Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ced4bca-1c9a-3e60-8f84-38ec2f3f0c3e.roa
File:                     8ced4bca-1c9a-3e60-8f84-38ec2f3f0c3e.roa (raw, json)
Hash identifier:          vla7Qi0luplneX+0aE7fxdGPwtNDZfB8Q5ZjSHmjL6A=
Subject key identifier:   81:34:F6:64:07:F2:E0:34:C7:F9:2B:62:A3:FA:9D:0F:16:D6:BF:A7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858499DBF41A38B1DA3D8B9FE9480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ced4bca-1c9a-3e60-8f84-38ec2f3f0c3e.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     16625
IP address blocks:        23.216.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:41:a3:8b:1d:a3:d8:b9:fe:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=0815da29-6bc8-44d5-a19d-17852d0601d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:94:1c:d3:55:de:fb:16:1c:f3:ab:55:be:32:
                    c3:45:ba:58:1d:d4:b2:06:8f:7c:8e:16:dc:e8:9e:
                    d5:72:1c:ce:0d:2d:a1:b8:76:21:4b:58:98:51:02:
                    9c:f0:05:30:8f:93:c0:53:7a:26:fb:0e:cc:02:39:
                    a8:86:a0:6e:be:16:b4:75:5e:fc:94:71:2b:fa:19:
                    f4:af:e0:06:6e:91:60:da:3c:71:d3:c3:fd:4e:e6:
                    73:78:01:d8:c4:4e:a1:a7:d7:e1:fd:a9:98:83:b4:
                    76:4e:c5:a2:c5:9c:e9:74:4a:fb:00:ab:89:7b:8c:
                    ee:da:cc:6f:5e:ae:f8:7a:7a:df:95:d6:49:96:f4:
                    2f:84:55:03:17:de:da:39:3f:d1:73:b3:ee:dd:38:
                    71:54:8c:a7:12:41:20:4f:8d:a8:1e:c2:8e:86:5d:
                    08:e4:2c:24:89:83:91:70:6b:f9:24:c1:c1:6b:21:
                    b8:ad:dc:48:ee:50:6c:a0:d0:e6:1a:0d:ac:3c:df:
                    05:64:53:1f:85:30:fe:db:c3:58:16:8d:e3:a9:d1:
                    74:1e:cc:50:9f:ad:be:22:1b:28:89:6d:9e:f9:5d:
                    b9:14:4a:40:3f:eb:57:c6:51:5a:64:43:05:2d:cf:
                    59:b5:8a:fc:eb:44:83:21:3e:e0:90:55:9d:60:fc:
                    bf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:34:F6:64:07:F2:E0:34:C7:F9:2B:62:A3:FA:9D:0F:16:D6:BF:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ced4bca-1c9a-3e60-8f84-38ec2f3f0c3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.216.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:8b:42:99:41:24:94:fa:7d:9e:1b:d0:0d:04:d6:eb:e0:1d:
         1a:af:13:ef:2c:6d:ab:59:8a:75:42:e9:6c:0b:c5:6b:97:1c:
         f3:81:59:c9:69:d1:01:0b:2b:5e:aa:ff:d2:32:a9:15:aa:af:
         4a:7a:c1:d8:11:38:67:63:0d:0f:8a:ba:8a:63:b4:a8:70:21:
         b9:b3:12:41:20:e9:0f:68:f0:02:1a:8e:66:19:16:53:3f:80:
         d0:d8:33:af:13:75:30:96:95:da:6b:d9:e9:df:f6:94:bf:03:
         bd:2f:b3:59:ff:40:9e:a3:ef:70:20:6f:60:ce:9f:cc:0b:ee:
         89:3a:a3:28:77:ea:1e:47:81:49:d1:70:fe:c0:80:c0:bb:85:
         fd:c5:79:ac:ed:48:9f:da:e8:57:6a:4a:50:d4:b3:db:b9:34:
         ca:9b:2d:13:ee:47:d4:52:74:e9:99:76:db:ff:05:21:3f:50:
         9a:c3:59:51:04:78:a0:68:e8:4f:39:d8:9c:fa:7d:99:66:db:
         e2:de:d5:c1:0b:17:39:24:3d:1f:57:66:52:39:89:f6:38:04:
         eb:af:73:d5:23:df:f9:51:e4:5d:a4:44:5e:7b:07:8e:5b:b2:
         fb:bd:f5:3e:e7:37:c5:9d:05:d1:ce:37:cc:ff:68:af:ca:42:
         f9:91:8d:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0Gjix2j2Ln+lIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk
MDgxNWRhMjktNmJjOC00NGQ1LWExOWQtMTc4NTJkMDYwMWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Qc01Xe+xYc86tVvjLDRbpYHdSyBo98jhbc
6J7VchzODS2huHYhS1iYUQKc8AUwj5PAU3om+w7MAjmohqBuvha0dV78lHEr+hn0
r+AGbpFg2jxx08P9TuZzeAHYxE6hp9fh/amYg7R2TsWixZzpdEr7AKuJe4zu2sxv
Xq74enrfldZJlvQvhFUDF97aOT/Rc7Pu3ThxVIynEkEgT42oHsKOhl0I5CwkiYOR
cGv5JMHBayG4rdxI7lBsoNDmGg2sPN8FZFMfhTD+28NYFo3jqdF0HsxQn62+Ihso
iW2e+V25FEpAP+tXxlFaZEMFLc9ZtYr860SDIT7gkFWdYPy/9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIE09mQH8uA0x/krYqP6nQ8W1r+nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGNlZDRiY2EtMWM5YS0z
ZTYwLThmODQtMzhlYzJmM2YwYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF9igMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6LQplBJJT6fZ4b0A0E1uvgHRqvE+8sbatZinVC6WwLxWuXHPOBWclp
0QELK16q/9IyqRWqr0p6wdgROGdjDQ+KuopjtKhwIbmzEkEg6Q9o8AIajmYZFlM/
gNDYM68TdTCWldpr2enf9pS/A70vs1n/QJ6j73Agb2DOn8wL7ok6oyh36h5HgUnR
cP7AgMC7hf3FeaztSJ/a6FdqSlDUs9u5NMqbLRPuR9RSdOmZdtv/BSE/UJrDWVEE
eKBo6E852Jz6fZlm2+Le1cELFzkkPR9XZlI5ifY4BOuvc9Uj3/lR5F2kRF57B45b
svu99T7nN8WdBdHON8z/aK/KQvmRjZQ=
-----END CERTIFICATE-----
Generated at Thu May 8 18:56:26 2025 by rpki-client