Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/e459a39a-f325-36fa-8f3e-cbf76fed11aa.roa
File:                     e459a39a-f325-36fa-8f3e-cbf76fed11aa.roa (raw, json)
Hash identifier:          QZmYzrfshg9O4Nn3+r36V0x1mEL3e65wAp7N0MG0z9g=
Subject key identifier:   37:88:23:ED:F4:34:84:37:15:E8:FF:3C:A5:70:76:D8:33:EC:98:31
Certificate issuer:       /CN=8b56caea-2136-4342-baff-6f31268d4cc4
Certificate serial:       010D0C9F4328584A6825F9906603C83770F0B900
Authority key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/e459a39a-f325-36fa-8f3e-cbf76fed11aa.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     203125
IP address blocks:        23.146.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:f9:90:66:03:c8:37:70:f0:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b56caea-2136-4342-baff-6f31268d4cc4
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=f561e9a7-a711-49bc-84b4-492435e382b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:74:89:f0:e4:1b:b9:94:fc:b2:80:e6:e7:
                    b3:a3:2f:3d:48:17:19:69:66:64:e0:34:24:ca:ef:
                    45:c8:92:d9:63:29:74:91:d4:a3:e6:42:08:1b:3a:
                    4d:42:2e:e8:17:b5:78:7c:d2:77:73:b0:b6:4b:ea:
                    58:36:6c:81:1d:08:3f:cf:b0:ac:7c:6b:73:32:26:
                    ff:86:f0:d0:b4:36:a4:0b:e5:cd:0b:18:24:be:8e:
                    33:81:f9:64:8f:c6:5f:b0:2a:88:4f:b3:2e:03:55:
                    ec:a4:fa:e0:28:f7:21:01:a5:48:f1:20:f5:f7:61:
                    62:af:b1:01:ef:f1:df:75:d9:b6:66:26:9b:8b:c4:
                    3d:dc:ae:52:42:9a:f9:eb:d0:73:4d:38:20:52:9b:
                    46:0f:23:8a:9e:85:17:4f:57:f1:9d:dd:bf:64:c8:
                    4c:55:3a:e8:39:02:57:ce:a5:f8:8c:98:0f:d4:c3:
                    23:d8:c3:b3:02:a6:95:36:e8:67:c1:4c:1b:f4:ca:
                    d7:7e:a6:f6:93:96:75:52:8a:5a:b5:ca:e7:ed:50:
                    7a:12:f3:ed:52:01:7f:7f:fb:2d:b8:34:3b:36:bb:
                    cc:41:a6:7a:93:91:bf:df:e3:51:cc:5e:a3:dc:c4:
                    97:d1:0e:5d:d9:e2:6d:35:1b:5c:af:e0:03:2c:27:
                    37:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:88:23:ED:F4:34:84:37:15:E8:FF:3C:A5:70:76:D8:33:EC:98:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/e459a39a-f325-36fa-8f3e-cbf76fed11aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl

            X509v3 Authority Key Identifier:
                keyid:5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b1:8e:ad:09:c0:b8:25:5f:91:50:d3:45:7e:04:f2:72:b5:
         91:91:0e:6f:4f:8c:8a:a2:0b:d4:a9:7a:b2:21:dd:73:07:29:
         fd:4f:d4:84:25:ac:b1:92:7d:1a:fb:8a:9b:54:a2:1e:5e:ac:
         48:c7:0e:d2:ab:05:bb:64:9a:1e:7e:25:fa:8a:06:55:d0:e5:
         bf:87:28:0f:14:9e:7e:d7:b5:e1:21:39:54:10:40:60:10:76:
         c0:7c:b0:bd:34:54:81:c4:0d:64:2e:0a:62:58:ee:a9:96:11:
         57:80:4e:15:41:c2:20:e7:8d:1b:ae:f1:31:ea:6d:ed:e9:5a:
         90:f1:80:d5:3d:e6:c2:54:bf:c6:7e:95:21:5d:16:ff:c1:1b:
         b9:87:3e:96:e9:11:71:51:8b:6d:ed:92:a9:6c:47:6f:aa:23:
         db:15:7e:41:8c:d0:1c:bd:be:f4:c6:1e:83:88:49:5f:a7:4a:
         61:51:3a:63:b2:9b:95:36:46:82:43:02:39:27:63:7e:c9:64:
         12:14:2e:48:d2:69:5b:70:f0:f1:3a:32:6e:03:e8:6b:62:aa:
         2f:a9:c5:43:7c:8f:74:9a:26:1e:51:40:41:ef:e5:23:a0:6e:
         fd:3d:c3:38:9c:54:e4:06:3c:5b:73:49:d6:5a:03:b2:de:28:
         d1:45:ae:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJfmQZgPIN3DwuQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI1NmNhZWEtMjEzNi00MzQyLWJhZmYtNmYzMTI2OGQ0
Y2M0MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
ZjU2MWU5YTctYTcxMS00OWJjLTg0YjQtNDkyNDM1ZTM4MmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF90ifDkG7mU/LKA5uezoy89SBcZaWZk4DQk
yu9FyJLZYyl0kdSj5kIIGzpNQi7oF7V4fNJ3c7C2S+pYNmyBHQg/z7CsfGtzMib/
hvDQtDakC+XNCxgkvo4zgflkj8ZfsCqIT7MuA1XspPrgKPchAaVI8SD192Fir7EB
7/Hfddm2Ziabi8Q93K5SQpr569BzTTggUptGDyOKnoUXT1fxnd2/ZMhMVTroOQJX
zqX4jJgP1MMj2MOzAqaVNuhnwUwb9MrXfqb2k5Z1Uopatcrn7VB6EvPtUgF/f/st
uDQ7NrvMQaZ6k5G/3+NRzF6j3MSX0Q5d2eJtNRtcr+ADLCc3UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDeII+30NIQ3Fej/PKVwdtgz7JgxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YjU2
Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMxMjY4ZDRjYzQvZTQ1OWEzOWEtZjMyNS0z
NmZhLThmM2UtY2JmNzZmZWQxMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGI1NmNhZWEtMjEzNi00MzQyLWJh
ZmYtNmYzMTI2OGQ0Y2M0LzhiNTZjYWVhLTIxMzYtNDM0Mi1iYWZmLTZmMzEyNjhk
NGNjNC5jcmwwHwYDVR0jBBgwFoAUW5RpPQjOSIIV5jmWcSEjDZCow90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YjU2Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMx
MjY4ZDRjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5IYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2xjq0JwLglX5FQ00V+BPJytZGRDm9PjIqiC9SperIh3XMHKf1P1IQl
rLGSfRr7iptUoh5erEjHDtKrBbtkmh5+JfqKBlXQ5b+HKA8Unn7XteEhOVQQQGAQ
dsB8sL00VIHEDWQuCmJY7qmWEVeAThVBwiDnjRuu8THqbe3pWpDxgNU95sJUv8Z+
lSFdFv/BG7mHPpbpEXFRi23tkqlsR2+qI9sVfkGM0By9vvTGHoOISV+nSmFROmOy
m5U2RoJDAjknY37JZBIULkjSaVtw8PE6Mm4D6Gtiqi+pxUN8j3SaJh5RQEHv5SOg
bv09wzicVOQGPFtzSdZaA7LeKNFFru4=
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:15:58 2025 by rpki-client