Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/930022df-4888-35d9-a721-aaffe888b06a.roa
File:                     930022df-4888-35d9-a721-aaffe888b06a.roa (raw, json)
Hash identifier:          Vh3hLllb9ByoOQlC3WWgT2u4qhy58a0H/6UeWfUq7jY=
Subject key identifier:   48:A6:BC:99:D0:67:6D:FB:E6:FB:78:EF:B8:92:17:DF:D8:59:87:3B
Certificate issuer:       /CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
Certificate serial:       010D0C9F43285848FD56D07BA68A33355DE77B00
Authority key identifier: 0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/930022df-4888-35d9-a721-aaffe888b06a.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     54681
IP address blocks:        23.133.248.0/24 maxlen: 26
                          23.133.249.0/24 maxlen: 26
                          23.133.250.0/24 maxlen: 26
                          23.133.251.0/24 maxlen: 26
                          23.133.252.0/24 maxlen: 26
                          23.133.253.0/24 maxlen: 26
                          23.133.254.0/24 maxlen: 26
                          23.133.255.0/24 maxlen: 26
                          170.205.56.0/22 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:d0:7b:a6:8a:33:35:5d:e7:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=3420600a-3a7a-493d-8a09-b634fa65da2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:b5:8f:ad:cc:33:e5:99:56:aa:5d:e9:d7:
                    ed:3c:c1:d4:88:e9:0d:5f:d4:92:11:80:2a:a0:97:
                    53:df:e7:a2:05:db:aa:42:22:38:dd:a5:82:9f:64:
                    6b:54:ce:ac:b3:57:22:6e:e3:35:1c:46:cc:b3:d7:
                    e2:76:2a:47:e8:35:5a:e4:e8:04:9d:80:f9:0d:0a:
                    af:b6:34:a3:04:0c:4b:30:6e:65:a5:1c:c5:c4:b3:
                    92:d0:f6:2c:52:22:08:0e:67:ee:86:47:ca:05:bd:
                    99:a1:67:dd:46:96:39:49:2b:86:cc:fb:f9:2e:57:
                    07:44:8a:37:e6:8a:be:05:f7:0d:11:ff:76:f6:d4:
                    5b:c4:d8:79:73:46:1b:74:a0:e0:14:2b:3c:ca:b9:
                    31:cb:ba:49:4a:98:0a:52:49:ef:62:d1:4b:87:37:
                    3c:8e:ef:53:6d:61:12:e0:8c:15:04:25:51:55:b3:
                    87:2c:b9:5d:dd:79:67:8f:eb:8b:16:6d:06:bc:81:
                    6c:41:ab:e4:55:28:d1:47:aa:a5:78:3c:1c:84:92:
                    ab:5e:c1:60:c5:2e:32:c4:3f:02:ac:9e:08:ad:75:
                    a5:0d:f1:6b:25:25:52:c7:65:d7:2e:4f:d3:9f:b5:
                    f5:8f:57:f9:e1:46:5b:de:e7:00:e2:c5:9c:3e:de:
                    56:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A6:BC:99:D0:67:6D:FB:E6:FB:78:EF:B8:92:17:DF:D8:59:87:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/930022df-4888-35d9-a721-aaffe888b06a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl

            X509v3 Authority Key Identifier:
