Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/e2c8c2b1-6811-3d35-84a4-444963c64e6a.roa
File:                     e2c8c2b1-6811-3d35-84a4-444963c64e6a.roa (raw, json)
Hash identifier:          JZX/6Z9KZrFhddzRCk4c0TDicme8v9K+gRoZHLtebDY=
Subject key identifier:   C0:CB:21:E7:0C:56:C5:C5:10:EE:E1:6C:11:B7:1B:5C:AF:71:CA:50
Certificate issuer:       /CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed
Certificate serial:       010D0C9F43285848C9B0DB153D7A565682610A80
Authority key identifier: 06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/e2c8c2b1-6811-3d35-84a4-444963c64e6a.roa
Signing time:             Thu 06 Feb 2025 02:00:39 +0000
ROA not before:           Thu 06 Feb 2025 02:00:39 +0000
ROA not after:            Wed 07 May 2025 01:00:39 +0000
asID:                     46109
IP address blocks:        23.156.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c9:b0:db:15:3d:7a:56:56:82:61:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed
        Validity
            Not Before: Feb  6 02:00:39 2025 GMT
            Not After : May  7 01:00:39 2025 GMT
        Subject: CN=ab3b4594-0e72-48bd-bdff-5bf261547dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bb:61:14:4e:7a:55:c2:57:e4:fa:eb:84:35:
                    f4:84:6d:c5:8a:f4:34:03:bf:b2:5f:2f:b0:0b:48:
                    91:8d:8a:e7:f5:66:33:b3:f5:69:f7:c5:69:40:60:
                    ca:f6:49:24:66:26:db:66:1e:1b:a5:ca:2c:9d:8a:
                    10:44:ed:b5:e2:14:a0:6f:3e:81:d5:79:09:ca:a0:
                    83:65:fe:c1:41:38:7a:32:11:e6:27:30:32:ef:a4:
                    f5:e1:9e:0f:4d:c4:f9:3f:b4:5f:7d:ce:d5:7c:7f:
                    17:ee:aa:a0:ee:24:a8:89:fb:08:9c:8b:81:86:b2:
                    b2:d5:8f:93:05:17:04:dc:a2:c3:6a:d3:e4:33:6b:
                    e2:90:79:8a:5d:6d:32:8b:d4:16:11:4a:7a:1e:de:
                    e6:59:87:63:44:f2:c0:1f:eb:3e:4d:d7:84:57:90:
                    d4:f3:60:7c:e8:15:96:cb:32:ae:bd:2d:a7:ea:bf:
                    3a:35:d4:b1:ac:3d:76:4b:a0:2b:e5:84:50:45:7c:
                    36:0f:ce:6b:a2:62:2e:6f:8b:8b:f1:5d:03:b3:e8:
                    7a:54:4a:f0:fa:22:b1:dc:95:d7:eb:51:8e:45:7a:
                    fa:45:26:23:6a:3c:d8:7f:13:37:8f:46:f3:c2:f0:
                    dc:2f:35:77:b3:5b:ce:22:a2:ae:8f:3e:d9:ca:bc:
                    38:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CB:21:E7:0C:56:C5:C5:10:EE:E1:6C:11:B7:1B:5C:AF:71:CA:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/e2c8c2b1-6811-3d35-84a4-444963c64e6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl

            X509v3 Authority Key Identifier:
