Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/843cf6ab-c96b-3e76-be87-2bea83664ff9.roa
File:                     843cf6ab-c96b-3e76-be87-2bea83664ff9.roa (raw, json)
Hash identifier:          +CvfTuYW6VpldfER4vzikK6OzQKgqM+TcquaWWK9wu4=
Subject key identifier:   FB:EA:78:83:C4:32:DA:9F:2A:AA:AA:80:64:3A:5D:1F:B0:DA:53:FB
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F432858492CB214A770BBCB9534458F00
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/843cf6ab-c96b-3e76-be87-2bea83664ff9.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     397994
IP address blocks:        23.136.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:14:a7:70:bb:cb:95:34:45:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=ae0a1c30-77dc-47e6-8210-d86cb2597f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:01:b6:13:e9:ad:a6:c3:1a:4d:2c:69:d3:
                    df:a1:e6:62:4c:95:34:4d:e3:4b:1a:3e:bb:f5:b8:
                    d9:55:63:98:27:79:61:40:dc:a6:43:53:da:2f:df:
                    00:72:b1:f6:d8:3f:e7:76:4a:23:93:c0:68:36:53:
                    fa:a6:94:90:e5:19:31:c5:4d:ee:38:e3:9a:cf:c4:
                    91:eb:4d:20:66:24:84:59:c3:5c:2c:95:49:20:61:
                    15:50:a9:03:28:e8:77:17:b9:8c:15:f5:2e:d7:91:
                    e9:0f:39:31:56:66:b9:d7:84:cb:51:f3:31:9a:2e:
                    03:28:25:2f:53:15:e8:47:22:bd:02:0a:e9:52:59:
                    37:a5:f4:5b:0e:51:ae:42:f0:7b:94:1e:57:69:09:
                    35:cc:6b:15:4e:dc:17:25:99:df:59:54:63:5b:03:
                    15:31:95:85:a8:70:38:ee:1a:4a:52:82:c1:a3:8f:
                    60:19:86:19:81:73:0d:83:09:75:5a:72:26:1b:fd:
                    c8:63:4a:6b:3d:7d:71:b2:fa:38:48:b3:1d:6e:e1:
                    24:3a:4b:a0:5a:f8:6b:f3:e9:57:b7:af:e2:4c:a9:
                    aa:8c:f8:8a:ae:1d:57:2b:b2:47:8d:6c:20:71:66:
                    df:f7:c8:80:2b:8e:3b:ee:1a:3a:aa:80:b5:81:0d:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EA:78:83:C4:32:DA:9F:2A:AA:AA:80:64:3A:5D:1F:B0:DA:53:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/843cf6ab-c96b-3e76-be87-2bea83664ff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:09:1b:17:2d:e8:59:88:15:a4:98:d9:d2:03:01:d9:b2:40:
         d5:94:25:c2:e5:6f:a2:2e:a9:31:2b:9f:79:63:df:7a:c2:46:
         b5:ad:19:aa:26:e5:b8:86:5c:41:8d:ac:87:11:a4:99:e8:de:
         1e:f5:20:97:37:a9:5b:f7:e8:38:ee:7f:be:20:ce:9d:30:eb:
         1e:bd:6e:c6:b9:3b:2a:15:4b:66:8a:ee:60:46:11:73:aa:ba:
         00:b4:3d:ad:4a:a8:12:52:4c:bc:a2:5a:7d:c4:8d:15:18:fb:
         7d:3f:7c:63:4a:23:e6:b3:35:fd:fe:ab:0c:16:ca:10:86:ec:
         5b:2a:a6:a1:54:af:39:06:a7:0f:bc:05:b6:11:75:80:44:9d:
         6b:30:6a:8e:1d:cd:ea:04:92:27:e2:f7:08:3a:a8:f2:ae:7b:
         a1:66:d5:63:dc:61:26:6f:5f:d5:c6:e2:91:43:e4:dc:54:b6:
         d6:64:b9:c2:0c:6c:21:6a:f5:a0:bd:30:85:79:06:d5:a8:f7:
         8b:16:69:e6:a0:13:9a:56:83:94:a5:0b:8b:2a:45:c2:68:b0:
         c4:c0:da:90:99:8b:f3:8b:75:fa:cb:e1:da:0c:d2:c8:9d:d8:
         6c:df:fe:80:fc:b7:fd:ed:4e:94:e5:69:2d:94:1e:1c:1d:59:
         c3:4b:99:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksshSncLvLlTRFjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5
OWM3MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YWUwYTFjMzAtNzdkYy00N2U2LTgyMTAtZDg2Y2IyNTk3ZjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvABthPprabDGk0sadPfoeZiTJU0TeNLGj67
9bjZVWOYJ3lhQNymQ1PaL98AcrH22D/ndkojk8BoNlP6ppSQ5RkxxU3uOOOaz8SR
600gZiSEWcNcLJVJIGEVUKkDKOh3F7mMFfUu15HpDzkxVma514TLUfMxmi4DKCUv
UxXoRyK9AgrpUlk3pfRbDlGuQvB7lB5XaQk1zGsVTtwXJZnfWVRjWwMVMZWFqHA4
7hpKUoLBo49gGYYZgXMNgwl1WnImG/3IY0prPX1xsvo4SLMdbuEkOkugWvhr8+lX
t6/iTKmqjPiKrh1XK7JHjWwgcWbf98iAK4477ho6qoC1gQ1mPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPvqeIPEMtqfKqqqgGQ6XR+w2lP7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0
ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvODQzY2Y2YWItYzk2Yi0z
ZTc2LWJlODctMmJlYTgzNjY0ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1
NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj
OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm
MzY0Yzk5YzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4gIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMJGxct6FmIFaSY2dIDAdmyQNWUJcLlb6IuqTErn3lj33rCRrWtGaom
5biGXEGNrIcRpJno3h71IJc3qVv36Djuf74gzp0w6x69bsa5OyoVS2aK7mBGEXOq
ugC0Pa1KqBJSTLyiWn3EjRUY+30/fGNKI+azNf3+qwwWyhCG7FsqpqFUrzkGpw+8
BbYRdYBEnWswao4dzeoEkifi9wg6qPKue6Fm1WPcYSZvX9XG4pFD5NxUttZkucIM
bCFq9aC9MIV5BtWo94sWaeagE5pWg5SlC4sqRcJosMTA2pCZi/OLdfrL4doM0sid
2Gzf/oD8t/3tTpTlaS2UHhwdWcNLmWI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:36 2025 by rpki-client