Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/696d539a-82f5-391f-ac16-9de334c939cd.roa
File:                     696d539a-82f5-391f-ac16-9de334c939cd.roa (raw, json)
Hash identifier:          1jX+pB3Tewr3fQ7VHvDHRsYEKJCGUZjGIEVbKHEnd6I=
Subject key identifier:   BE:7C:C8:8E:D3:42:81:19:D9:8C:B3:71:D5:13:A0:9A:CA:6D:5B:4A
Certificate issuer:       /CN=27f24f9e-ef46-4828-9575-be547ae0263d
Certificate serial:       010D0C9F43285849350E9AB6051AD0E082F65600
Authority key identifier: 5C:D9:FB:4D:9B:51:64:06:A6:D0:AB:BE:A0:03:92:1D:13:83:FD:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/696d539a-82f5-391f-ac16-9de334c939cd.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     46475
IP address blocks:        23.131.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:9a:b6:05:1a:d0:e0:82:f6:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f24f9e-ef46-4828-9575-be547ae0263d
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=db49ced2-bfc5-40e4-9949-be23cfde213c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3d:36:9b:48:90:9d:1f:c4:9e:16:59:5e:44:
                    c8:10:5e:7e:43:fb:67:92:0b:77:ec:e9:6e:cd:1a:
                    f7:4e:53:07:2e:b9:6e:26:e0:5e:ed:3c:14:a4:68:
                    d7:ab:69:2b:24:88:33:da:ea:55:4b:cb:bc:0c:ef:
                    32:e6:d8:7a:68:57:9c:5a:84:8a:06:0c:9f:aa:e6:
                    2c:c4:2e:33:94:ab:fd:04:a8:67:cc:e1:09:c2:bb:
                    a6:f3:c8:35:eb:25:a9:2c:28:90:8c:f3:c0:96:9e:
                    26:11:dc:9b:74:b8:47:c9:b9:c6:25:5d:fc:2b:0b:
                    34:df:73:47:a7:52:40:f5:c2:d9:da:dc:2f:0b:af:
                    d6:e6:f5:ec:4d:4a:55:66:9f:6e:9d:73:62:3c:7a:
                    fd:0e:0c:05:08:a7:7b:ef:4b:05:2b:f1:32:0b:f4:
                    53:ab:77:b8:31:48:39:98:6b:04:83:76:66:74:70:
                    ae:05:e4:37:64:1d:74:14:6f:7e:9d:6f:4b:4f:7b:
                    55:c9:b0:59:3e:95:cd:91:79:3f:92:d7:6e:e9:41:
                    16:7b:ee:44:d2:07:b2:24:be:48:ad:ad:76:65:c1:
                    cf:b4:26:55:68:42:a1:23:4f:1c:7a:f0:75:62:bc:
                    8a:0f:e4:04:3d:9e:56:3b:2e:a6:f2:4e:d6:8a:5e:
                    ca:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7C:C8:8E:D3:42:81:19:D9:8C:B3:71:D5:13:A0:9A:CA:6D:5B:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/696d539a-82f5-391f-ac16-9de334c939cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.crl

            X509v3 Authority Key Identifier:
                keyid:5C:D9:FB:4D:9B:51:64:06:A6:D0:AB:BE:A0:03:92:1D:13:83:FD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:7b:4c:1d:f9:32:06:6d:f1:e4:53:51:66:2d:19:d2:10:c9:
