Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53/73db188a-ac32-37e4-a6de-5bcfa6b5954f.roa
File:                     73db188a-ac32-37e4-a6de-5bcfa6b5954f.roa (raw, json)
Hash identifier:          4Emhel+gsBp+jFY9woWzbwBar2/dzVsyroA6+hCYguU=
Subject key identifier:   38:A7:BC:56:92:5E:6E:0F:86:D9:AA:26:30:96:15:B1:A6:02:9D:7E
Certificate issuer:       /CN=2dbba49e-9fe2-42a4-a957-87e73ca24f53
Certificate serial:       010D0C9F43285848B78B813F3C3EA0D4841E1100
Authority key identifier: CE:42:FE:C2:44:2C:34:2A:F6:45:BA:0F:61:69:E1:2A:4E:E6:8D:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53/73db188a-ac32-37e4-a6de-5bcfa6b5954f.roa
Signing time:             Thu 30 Jan 2025 14:00:51 +0000
ROA not before:           Thu 30 Jan 2025 14:00:51 +0000
ROA not after:            Wed 30 Apr 2025 13:00:51 +0000
asID:                     398099
IP address blocks:        23.140.24.0/24 maxlen: 24
                          2602:810:9000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53/2dbba49e-9fe2-42a4-a957-87e73ca24f53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53/2dbba49e-9fe2-42a4-a957-87e73ca24f53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:8b:81:3f:3c:3e:a0:d4:84:1e:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbba49e-9fe2-42a4-a957-87e73ca24f53
        Validity
            Not Before: Jan 30 14:00:51 2025 GMT
            Not After : Apr 30 13:00:51 2025 GMT
        Subject: CN=fec5c7b0-bea5-4d06-a0aa-9aa67ba6a5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:52:43:32:c6:ac:52:cd:82:f7:fe:a2:06:
                    4d:49:24:33:89:51:d6:f8:8e:51:97:b2:1a:b4:28:
                    03:3b:89:ce:63:99:68:77:c4:1b:52:d8:9e:30:21:
                    2e:1d:04:bf:e4:09:7b:4a:0f:bd:47:17:2d:e5:98:
                    19:73:6e:fe:ed:38:b8:74:d4:cc:e5:dd:70:78:dd:
                    34:7e:6a:aa:b9:e6:db:44:da:da:ff:6c:dc:04:b1:
                    fd:42:8e:30:2d:a6:cd:9c:c7:45:06:d6:c9:9b:51:
                    f7:d0:dd:87:75:38:3f:67:14:60:5c:7f:13:0e:ad:
                    2c:55:12:f8:fa:77:90:42:0c:f6:a5:30:c2:1a:e0:
                    70:d3:a4:d1:fe:77:20:b7:71:63:71:c1:79:e4:e7:
                    d1:23:6c:df:52:a5:34:10:02:57:20:7f:99:9d:c2:
                    5a:a2:c4:e7:8f:f6:df:0b:24:02:7a:61:2d:7d:91:
                    bd:43:e5:9e:2a:66:97:58:42:06:3e:f6:a8:c9:c4:
                    8a:8b:8e:63:6c:66:af:f9:21:dd:3e:98:a1:a6:d9:
                    1f:92:03:a0:d2:56:34:43:2f:76:e3:72:b9:d7:0d:
                    09:db:55:0b:0b:92:cc:19:2f:db:0c:8d:88:61:ad:
                    30:f4:f8:31:a0:70:c4:09:bb:17:18:bb:6d:d1:5b:
                    28:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A7:BC:56:92:5E:6E:0F:86:D9:AA:26:30:96:15:B1:A6:02:9D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53/73db188a-ac32-37e4-a6de-5bcfa6b5954f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53/2dbba49e-9fe2-42a4-a957-87e73ca24f53.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:C2:44:2C:34:2A:F6:45:BA:0F:61:69:E1:2A:4E:E6:8D:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.24.0/24