                keyid:06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:c3:1f:73:bd:5a:aa:14:ce:bf:da:19:47:be:88:0d:de:85:
         5d:bf:df:55:65:24:cb:28:06:4e:dc:04:02:90:42:a0:35:df:
         19:10:46:dd:23:6d:1d:ab:ea:57:26:84:56:1c:45:b5:86:02:
         46:d1:2f:50:23:98:d2:9c:1b:f1:c0:31:ac:d9:7f:b5:ab:e2:
         3d:5e:a9:48:36:00:a0:51:fa:62:e7:62:95:06:d5:8c:ad:52:
         39:ff:0f:98:24:eb:12:8d:f7:de:a2:b8:1f:b1:1f:4f:f4:1d:
         71:dd:51:42:65:8d:c6:fd:9d:8d:d4:fa:47:eb:3d:03:e4:c9:
         8e:6c:5e:07:45:eb:ca:60:44:c8:8f:70:82:24:29:ec:03:12:
         63:29:94:77:fb:46:10:72:a1:b4:29:64:8e:79:70:cc:2a:89:
         f2:6b:7e:4e:c5:da:d6:56:2e:d9:c3:16:15:6a:77:72:94:3f:
         46:72:50:6b:66:58:36:3f:c9:ae:5b:11:7c:f9:4e:82:1d:7b:
         47:0b:46:c3:0d:1b:b9:23:aa:bc:a5:e1:16:f6:72:29:08:d5:
         08:e0:ae:3a:94:d2:41:02:ec:77:77:c8:92:b5:5d:a1:59:6d:
         0f:71:6c:aa:a5:7f:37:bc:d2:37:44:1d:32:e2:c5:f7:0f:1d:
         a6:4c:38:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjJsNsVPXpWVoJhCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDZmNDM4ZDItNDcxNy00MmMwLWJjYTUtOWIzYTJjZGQw
OWVkMB4XDTI1MDIwNjAyMDAzOVoXDTI1MDUwNzAxMDAzOVowLzEtMCsGA1UEAxMk
YWIzYjQ1OTQtMGU3Mi00OGJkLWJkZmYtNWJmMjYxNTQ3ZGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rthFE56VcJX5PrrhDX0hG3FivQ0A7+yXy+w
C0iRjYrn9WYzs/Vp98VpQGDK9kkkZibbZh4bpcosnYoQRO214hSgbz6B1XkJyqCD
Zf7BQTh6MhHmJzAy76T14Z4PTcT5P7Rffc7VfH8X7qqg7iSoifsInIuBhrKy1Y+T
BRcE3KLDatPkM2vikHmKXW0yi9QWEUp6Ht7mWYdjRPLAH+s+TdeEV5DU82B86BWW
yzKuvS2n6r86NdSxrD12S6Ar5YRQRXw2D85romIub4uL8V0Ds+h6VErw+iKx3JXX
61GORXr6RSYjajzYfxM3j0bzwvDcLzV3s1vOIqKujz7Zyrw4QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMDLIecMVsXFEO7hbBG3G1yvccpQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wNmY0
MzhkMi00NzE3LTQyYzAtYmNhNS05YjNhMmNkZDA5ZWQvZTJjOGMyYjEtNjgxMS0z
ZDM1LTg0YTQtNDQ0OTYzYzY0ZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDZmNDM4ZDItNDcxNy00MmMwLWJj
YTUtOWIzYTJjZGQwOWVkLzA2ZjQzOGQyLTQ3MTctNDJjMC1iY2E1LTliM2EyY2Rk
MDllZC5jcmwwHwYDVR0jBBgwFoAUBq42m6IiDFcFNj+gveDl/fPwaNowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wNmY0MzhkMi00NzE3LTQyYzAtYmNhNS05YjNh
MmNkZDA5ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5z4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKPDH3O9WqoUzr/aGUe+iA3ehV2/31VlJMsoBk7cBAKQQqA13xkQRt0j
bR2r6lcmhFYcRbWGAkbRL1AjmNKcG/HAMazZf7Wr4j1eqUg2AKBR+mLnYpUG1Yyt
Ujn/D5gk6xKN996iuB+xH0/0HXHdUUJljcb9nY3U+kfrPQPkyY5sXgdF68pgRMiP
cIIkKewDEmMplHf7RhByobQpZI55cMwqifJrfk7F2tZWLtnDFhVqd3KUP0ZyUGtm
WDY/ya5bEXz5ToIde0cLRsMNG7kjqryl4Rb2cikI1QjgrjqU0kEC7Hd3yJK1XaFZ
bQ9xbKqlfze80jdEHTLixfcPHaZMOFE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:16:50 2025 by rpki-client