                keyid:0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.248.0/21
                  170.205.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:66:55:bd:a5:11:74:0d:9f:2f:7d:0c:3e:b1:09:9d:ee:a3:
         b9:e6:48:79:0c:94:bf:1a:4e:4b:9d:38:0d:88:c9:96:02:f2:
         79:10:38:7b:b3:30:69:be:5f:23:d4:a3:e9:63:c3:99:4a:38:
         82:1c:94:19:ed:91:2c:19:5d:4d:01:0c:b4:fb:60:53:60:44:
         3d:f3:da:54:dc:94:14:1d:b8:5d:98:c8:e3:83:e2:f3:a2:4e:
         6c:65:2e:dd:0e:1b:b4:be:dc:2b:fc:9b:92:a2:f0:f3:1c:c8:
         11:0a:3f:e4:9e:19:ee:f9:a1:df:ec:e3:be:57:74:75:6f:7b:
         2c:75:44:e8:a4:b6:48:ba:e8:cb:35:2f:db:63:97:c7:37:e8:
         c4:a2:e3:3d:e8:9d:d5:51:e5:67:9e:42:60:2e:ae:83:9e:d7:
         72:23:93:49:fd:f5:15:10:b9:ee:bc:2e:57:7e:d5:be:31:17:
         90:ee:a7:06:1a:5f:7b:4a:c3:98:31:8f:5d:64:00:be:3b:1a:
         c8:95:a8:12:f0:a7:77:a3:5c:1e:12:c0:96:c6:e9:d9:57:7d:
         a1:43:7d:95:a2:fb:43:ed:eb:e1:65:8d:3c:e9:12:05:0c:0d:
         83:9e:44:52:bd:38:2b:be:0a:4f:dd:d1:d9:9a:39:f3:d1:e2:
         99:df:a4:b3
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj9VtB7poozNV3newAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjdjMmM5YTYtODk4NC00YzI1LTkxMzYtNmE4Y2E3ZDNm
NzUwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MzQyMDYwMGEtM2E3YS00OTNkLThhMDktYjYzNGZhNjVkYTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJK1j63MM+WZVqpd6dftPMHUiOkNX9SSEYAq
oJdT3+eiBduqQiI43aWCn2RrVM6ss1cibuM1HEbMs9fidipH6DVa5OgEnYD5DQqv
tjSjBAxLMG5lpRzFxLOS0PYsUiIIDmfuhkfKBb2ZoWfdRpY5SSuGzPv5LlcHRIo3
5oq+BfcNEf929tRbxNh5c0YbdKDgFCs8yrkxy7pJSpgKUknvYtFLhzc8ju9TbWES
4IwVBCVRVbOHLLld3Xlnj+uLFm0GvIFsQavkVSjRR6qleDwchJKrXsFgxS4yxD8C
rJ4IrXWlDfFrJSVSx2XXLk/Tn7X1j1f54UZb3ucA4sWcPt5WCwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEimvJnQZ2375vt477iSF9/YWYc7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mN2My
YzlhNi04OTg0LTRjMjUtOTEzNi02YThjYTdkM2Y3NTAvOTMwMDIyZGYtNDg4OC0z
NWQ5LWE3MjEtYWFmZmU4ODhiMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjdjMmM5YTYtODk4NC00YzI1LTkx
MzYtNmE4Y2E3ZDNmNzUwL2Y3YzJjOWE2LTg5ODQtNGMyNS05MTM2LTZhOGNhN2Qz
Zjc1MC5jcmwwHwYDVR0jBBgwFoAUC2u5YG7aKsiSDncnjFrS72hiJEcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mN2MyYzlhNi04OTg0LTRjMjUtOTEzNi02YThj
YTdkM2Y3NTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDF4X4AwQC
qs04MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFdmVb2lEXQNny99DD6xCZ3uo7nmSHkMlL8aTkudOA2IyZYC
8nkQOHuzMGm+XyPUo+ljw5lKOIIclBntkSwZXU0BDLT7YFNgRD3z2lTclBQduF2Y
yOOD4vOiTmxlLt0OG7S+3Cv8m5Ki8PMcyBEKP+SeGe75od/s475XdHVveyx1ROik
tki66Ms1L9tjl8c36MSi4z3ondVR5WeeQmAuroOe13Ijk0n99RUQue68Lld+1b4x
F5DupwYaX3tKw5gxj11kAL47GsiVqBLwp3ejXB4SwJbG6dlXfaFDfZWi+0Pt6+Fl
jTzpEgUMDYOeRFK9OCu+Ck/d0dmaOfPR4pnfpLM=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:25:09 2025 by rpki-client