         42:87:87:e9:73:87:9b:ca:cc:57:32:80:f2:f3:35:9f:3a:8b:
         b2:15:ce:81:39:70:bf:fd:96:82:b9:ed:18:17:6d:e1:84:db:
         79:84:41:a7:84:4a:02:76:f8:b6:9b:52:aa:80:e5:60:a1:90:
         03:7b:d4:73:30:9b:85:22:69:24:4a:77:ba:0f:1a:4d:6e:a4:
         2e:04:8e:3f:c1:a2:aa:ac:4d:82:21:fe:72:0e:65:f9:4a:9a:
         a1:83:2b:47:e6:be:3b:a6:54:be:8b:86:6b:0c:75:41:42:46:
         c8:72:54:60:f7:4b:6c:30:bd:09:9b:70:79:2f:70:ba:26:ae:
         5b:9c:8c:2a:77:30:a3:1c:dc:a9:9e:21:67:52:c9:ab:16:35:
         70:09:06:03:68:dc:78:90:42:ed:26:06:c8:16:9f:c9:26:af:
         3c:1a:b2:ad:89:f1:02:c3:3e:0c:58:16:df:73:07:97:df:49:
         9e:9d:e7:e6:56:b2:0c:d9:08:e0:46:e4:6b:23:6b:c6:53:4c:
         52:51:89:6a:67:89:3c:a7:ca:7c:ca:3e:03:d7:2d:89:eb:8e:
         6d:23:16:99:38:b5:a3:8f:24:da:79:74:bd:77:fb:75:f3:6d:
         89:de:c0:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dpq2BRrQ4IL2VgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjdmMjRmOWUtZWY0Ni00ODI4LTk1NzUtYmU1NDdhZTAy
NjNkMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
ZGI0OWNlZDItYmZjNS00MGU0LTk5NDktYmUyM2NmZGUyMTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz02m0iQnR/EnhZZXkTIEF5+Q/tnkgt37Olu
zRr3TlMHLrluJuBe7TwUpGjXq2krJIgz2upVS8u8DO8y5th6aFecWoSKBgyfquYs
xC4zlKv9BKhnzOEJwrum88g16yWpLCiQjPPAlp4mEdybdLhHybnGJV38Kws033NH
p1JA9cLZ2twvC6/W5vXsTUpVZp9unXNiPHr9DgwFCKd770sFK/EyC/RTq3e4MUg5
mGsEg3ZmdHCuBeQ3ZB10FG9+nW9LT3tVybBZPpXNkXk/ktdu6UEWe+5E0geyJL5I
ra12ZcHPtCZVaEKhI08cevB1YryKD+QEPZ5WOy6m8k7Wil7KgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL58yI7TQoEZ2YyzcdUToJrKbVtKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yN2Yy
NGY5ZS1lZjQ2LTQ4MjgtOTU3NS1iZTU0N2FlMDI2M2QvNjk2ZDUzOWEtODJmNS0z
OTFmLWFjMTYtOWRlMzM0YzkzOWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjdmMjRmOWUtZWY0Ni00ODI4LTk1
NzUtYmU1NDdhZTAyNjNkLzI3ZjI0ZjllLWVmNDYtNDgyOC05NTc1LWJlNTQ3YWUw
MjYzZC5jcmwwHwYDVR0jBBgwFoAUXNn7TZtRZAam0Ku+oAOSHROD/YgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yN2YyNGY5ZS1lZjQ2LTQ4MjgtOTU3NS1iZTU0
N2FlMDI2M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4PYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAt7TB35MgZt8eRTUWYtGdIQyUKHh+lzh5vKzFcygPLzNZ86i7IVzoE5
cL/9loK57RgXbeGE23mEQaeESgJ2+LabUqqA5WChkAN71HMwm4UiaSRKd7oPGk1u
pC4Ejj/BoqqsTYIh/nIOZflKmqGDK0fmvjumVL6LhmsMdUFCRshyVGD3S2wwvQmb
cHkvcLomrlucjCp3MKMc3KmeIWdSyasWNXAJBgNo3HiQQu0mBsgWn8kmrzwasq2J
8QLDPgxYFt9zB5ffSZ6d5+ZWsgzZCOBG5Gsja8ZTTFJRiWpniTynynzKPgPXLYnr
jm0jFpk4taOPJNp5dL13+3XzbYnewFw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:25 2025 by rpki-client