Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/1a137484-e5cb-3ba8-a659-719b35ba6f47.roa
File:                     1a137484-e5cb-3ba8-a659-719b35ba6f47.roa (raw, json)
Hash identifier:          8MM59N2wOPGhLsMQb+uWbPsdtiMWV0B8rKz8D5LR2fg=
Subject key identifier:   24:B4:95:F9:F9:8D:D2:02:D6:F3:B9:FF:01:86:5A:78:6D:3A:3B:86
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F432858493C0927880EA9F17D3EF0CB40
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/1a137484-e5cb-3ba8-a659-719b35ba6f47.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     36103
IP address blocks:        23.88.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:27:88:0e:a9:f1:7d:3e:f0:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=f99f6263-6d40-4a7e-8ee5-d4fb58f849df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3c:e7:53:51:ab:11:cc:81:b2:51:5b:ae:b1:
                    66:af:fa:bd:93:65:7e:b0:50:c0:55:f9:bb:e8:3d:
                    26:04:9b:a2:2c:0d:1f:48:6d:4b:8b:5f:16:38:e1:
                    7c:37:3f:d4:11:4d:22:ee:b5:cc:6a:56:29:10:0a:
                    80:92:49:9e:c2:68:8e:85:4e:be:8d:d5:18:49:f9:
                    42:da:99:a9:34:d0:ef:06:cb:68:f8:26:8f:9b:f9:
                    b7:2c:f1:f5:07:59:3b:eb:37:34:ac:77:b1:ed:a6:
                    95:79:d0:b1:e2:2f:04:13:73:1b:dd:d9:c8:69:a2:
                    33:a9:2a:fa:38:1d:0e:a4:64:de:ad:76:20:ee:6e:
                    b4:74:9f:46:a7:71:2d:1b:53:32:55:f9:0a:93:78:
                    a6:4b:cb:93:f6:ca:b0:42:6a:0b:30:39:96:28:19:
                    73:6f:83:de:73:fc:ae:03:e2:77:4a:98:96:1e:cb:
                    38:fc:bd:ff:94:24:52:5a:8a:26:0c:5e:48:3b:57:
                    92:80:28:a3:59:75:db:bb:23:6e:76:0c:7e:13:8d:
                    2e:14:cc:86:c0:a1:7c:e5:b6:c0:32:8d:10:d4:80:
                    d2:2e:87:ff:63:6b:a0:d6:4c:40:dd:3a:3e:ff:e4:
                    8c:00:ce:08:15:9b:c5:1c:50:25:5c:cc:b5:73:ed:
                    a6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B4:95:F9:F9:8D:D2:02:D6:F3:B9:FF:01:86:5A:78:6D:3A:3B:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/1a137484-e5cb-3ba8-a659-719b35ba6f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:40:c5:44:ac:e8:cd:33:6a:a9:56:0a:b2:ce:f5:1e:c7:0f:
         2f:d7:cb:1b:a4:0b:b7:96:26:2c:61:13:92:04:0b:bb:43:da:
         0e:c0:a9:d3:0d:89:c4:fc:8e:9d:7b:bf:47:65:14:6d:52:3a:
         0d:b6:07:07:5c:d9:1c:90:22:00:d0:15:cf:82:83:9d:24:85:
         cb:f2:84:a0:29:d0:3d:e2:12:e0:87:45:63:b1:52:9b:8b:eb:
         72:5b:56:cc:ba:45:2b:a1:f0:97:66:9e:91:51:0d:0f:29:15:
         8f:12:e7:86:5b:b1:c4:ed:14:24:d2:40:38:ea:f8:d2:89:6d:
         3d:8a:57:72:72:a4:ff:0f:96:0f:61:75:30:bd:90:e7:0a:a2:
         5a:38:2b:8e:94:54:96:fb:7e:15:af:7e:45:53:57:fe:37:f1:
         ca:4a:2c:58:09:09:84:24:e0:45:01:fb:7a:f2:24:65:c8:64:
         3a:08:c0:66:81:26:e1:0b:21:99:0e:35:1f:36:73:8b:5c:95:
         9b:67:23:7b:d0:71:06:96:17:f8:fe:5f:25:51:73:42:97:fd:
         f1:09:c8:1e:6e:9c:2e:79:2a:36:58:9c:10:13:87:3f:37:fd:
         78:79:0b:85:22:7b:d6:e0:a8:ec:3c:0e:2f:da:f7:f2:35:47:
         a4:29:74:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSeIDqnxfT7wy0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl
ZDI1MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
Zjk5ZjYyNjMtNmQ0MC00YTdlLThlZTUtZDRmYjU4Zjg0OWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzznU1GrEcyBslFbrrFmr/q9k2V+sFDAVfm7
6D0mBJuiLA0fSG1Li18WOOF8Nz/UEU0i7rXMalYpEAqAkkmewmiOhU6+jdUYSflC
2pmpNNDvBsto+CaPm/m3LPH1B1k76zc0rHex7aaVedCx4i8EE3Mb3dnIaaIzqSr6
OB0OpGTerXYg7m60dJ9Gp3EtG1MyVfkKk3imS8uT9sqwQmoLMDmWKBlzb4Pec/yu
A+J3SpiWHss4/L3/lCRSWoomDF5IO1eSgCijWXXbuyNudgx+E40uFMyGwKF85bbA
Mo0Q1IDSLof/Y2ug1kxA3To+/+SMAM4IFZvFHFAlXMy1c+2mNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCS0lfn5jdIC1vO5/wGGWnhtOjuGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh
NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvMWExMzc0ODQtZTVjYi0z
YmE4LWE2NTktNzE5YjM1YmE2ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm
M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0
ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0
MmE4NGVkMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF1igMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGdAxUSs6M0zaqlWCrLO9R7HDy/XyxukC7eWJixhE5IEC7tD2g7AqdMN
icT8jp17v0dlFG1SOg22Bwdc2RyQIgDQFc+Cg50khcvyhKAp0D3iEuCHRWOxUpuL
63JbVsy6RSuh8JdmnpFRDQ8pFY8S54ZbscTtFCTSQDjq+NKJbT2KV3JypP8Plg9h
dTC9kOcKolo4K46UVJb7fhWvfkVTV/438cpKLFgJCYQk4EUB+3ryJGXIZDoIwGaB
JuELIZkONR82c4tclZtnI3vQcQaWF/j+XyVRc0KX/fEJyB5unC55KjZYnBAThz83
/Xh5C4Uie9bgqOw8Di/a9/I1R6QpdNQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:27 2025 by rpki-client