Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/be9c32db-39be-3235-b317-3fdc628d6b08.roa
File:                     be9c32db-39be-3235-b317-3fdc628d6b08.roa (raw, json)
Hash identifier:          muza0pm1YIxrdvXULCCjOHeDtvd9E7BIwrrhGJ4Kke4=
Subject key identifier:   E3:80:BB:BF:26:BA:ED:C8:4A:81:BC:86:1D:90:AA:43:50:9D:29:2F
Certificate issuer:       /CN=17624d03-2126-49cd-8e8c-c3d5089ac686
Certificate serial:       010D0C9F4328584986046B83417736097B1D5140
Authority key identifier: 32:7C:86:31:15:EB:0A:82:29:D2:0E:0B:64:46:E7:84:0F:73:57:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/be9c32db-39be-3235-b317-3fdc628d6b08.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     14923
IP address blocks:        23.178.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:04:6b:83:41:77:36:09:7b:1d:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17624d03-2126-49cd-8e8c-c3d5089ac686
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=a1b12977-a524-40c3-b899-52c19fccb5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5e:97:6a:e4:69:14:2d:a8:c2:ad:ec:31:8d:
                    fc:50:0f:a4:d7:40:6b:1a:55:48:4d:8a:e7:fc:5e:
                    6c:37:9e:34:35:36:9a:6c:81:02:20:47:a8:f5:aa:
                    44:d8:72:42:34:20:cc:60:26:c2:c6:c6:e7:cc:67:
                    b6:cf:fb:52:4a:9d:a0:88:9f:1b:35:17:66:23:02:
                    51:47:9b:2d:62:54:3c:50:ab:e9:36:bd:ab:a2:0d:
                    81:d5:0b:f8:19:ff:d1:59:b5:74:73:10:b5:99:d2:
                    05:a9:f7:a3:b7:2d:5a:93:f6:86:0f:2d:d2:68:35:
                    fc:ad:85:56:72:0a:08:98:f7:11:d7:8f:62:8d:b3:
                    f3:05:72:9a:29:d7:c9:6b:4c:b6:ba:99:e4:2d:b2:
                    0e:f4:72:34:3a:43:99:93:83:25:2d:63:9b:51:89:
                    27:44:1c:9f:f0:fe:e5:7d:8e:06:a3:8a:2e:8f:b8:
                    59:e5:c3:0c:6d:2e:58:78:37:2b:88:3b:9c:f8:36:
                    22:a6:ec:61:0b:fc:67:c5:4d:4f:c6:96:25:fb:d5:
                    e4:96:3e:ef:f7:b1:19:ff:74:d0:7d:b7:e8:41:44:
                    59:be:fb:9b:ec:05:0d:b5:73:2b:30:fa:f6:d9:e4:
                    34:93:e1:a8:cd:a4:fa:4a:df:2f:a3:94:bf:65:21:
                    dd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:80:BB:BF:26:BA:ED:C8:4A:81:BC:86:1D:90:AA:43:50:9D:29:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/be9c32db-39be-3235-b317-3fdc628d6b08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.crl

            X509v3 Authority Key Identifier:
                keyid:32:7C:86:31:15:EB:0A:82:29:D2:0E:0B:64:46:E7:84:0F:73:57:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:da:f9:4c:05:7e:b5:01:40:b2:a0:0e:1d:aa:e6:d7:16:d5:
