e884b4-b347-32b8-9a51-37ace8318143.roa (raw, json)
Hash identifier:          uxFKB/G+p7fb/3Hn+GkyXfjSz+ObKlCvtJsRmCsLo7A=
Subject key identifier:   2D:60:6D:38:58:77:12:E0:E1:91:9D:7D:31:04:22:82:9F:58:DB:C2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A3CE0306B7D653CB01FC7A440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83e884b4-b347-32b8-9a51-37ace8318143.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     20940
IP address blocks:        23.46.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:30:6b:7d:65:3c:b0:1f:c7:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=d44480a5-e7c6-4b06-8b42-6d12589d76a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:78:0e:7e:6d:50:c7:8d:12:b4:fd:66:1b:
                    85:e2:00:4b:32:c3:74:01:f3:47:7b:35:b8:e7:13:
                    8e:be:3e:1d:9d:7d:cf:a4:80:1d:99:b7:02:0e:16:
                    74:f4:65:35:ec:25:8e:b7:af:e2:87:85:a8:7f:f2:
                    ec:42:ba:a2:06:2c:6d:65:57:8f:2b:94:26:aa:6f:
                    53:f7:7d:b2:1e:be:ad:fc:b2:71:2d:0b:a0:1d:be:
                    db:9b:d9:95:6a:3a:00:39:18:6d:52:b8:ba:d7:eb:
                    a4:da:3d:f1:7b:4c:a0:e5:91:11:6e:d2:bc:9c:6c:
                    12:ae:f4:f3:f2:9e:a1:f6:ca:f7:c1:1c:d0:e8:4a:
                    8b:d2:69:4a:41:7f:91:a5:d4:b7:6b:c9:2f:68:b1:
                    d8:fd:a3:0a:55:2e:26:67:2c:01:aa:d0:61:c3:03:
                    bf:7d:ba:5d:cc:a3:b6:dd:61:5a:48:8e:53:85:96:
                    15:b5:fb:3b:9c:9e:95:48:f0:dc:6c:3b:eb:eb:91:
                    b6:61:12:2d:f8:68:9f:c8:7b:a3:68:ee:7e:ca:09:
                    75:5c:ff:77:aa:d6:3f:ae:c8:74:20:d8:02:64:a4:
                    50:5d:29:36:0e:05:1c:77:87:19:5f:b8:f3:14:46:
                    6f:ca:22:6f:c2:0b:26:b3:23:08:c5:b9:65:20:0b:
                    29:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:60:6D:38:58:77:12:E0:E1:91:9D:7D:31:04:22:82:9F:58:DB:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83e884b4-b347-32b8-9a51-37ace8318143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.46.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:10:ec:54:b5:6d:6a:24:88:56:4f:c2:c2:82:3c:32:3c:be:
         61:c9:17:9f:bb:f8:dc:e6:d0:09:52:03:09:0a:cb:49:ac:40:
         e8:91:2b:04:1b:cc:6c:1a:a2:8e:67:b9:9c:22:7a:1c:54:58:
         b2:78:72:8c:16:13:c2:14:e6:70:e0:a4:01:76:67:b9:3f:27:
         39:2d:2b:97:75:e8:7a:98:f3:f6:9c:26:95:88:3c:48:a0:49:
         be:d0:7f:07:54:65:f3:14:21:5d:ff:20:1d:59:62:bc:e0:59:
         9c:5f:c4:29:5c:90:77:9a:06:b2:4c:b8:a7:48:89:49:bc:e3:
         83:fb:87:bd:5a:82:ac:e8:3a:a9:32:e5:30:68:1e:bb:d9:4b:
         45:e0:1f:8f:97:06:dd:7c:33:a9:d5:1f:56:2d:a3:2f:1b:99:
         d0:d5:1d:24:24:e1:29:b4:83:28:e0:85:ce:9b:9c:d9:29:95:
         2f:46:8e:26:db:12:1b:68:42:70:e5:fb:b4:17:83:15:d7:7f:
         a0:5a:40:b0:9b:04:de:a7:2b:e3:d2:3d:70:58:6a:66:1f:36:
         22:4f:cb:29:c2:d0:a1:2b:ec:a1:a4:b6:a5:b0:c0:f1:39:14:
         0a:a0:b7:33:f3:3a:1f:d2:5e:08:34:d4:3a:70:3f:8c:ba:1b:
         24:bc:34:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84DBrfWU8sB/HpEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk
ZDQ0NDgwYTUtZTdjNi00YjA2LThiNDItNmQxMjU4OWQ3NmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSR4Dn5tUMeNErT9ZhuF4gBLMsN0AfNHezW4
5xOOvj4dnX3PpIAdmbcCDhZ09GU17CWOt6/ih4Wof/LsQrqiBixtZVePK5Qmqm9T
932yHr6t/LJxLQugHb7bm9mVajoAORhtUri61+uk2j3xe0yg5ZERbtK8nGwSrvTz
8p6h9sr3wRzQ6EqL0mlKQX+RpdS3a8kvaLHY/aMKVS4mZywBqtBhwwO/fbpdzKO2
3WFaSI5ThZYVtfs7nJ6VSPDcbDvr65G2YRIt+GifyHujaO5+ygl1XP93qtY/rsh0
INgCZKRQXSk2DgUcd4cZX7jzFEZvyiJvwgsmsyMIxbllIAspiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1gbThYdxLg4ZGdfTEEIoKfWNvCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODNlODg0YjQtYjM0Ny0z
MmI4LTlhNTEtMzdhY2U4MzE4MTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy6ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEQ7FS1bWokiFZPwsKCPDI8vmHJF5+7+Nzm0AlSAwkKy0msQOiRKwQb
zGwaoo5nuZwiehxUWLJ4cowWE8IU5nDgpAF2Z7k/JzktK5d16HqY8/acJpWIPEig
Sb7QfwdUZfMUIV3/IB1ZYrzgWZxfxClckHeaBrJMuKdIiUm844P7h71agqzoOqky
5TBoHrvZS0XgH4+XBt18M6nVH1Ytoy8bmdDVHSQk4Sm0gyjghc6bnNkplS9Gjibb
EhtoQnDl+7QXgxXXf6BaQLCbBN6nK+PSPXBYamYfNiJPyynC0KEr7KGktqWwwPE5
FAqgtzPzOh/SXgg01DpwP4y6GyS8NLI=
-----END CERTIFICATE-----
Generated at Sun Jun 29 21:10:54 2025 by rpki-client