                IPv6:
                  2602:810:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:2f:c3:7b:60:17:14:c8:aa:f3:f8:4a:a7:74:be:2f:6c:43:
         9a:61:2b:5f:bb:e8:0d:01:0f:86:d7:4e:d9:db:5e:e4:5c:61:
         8b:ba:f2:2c:30:b1:5d:ab:43:ca:ce:4f:85:5b:45:a7:14:db:
         55:0f:bb:44:d6:22:fa:63:97:34:06:78:1b:e3:2d:55:e5:f6:
         c7:3d:79:f9:3a:af:c5:11:ab:d6:cb:1b:84:1b:83:29:04:3d:
         68:2d:87:fa:a8:f9:26:96:16:9d:0d:70:42:29:30:57:a2:31:
         81:e9:89:83:40:dd:fc:44:c7:06:58:ba:48:3d:86:72:d5:e1:
         33:d3:89:79:69:f8:35:93:ee:00:a0:8a:c8:72:5a:3f:4f:93:
         84:6d:2f:3c:4a:8f:33:43:6c:dc:93:91:85:b2:74:bc:67:af:
         6c:8a:94:63:9a:1d:67:6b:65:fd:eb:7d:e1:12:98:d1:c6:32:
         84:2f:3a:e3:d8:98:97:03:80:ca:91:de:d1:e3:5d:23:24:8a:
         cb:e8:99:f4:81:d8:ef:f6:63:52:8a:3e:bb:79:aa:7b:bf:35:
         70:9b:1a:df:ef:4f:c2:25:8a:93:d1:67:7b:f7:dc:10:47:b0:
         e0:23:01:67:c3:c9:69:67:95:e5:c0:72:d0:43:5e:89:dc:e1:
         e5:57:ee:99
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEi3i4E/PD6g1IQeEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRiYmE0OWUtOWZlMi00MmE0LWE5NTctODdlNzNjYTI0
ZjUzMB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZmVjNWM3YjAtYmVhNS00ZDA2LWEwYWEtOWFhNjdiYTZhNWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KFSQzLGrFLNgvf+ogZNSSQziVHW+I5Rl7Ia
tCgDO4nOY5lod8QbUtieMCEuHQS/5Al7Sg+9Rxct5ZgZc27+7Ti4dNTM5d1weN00
fmqquebbRNra/2zcBLH9Qo4wLabNnMdFBtbJm1H30N2HdTg/ZxRgXH8TDq0sVRL4
+neQQgz2pTDCGuBw06TR/ncgt3FjccF55OfRI2zfUqU0EAJXIH+ZncJaosTnj/bf
CyQCemEtfZG9Q+WeKmaXWEIGPvaoycSKi45jbGav+SHdPpihptkfkgOg0lY0Qy92
43K51w0J21ULC5LMGS/bDI2IYa0w9PgxoHDECbsXGLtt0VsoDQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFDinvFaSXm4PhtmqJjCWFbGmAp1+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZGJi
YTQ5ZS05ZmUyLTQyYTQtYTk1Ny04N2U3M2NhMjRmNTMvNzNkYjE4OGEtYWMzMi0z
N2U0LWE2ZGUtNWJjZmE2YjU5NTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmRiYmE0OWUtOWZlMi00MmE0LWE5
NTctODdlNzNjYTI0ZjUzLzJkYmJhNDllLTlmZTItNDJhNC1hOTU3LTg3ZTczY2Ey
NGY1My5jcmwwHwYDVR0jBBgwFoAUzkL+wkQsNCr2RboPYWnhKk7mjRowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yZGJiYTQ5ZS05ZmUyLTQyYTQtYTk1Ny04N2U3
M2NhMjRmNTMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4wYMA8E
AgACMAkDBwQmAggQkAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXy/De2AXFMiq8/hKp3S+L2xDmmErX7vo
DQEPhtdO2dte5Fxhi7ryLDCxXatDys5PhVtFpxTbVQ+7RNYi+mOXNAZ4G+MtVeX2
xz15+TqvxRGr1ssbhBuDKQQ9aC2H+qj5JpYWnQ1wQikwV6IxgemJg0Dd/ETHBli6
SD2GctXhM9OJeWn4NZPuAKCKyHJaP0+ThG0vPEqPM0Ns3JORhbJ0vGevbIqUY5od
Z2tl/et94RKY0cYyhC8649iYlwOAypHe0eNdIySKy+iZ9IHY7/ZjUoo+u3mqe781
cJsa3+9PwiWKk9Fne/fcEEew4CMBZ8PJaWeV5cBy0ENeidzh5VfumQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:09:45 2025 by rpki-client