Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/76457ce9-bb8a-31fb-b219-743fad294918.roa
File:                     76457ce9-bb8a-31fb-b219-743fad294918.roa (raw, json)
Hash identifier:          OkdYfcWkJcivwjeTlC5hCoWQav97L9KHQpnumboNj7A=
Subject key identifier:   8C:A2:1B:4C:DB:BA:26:8D:45:94:77:8A:28:54:21:54:A5:6E:FF:21
Certificate issuer:       /CN=83220b5e-8104-4c4e-bbce-305b174b684a
Certificate serial:       010D0C9F4328584953C4140FC7499471BA7F0D00
Authority key identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/76457ce9-bb8a-31fb-b219-743fad294918.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     53698
IP address blocks:        23.174.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:14:0f:c7:49:94:71:ba:7f:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83220b5e-8104-4c4e-bbce-305b174b684a
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=fc5e52c5-fc92-45c3-9397-b52302a27d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c3:ab:6d:45:e3:df:19:84:ea:f5:49:8a:52:
                    98:a1:ae:f5:cf:0f:bc:9e:25:71:b3:b2:f6:7c:20:
                    ed:d8:01:71:62:be:e6:82:78:78:0f:32:fe:1b:6f:
                    9c:40:e8:eb:d9:84:40:dd:84:c8:88:01:be:d9:6d:
                    c0:cc:7f:a6:ab:51:3f:fb:dd:b7:0e:df:a8:d0:ba:
                    31:89:7a:b1:a7:99:e2:aa:f5:43:32:6d:65:7e:8d:
                    be:0e:7f:11:fa:38:54:9f:0f:05:71:fc:ca:8d:d1:
                    76:79:bf:57:8f:d9:07:19:a9:fb:ba:6e:fe:37:5f:
                    80:96:43:5d:8d:68:b3:70:08:42:60:06:43:46:00:
                    24:42:59:74:b4:0d:ae:37:a6:d2:8f:26:a3:1d:1f:
                    1e:8b:f0:39:0c:bb:6f:cf:04:33:b3:2f:9c:2d:da:
                    d6:d4:1d:1b:31:29:35:e4:7d:3b:b5:d5:e4:a5:c7:
                    89:e2:9c:85:9f:76:ae:b7:2a:2f:8f:db:a9:33:d9:
                    a1:b4:2f:9e:fc:9d:75:a7:69:fa:e1:14:42:94:70:
                    a8:ea:a4:f9:cb:f5:fd:be:84:f9:17:2d:34:1e:bd:
                    62:a8:b5:63:c9:bd:ed:60:6d:16:cf:23:c5:f8:db:
                    b3:30:e5:49:f2:1e:44:f7:45:87:a7:f8:a0:c1:4c:
                    f6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A2:1B:4C:DB:BA:26:8D:45:94:77:8A:28:54:21:54:A5:6E:FF:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/76457ce9-bb8a-31fb-b219-743fad294918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ea:1b:ac:fe:1a:c2:f4:96:9c:a3:28:98:a8:fe:ff:f2:2e:
         84:80:29:9b:88:e8:b6:bd:64:b3:ed:35:96:9a:43:f7:09:b4:
         58:58:9a:69:3f:0d:10:c7:df:92:6c:10:25:67:00:ee:86:88:
         f9:ef:3c:b8:7b:5f:60:75:0c:73:19:a0:fa:9c:d8:2b:1f:61:
         f7:d4:e9:12:fe:30:b3:da:fb:6d:1d:fa:ce:e3:da:5e:0e:9d:
         ed:c7:c0:19:59:cf:23:58:72:a0:46:a3:eb:c2:bf:89:a2:7a:
         7e:f0:25:e2:11:a8:ae:f4:f4:e1:14:97:a0:ae:ea:68:63:30:
         08:b7:02:32:e6:21:33:8f:9f:d0:10:89:be:a6:ae:52:14:a5:
         8b:49:19:fa:a4:ee:93:d1:4e:78:ad:5d:e2:55:53:a9:a6:a5:
         86:70:a8:52:ff:59:a1:e6:1a:34:7c:7e:35:76:94:af:51:8c:
         b6:68:a8:7f:18:56:e8:b9:d1:6f:86:15:1a:db:20:e9:83:bb:
         f8:ee:c2:cb:d9:e5:2a:b3:3e:cb:f6:de:f6:84:00:22:28:fd:
         dd:19:86:3a:ab:55:3e:bc:65:39:f1:59:d5:1c:4c:ea:64:84:
         eb:cf:ea:2e:3f:0f:28:ca:7a:c5:ac:a5:3a:29:39:24:aa:29:
         ca:fa:8c:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBQPx0mUcbp/DQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMyMjBiNWUtODEwNC00YzRlLWJiY2UtMzA1YjE3NGI2
ODRhMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmM1ZTUyYzUtZmM5Mi00NWMzLTkzOTctYjUyMzAyYTI3ZDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMOrbUXj3xmE6vVJilKYoa71zw+8niVxs7L2
fCDt2AFxYr7mgnh4DzL+G2+cQOjr2YRA3YTIiAG+2W3AzH+mq1E/+923Dt+o0Lox
iXqxp5niqvVDMm1lfo2+Dn8R+jhUnw8FcfzKjdF2eb9Xj9kHGan7um7+N1+AlkNd
jWizcAhCYAZDRgAkQll0tA2uN6bSjyajHR8ei/A5DLtvzwQzsy+cLdrW1B0bMSk1
5H07tdXkpceJ4pyFn3autyovj9upM9mhtC+e/J11p2n64RRClHCo6qT5y/X9voT5
Fy00Hr1iqLVjyb3tYG0WzyPF+NuzMOVJ8h5E90WHp/igwUz2KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIyiG0zbuiaNRZR3iihUIVSlbv8hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MzIy
MGI1ZS04MTA0LTRjNGUtYmJjZS0zMDViMTc0YjY4NGEvNzY0NTdjZTktYmI4YS0z
MWZiLWIyMTktNzQzZmFkMjk0OTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODMyMjBiNWUtODEwNC00YzRlLWJi
Y2UtMzA1YjE3NGI2ODRhLzgzMjIwYjVlLTgxMDQtNGM0ZS1iYmNlLTMwNWIxNzRi
Njg0YS5jcmwwHwYDVR0jBBgwFoAUoWhThMRveGpjv2l4lcBjMgj5U6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84MzIyMGI1ZS04MTA0LTRjNGUtYmJjZS0zMDVi
MTc0YjY4NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF66wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAbqG6z+GsL0lpyjKJio/v/yLoSAKZuI6La9ZLPtNZaaQ/cJtFhYmmk/
DRDH35JsECVnAO6GiPnvPLh7X2B1DHMZoPqc2CsfYffU6RL+MLPa+20d+s7j2l4O
ne3HwBlZzyNYcqBGo+vCv4mien7wJeIRqK709OEUl6Cu6mhjMAi3AjLmITOPn9AQ
ib6mrlIUpYtJGfqk7pPRTnitXeJVU6mmpYZwqFL/WaHmGjR8fjV2lK9RjLZoqH8Y
Vui50W+GFRrbIOmDu/juwsvZ5SqzPsv23vaEACIo/d0ZhjqrVT68ZTnxWdUcTOpk
hOvP6i4/DyjKesWspTopOSSqKcr6jBs=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:58 2025 by rpki-client