Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/27425216-be67-30e5-9322-17c3838b73ab.roa
File:                     27425216-be67-30e5-9322-17c3838b73ab.roa (raw, json)
Hash identifier:          GTYKbHB1JHHXAqphOXzPNZy9yfq3OaYrRvcMgRcBHGU=
Subject key identifier:   A3:8E:E6:BD:7D:83:C2:CD:B4:74:30:D9:25:8F:F2:F7:DE:B2:E6:F6
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584869606B297C8428C7EF0F3080
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/27425216-be67-30e5-9322-17c3838b73ab.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     11870
IP address blocks:        167.23.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:6b:29:7c:84:28:c7:ef:0f:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=17a544c6-6ba2-4b49-bcdf-c6fd75bc3683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3b:dc:6a:c1:41:45:8e:48:0b:72:c4:21:c4:
                    b8:14:c3:b8:08:01:e8:ac:41:fc:38:12:c0:5c:94:
                    74:de:0e:21:ca:f3:5b:71:cc:be:58:88:0e:d2:91:
                    5b:ba:07:ba:63:31:03:67:89:d9:90:97:9d:ff:75:
                    e0:dc:bc:11:31:f1:bb:a6:1e:43:0b:0f:35:3f:20:
                    13:8e:d9:eb:d2:cb:76:f9:8d:17:55:3c:bd:d8:7c:
                    3f:91:ea:72:3d:c7:ac:14:32:d5:d2:a7:c5:b3:12:
                    18:d5:56:b4:89:92:ff:8d:a8:ae:c2:98:85:53:79:
                    46:f1:ec:22:4c:71:19:99:26:43:d2:b7:6f:b3:ca:
                    00:ae:83:ed:a7:63:91:c5:1e:4e:70:aa:92:88:28:
                    55:1f:cf:38:d9:1d:6d:ae:22:fa:56:43:f7:7e:07:
                    c0:f6:a8:15:41:3d:1b:be:8f:1b:a3:6c:ff:ad:f7:
                    d5:d2:27:e9:3e:df:77:2e:df:98:11:01:b7:93:57:
                    5e:67:75:a5:64:16:97:01:bb:40:98:ec:7f:08:53:
                    a7:1c:bb:a7:2a:94:64:65:86:26:50:67:9e:4c:b2:
                    31:c8:fc:d8:39:16:94:fc:b2:1a:86:83:d1:5a:d0:
                    78:0e:6a:44:30:54:c6:46:56:08:d2:17:10:00:ac:
                    e3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8E:E6:BD:7D:83:C2:CD:B4:74:30:D9:25:8F:F2:F7:DE:B2:E6:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/27425216-be67-30e5-9322-17c3838b73ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:71:84:fc:8e:e1:8f:ba:be:92:ae:ca:d0:d8:bb:cc:a3:ad:
         25:48:c3:af:d9:a8:29:09:25:73:e6:bf:34:ed:dc:52:cb:bc:
         8b:37:8f:d8:17:79:88:1f:46:73:b8:92:31:48:a5:ef:3e:55:
         8d:83:bf:7b:a5:39:73:d9:9f:0a:b4:be:fe:97:aa:99:a3:e4:
         c6:3a:60:f3:e8:92:95:08:c5:b8:eb:92:cf:90:91:7c:7d:26:
         04:c2:30:62:e0:d8:33:1a:64:f9:bd:e9:ce:d5:48:68:f7:58:
         0b:26:3b:32:24:d8:09:8d:7d:81:56:18:8d:90:b6:95:12:1a:
         dd:b0:46:17:08:ed:0d:b2:d2:53:4b:64:62:53:fb:15:41:2d:
         05:ca:8f:5a:32:ed:7e:84:1c:bd:d5:4b:86:b3:7f:1b:50:77:
         90:cc:b2:59:89:91:d4:37:59:9b:a5:d5:ca:a9:89:e8:7f:77:
         25:89:99:d6:11:03:bd:e2:f9:02:9c:da:a9:dc:0e:a8:5c:d9:
         b8:ad:09:12:89:46:78:e3:e2:09:db:38:94:ff:a4:33:88:ee:
         e8:15:1e:02:ba:f0:07:c0:17:0a:a9:7c:96:6b:2a:a4:b8:d2:
         4e:07:c3:d0:09:0a:46:d6:b9:b6:89:b9:7d:20:bc:21:18:35:
         76:91:00:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYGspfIQox+8PMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm
OGM0MB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
MTdhNTQ0YzYtNmJhMi00YjQ5LWJjZGYtYzZmZDc1YmMzNjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jvcasFBRY5IC3LEIcS4FMO4CAHorEH8OBLA
XJR03g4hyvNbccy+WIgO0pFbuge6YzEDZ4nZkJed/3Xg3LwRMfG7ph5DCw81PyAT
jtnr0st2+Y0XVTy92Hw/kepyPcesFDLV0qfFsxIY1Va0iZL/jaiuwpiFU3lG8ewi
THEZmSZD0rdvs8oAroPtp2ORxR5OcKqSiChVH8842R1triL6VkP3fgfA9qgVQT0b
vo8bo2z/rffV0ifpPt93Lt+YEQG3k1deZ3WlZBaXAbtAmOx/CFOnHLunKpRkZYYm
UGeeTLIxyPzYORaU/LIahoPRWtB4DmpEMFTGRlYI0hcQAKzjewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKOO5r19g8LNtHQw2SWP8vfesub2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1
OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvMjc0MjUyMTYtYmU2Ny0z
MGU1LTkzMjItMTdjMzgzOGI3M2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5
NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz
ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw
YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxdZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1xhPyO4Y+6vpKuytDYu8yjrSVIw6/ZqCkJJXPmvzTt3FLLvIs3j9gX
eYgfRnO4kjFIpe8+VY2Dv3ulOXPZnwq0vv6Xqpmj5MY6YPPokpUIxbjrks+QkXx9
JgTCMGLg2DMaZPm96c7VSGj3WAsmOzIk2AmNfYFWGI2QtpUSGt2wRhcI7Q2y0lNL
ZGJT+xVBLQXKj1oy7X6EHL3VS4azfxtQd5DMslmJkdQ3WZul1cqpieh/dyWJmdYR
A73i+QKc2qncDqhc2bitCRKJRnjj4gnbOJT/pDOI7ugVHgK68AfAFwqpfJZrKqS4
0k4Hw9AJCkbWubaJuX0gvCEYNXaRAEk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:28 2025 by rpki-client