         e4:dd:3f:fd:9d:c6:a3:b9:ac:e8:dc:95:7b:30:c0:f9:e6:11:
         f2:37:2a:68:09:74:b8:ba:71:c8:85:23:9b:0f:e4:93:67:77:
         bc:9e:fd:6c:f4:cb:10:9d:fd:8c:ec:86:b0:c6:11:71:cd:29:
         d6:04:43:cd:5e:97:e9:bc:04:e7:7b:45:0a:b9:e6:49:2f:da:
         1e:d6:3a:ab:55:17:70:fa:fe:c8:36:80:3b:16:a5:4f:13:c1:
         8b:12:0a:4c:66:91:37:2c:00:d2:f8:ca:f8:de:9d:5e:91:15:
         4b:d5:9c:45:05:e3:0e:8a:79:73:63:75:72:55:ff:0a:9d:af:
         8b:8d:ba:b3:50:09:09:43:c0:18:9f:98:6d:16:e6:d1:b7:ca:
         ad:63:4f:9b:cd:17:39:5a:08:fa:22:dd:e3:bc:c9:e7:4e:cc:
         fb:da:a0:7d:c6:8a:05:67:f6:30:d9:0d:f7:39:3b:8c:df:ae:
         28:cd:05:53:0d:d9:5d:4a:17:b8:f0:94:6b:f1:ba:f0:b4:26:
         ef:73:4a:43:e5:ce:67:f2:15:f4:12:49:b9:1e:26:78:ea:8a:
         84:fa:48:f6:07:2a:d1:df:c6:a7:23:87:3b:99:04:f1:be:0a:
         f8:c4:bb:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGBGuDQXc2CXsdUUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc2MjRkMDMtMjEyNi00OWNkLThlOGMtYzNkNTA4OWFj
Njg2MB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk
YTFiMTI5NzctYTUyNC00MGMzLWI4OTktNTJjMTlmY2NiNWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F6XauRpFC2owq3sMY38UA+k10BrGlVITYrn
/F5sN540NTaabIECIEeo9apE2HJCNCDMYCbCxsbnzGe2z/tSSp2giJ8bNRdmIwJR
R5stYlQ8UKvpNr2rog2B1Qv4Gf/RWbV0cxC1mdIFqfejty1ak/aGDy3SaDX8rYVW
cgoImPcR149ijbPzBXKaKdfJa0y2upnkLbIO9HI0OkOZk4MlLWObUYknRByf8P7l
fY4Go4ouj7hZ5cMMbS5YeDcriDuc+DYipuxhC/xnxU1PxpYl+9Xklj7v97EZ/3TQ
fbfoQURZvvub7AUNtXMrMPr22eQ0k+GozaT6St8vo5S/ZSHdZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOOAu78muu3ISoG8hh2QqkNQnSkvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xNzYy
NGQwMy0yMTI2LTQ5Y2QtOGU4Yy1jM2Q1MDg5YWM2ODYvYmU5YzMyZGItMzliZS0z
MjM1LWIzMTctM2ZkYzYyOGQ2YjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTc2MjRkMDMtMjEyNi00OWNkLThl
OGMtYzNkNTA4OWFjNjg2LzE3NjI0ZDAzLTIxMjYtNDljZC04ZThjLWMzZDUwODlh
YzY4Ni5jcmwwHwYDVR0jBBgwFoAUMnyGMRXrCoIp0g4LZEbnhA9zV6cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xNzYyNGQwMy0yMTI2LTQ5Y2QtOGU4Yy1jM2Q1
MDg5YWM2ODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7L4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKPa+UwFfrUBQLKgDh2q5tcW1eTdP/2dxqO5rOjclXswwPnmEfI3KmgJ
dLi6cciFI5sP5JNnd7ye/Wz0yxCd/YzshrDGEXHNKdYEQ81el+m8BOd7RQq55kkv
2h7WOqtVF3D6/sg2gDsWpU8TwYsSCkxmkTcsANL4yvjenV6RFUvVnEUF4w6KeXNj
dXJV/wqdr4uNurNQCQlDwBifmG0W5tG3yq1jT5vNFzlaCPoi3eO8yedOzPvaoH3G
igVn9jDZDfc5O4zfrijNBVMN2V1KF7jwlGvxuvC0Ju9zSkPlzmfyFfQSSbkeJnjq
ioT6SPYHKtHfxqcjhzuZBPG+CvjEu24=
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:02:03 2025 by rpki-client