Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa
File:                     c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa (raw, json)
Hash identifier:          FdEs2RjiRTgky6PjsopWspLQtEAbfOXvsAe4l2TAQDE=
Subject key identifier:   50:10:CC:79:6E:27:42:EF:25:3C:7F:5C:C8:DD:E7:FE:4D:FF:7C:C5
Certificate issuer:       /CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251
Certificate serial:       010D0C9F432858488ABF2014DF5DB1DC09829CD0
Authority key identifier: C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa
Signing time:             Tue 14 Jan 2025 12:53:32 +0000
ROA not before:           Tue 14 Jan 2025 12:53:32 +0000
ROA not after:            Mon 14 Apr 2025 11:53:32 +0000
asID:                     401474
IP address blocks:        23.130.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:bf:20:14:df:5d:b1:dc:09:82:9c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251
        Validity
            Not Before: Jan 14 12:53:32 2025 GMT
            Not After : Apr 14 11:53:32 2025 GMT
        Subject: CN=3934331b-1c9d-442b-af90-3213f997cba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:49:08:96:f9:45:a9:bf:04:68:e6:59:dd:
                    43:e0:3e:41:86:4e:28:09:69:e1:8c:3a:a7:ae:13:
                    9f:51:35:fc:79:41:68:7c:c1:2f:b2:f6:60:8a:88:
                    1e:ca:0a:99:1a:f9:73:4f:bc:25:54:4c:a9:d2:7a:
                    c3:c2:de:b1:e6:26:48:cc:a6:97:84:35:34:5e:64:
                    00:d9:9b:c3:a7:c8:1f:b8:6e:21:ee:64:12:15:0b:
                    43:aa:22:32:46:22:54:dc:19:e0:b7:71:3b:ea:32:
                    7e:00:15:0e:d1:bb:77:4b:6e:fc:56:67:4a:89:b4:
                    97:22:d1:41:33:66:8b:df:d3:f9:ef:b8:19:41:fd:
                    33:5e:74:e5:6e:2f:81:fb:0d:3c:50:44:3e:1b:28:
                    2a:b6:0b:bd:f6:86:e8:fa:a1:2f:6b:63:3b:cc:69:
                    df:ce:08:2e:19:ec:bc:d8:62:14:74:59:b9:56:fa:
                    f7:84:e5:c2:99:fa:65:47:8f:f3:c5:aa:5a:0d:6a:
                    0b:3a:54:06:5b:08:96:e9:4d:f9:af:71:93:ee:ee:
                    ce:2c:c1:36:63:27:a5:71:8a:bd:12:1b:b6:eb:24:
                    01:47:bd:65:df:a1:e3:ca:f2:f4:97:94:1a:ca:33:
                    00:94:5f:1d:7c:ff:01:fb:04:9b:89:92:1e:a7:75:
                    3a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:10:CC:79:6E:27:42:EF:25:3C:7F:5C:C8:DD:E7:FE:4D:FF:7C:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f8:5f:15:5c:e6:52:bb:77:69:3d:22:d8:0e:4d:32:9b:22:
         48:d0:c8:52:ca:1b:5c:3c:63:38:67:d6:cb:fd:4b:c5:7e:7d:
         f7:84:c9:dc:ba:6d:76:d1:32:a4:e8:3a:a5:29:3d:01:80:6d:
         18:b1:86:e5:b5:dd:f1:1f:f1:2e:ee:c3:bd:05:b6:14:8a:be:
         03:fa:fc:11:f8:c2:6d:6d:ee:f7:dd:ae:f9:3f:f1:0b:c7:c4:
         0e:bd:b8:b9:d3:21:9c:9d:6e:2f:ad:5c:9a:f2:df:ef:cd:60:
         91:5e:78:45:c7:a4:aa:47:4e:26:bf:14:5c:ba:81:f1:87:57:
         a8:76:12:cd:24:30:b1:98:09:b2:d1:82:4b:4c:6d:44:28:89:
         a5:d8:40:e9:22:82:50:e0:d9:1b:56:e6:71:d1:e3:1c:1d:2a:
         cd:c6:d0:a2:e0:91:99:98:d3:ba:5c:85:44:88:51:09:c8:3b:
         f5:70:4b:7f:22:67:86:bf:f5:58:db:60:1e:01:27:80:89:74:
         e7:49:01:f9:19:65:02:93:11:0a:32:43:76:1a:97:fd:41:72:
         29:6d:ca:54:77:77:91:45:9c:52:42:ac:f2:a0:26:c5:f1:20:
         98:1e:83:da:94:ec:42:67:b5:89:63:5d:21:99:7c:c2:6a:27:
         ea:0f:87:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiKvyAU312x3AmCnNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI1OTQ3ZTQtNjFlNi00ZGRmLThjMmUtMGI4NDgyMTVi
MjUxMB4XDTI1MDExNDEyNTMzMloXDTI1MDQxNDExNTMzMlowLzEtMCsGA1UEAxMk
MzkzNDMzMWItMWM5ZC00NDJiLWFmOTAtMzIxM2Y5OTdjYmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFNJCJb5Ram/BGjmWd1D4D5Bhk4oCWnhjDqn
rhOfUTX8eUFofMEvsvZgiogeygqZGvlzT7wlVEyp0nrDwt6x5iZIzKaXhDU0XmQA
2ZvDp8gfuG4h7mQSFQtDqiIyRiJU3Bngt3E76jJ+ABUO0bt3S278VmdKibSXItFB
M2aL39P577gZQf0zXnTlbi+B+w08UEQ+Gygqtgu99obo+qEva2M7zGnfzgguGey8
2GIUdFm5Vvr3hOXCmfplR4/zxapaDWoLOlQGWwiW6U35r3GT7u7OLME2YyelcYq9
Ehu26yQBR71l36HjyvL0l5QayjMAlF8dfP8B+wSbiZIep3U6iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFAQzHluJ0LvJTx/XMjd5/5N/3zFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYjU5
NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0ODIxNWIyNTEvYzljOTBlMTItMGI0MC0z
MjlkLWE1NjgtMzhiMWZmZGY0NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmI1OTQ3ZTQtNjFlNi00ZGRmLThj
MmUtMGI4NDgyMTViMjUxLzJiNTk0N2U0LTYxZTYtNGRkZi04YzJlLTBiODQ4MjE1
YjI1MS5jcmwwHwYDVR0jBBgwFoAUxuUzm27bDltZqbZkAm6OGJo8kNQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yYjU5NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0
ODIxNWIyNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABb4XxVc5lK7d2k9ItgOTTKbIkjQyFLKG1w8Yzhn1sv9S8V+ffeEydy6
bXbRMqToOqUpPQGAbRixhuW13fEf8S7uw70FthSKvgP6/BH4wm1t7vfdrvk/8QvH
xA69uLnTIZydbi+tXJry3+/NYJFeeEXHpKpHTia/FFy6gfGHV6h2Es0kMLGYCbLR
gktMbUQoiaXYQOkiglDg2RtW5nHR4xwdKs3G0KLgkZmY07pchUSIUQnIO/VwS38i
Z4a/9VjbYB4BJ4CJdOdJAfkZZQKTEQoyQ3Yal/1BciltylR3d5FFnFJCrPKgJsXx
IJgeg9qU7EJntYljXSGZfMJqJ+oPh14=
-----END CERTIFICATE-----
Generated at Wed Feb 5 19:02:38 2025 by rpki-client