Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1e4a25d-e72c-3c81-b8db-725e25b64588.roa
File:                     a1e4a25d-e72c-3c81-b8db-725e25b64588.roa (raw, json)
Hash identifier:          kIsgLfz8LmFxAS3aE9zqXPo8dN1K+M2ZYh/JvjjDYt0=
Subject key identifier:   0F:AE:9C:3A:97:81:DB:33:FE:71:0A:B5:54:2F:F6:BD:1C:5D:44:C0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A3A159C1A7A9CB9959AB5FAC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1e4a25d-e72c-3c81-b8db-725e25b64588.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     20940
IP address blocks:        23.42.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:9c:1a:7a:9c:b9:95:9a:b5:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=c6e44bec-40f1-4197-acfe-288d8fcde5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0a:e1:b8:e3:c3:d9:e5:7e:7c:6e:03:f3:90:
                    2c:5d:a2:ab:80:d0:cf:48:7b:d3:2a:2b:fd:72:35:
                    c2:d4:78:d5:2c:a7:a1:1f:e9:53:06:a0:56:ca:74:
                    2b:8e:8b:83:a9:87:87:e7:2d:04:e7:59:8b:c2:01:
                    27:54:10:b5:fa:b8:81:b3:fa:92:91:bf:d5:2c:49:
                    f1:75:60:68:73:e8:0a:ff:7f:89:2b:c1:a7:3d:a8:
                    b6:08:cd:3a:19:ae:d6:46:ef:76:b5:00:2f:f5:dd:
                    a8:71:e3:90:fa:65:56:f2:0b:73:5c:64:40:5d:1b:
                    61:cc:15:bb:5c:eb:9b:6b:3f:5a:fc:9b:02:10:54:
                    af:1b:69:18:8b:77:9e:17:19:2a:14:e4:eb:c3:c5:
                    36:80:89:cb:d7:ba:0b:9d:eb:c7:a1:04:33:b8:4c:
                    61:d4:a9:15:9b:d6:cf:4e:c4:6d:2e:67:50:c7:fe:
                    af:1f:ed:77:f7:b9:09:bd:93:c4:b4:da:19:f4:35:
                    7f:8a:3d:87:b1:e8:d3:7e:db:a5:d3:c6:9f:a5:a0:
                    10:14:d5:6a:64:3a:0e:9f:31:b1:82:37:2a:55:b3:
                    5e:ac:91:15:79:3d:c0:68:a1:2d:82:08:71:e9:3b:
                    af:2a:d3:e4:1a:f5:d4:84:fa:da:32:9d:06:76:32:
                    c4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AE:9C:3A:97:81:DB:33:FE:71:0A:B5:54:2F:F6:BD:1C:5D:44:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1e4a25d-e72c-3c81-b8db-725e25b64588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.42.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:18:3c:e2:07:01:f9:9c:6b:24:86:a0:2e:66:c3:53:12:cb:
         e6:6a:0a:3a:e3:e8:df:67:c8:45:ac:56:db:ef:25:31:a5:83:
         cd:a1:8b:16:e2:5c:2b:e4:c3:70:b9:ef:f6:4b:15:b6:48:d2:
         e6:ea:60:25:a9:7d:63:ee:81:01:92:50:83:dc:dc:61:b6:96:
         f7:c2:71:0f:a3:c6:f7:5f:0f:cb:30:bc:cd:b8:3a:e3:df:9a:
         e2:6b:64:d1:e3:53:95:fc:76:4d:3a:c7:3f:c0:58:95:60:fc:
         71:d1:23:c7:a8:8a:b7:9e:67:6e:ee:6b:1e:6e:20:eb:99:6b:
         21:c1:89:0d:81:f8:8c:dd:6d:61:b7:0c:62:de:ca:d3:36:91:
         82:e1:65:4a:ee:91:30:05:57:4b:98:2f:e3:ab:0e:5b:77:1d:
         4f:ba:e1:22:81:ec:a8:25:dc:14:24:0c:5a:fa:63:4a:f4:b5:
         83:de:ea:06:9e:55:77:3f:8c:fe:23:7b:1f:3a:7c:90:c7:fa:
         f6:0f:a0:b8:51:4b:c4:ce:a5:32:fd:9b:90:57:4d:78:df:74:
         d0:11:58:1c:25:18:63:a4:fc:ab:89:32:ea:d1:f1:31:16:35:
         33:8b:ca:71:26:3f:72:e1:84:b1:bb:20:1c:e6:bb:ac:d6:0f:
         b8:34:6b:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZwaepy5lZq1+sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk
YzZlNDRiZWMtNDBmMS00MTk3LWFjZmUtMjg4ZDhmY2RlNWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wrhuOPD2eV+fG4D85AsXaKrgNDPSHvTKiv9
cjXC1HjVLKehH+lTBqBWynQrjouDqYeH5y0E51mLwgEnVBC1+riBs/qSkb/VLEnx
dWBoc+gK/3+JK8GnPai2CM06Ga7WRu92tQAv9d2oceOQ+mVW8gtzXGRAXRthzBW7
XOubaz9a/JsCEFSvG2kYi3eeFxkqFOTrw8U2gInL17oLnevHoQQzuExh1KkVm9bP
TsRtLmdQx/6vH+1397kJvZPEtNoZ9DV/ij2HsejTftul08afpaAQFNVqZDoOnzGx
gjcqVbNerJEVeT3AaKEtgghx6TuvKtPkGvXUhPraMp0GdjLELQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA+unDqXgdsz/nEKtVQv9r0cXUTAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTFlNGEyNWQtZTcyYy0z
YzgxLWI4ZGItNzI1ZTI1YjY0NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyqXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkYPOIHAfmcaySGoC5mw1MSy+ZqCjrj6N9nyEWsVtvvJTGlg82hixbi
XCvkw3C57/ZLFbZI0ubqYCWpfWPugQGSUIPc3GG2lvfCcQ+jxvdfD8swvM24OuPf
muJrZNHjU5X8dk06xz/AWJVg/HHRI8eoireeZ27uax5uIOuZayHBiQ2B+IzdbWG3
DGLeytM2kYLhZUrukTAFV0uYL+OrDlt3HU+64SKB7Kgl3BQkDFr6Y0r0tYPe6gae
VXc/jP4jex86fJDH+vYPoLhRS8TOpTL9m5BXTXjfdNARWBwlGGOk/KuJMurR8TEW
NTOLynEmP3LhhLG7IBzmu6zWD7g0a3c=
-----END CERTIFICATE-----
Generated at Sun Jun 29 12:39:05 2025 by rpki-client