Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/2a96e1c8-e510-35b1-b0ed-2f58569aac75.roa
File:                     2a96e1c8-e510-35b1-b0ed-2f58569aac75.roa (raw, json)
Hash identifier:          pXf7KSNuGzy7wjNJ3H+LlRjb8uHo2nfSrcLM9p3ulTA=
Subject key identifier:   4F:4B:78:B0:17:EE:C6:50:4D:FF:71:3B:95:07:A4:3C:32:1B:0A:5E
Certificate issuer:       /CN=845381b0-384a-4243-95e1-ae5dd9916fd7
Certificate serial:       010D0C9F43285848C6E63861AF161C97455272F0
Authority key identifier: CB:FC:80:79:7D:34:80:E4:19:8F:0D:A6:8E:CB:C6:E2:03:D3:60:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/2a96e1c8-e510-35b1-b0ed-2f58569aac75.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     63023
IP address blocks:        23.158.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/845381b0-384a-4243-95e1-ae5dd9916fd7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/845381b0-384a-4243-95e1-ae5dd9916fd7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:38:61:af:16:1c:97:45:52:72:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845381b0-384a-4243-95e1-ae5dd9916fd7
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=3293c3e9-c213-4d66-b2b9-eb723cd1cb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ee:8a:78:14:9a:66:fe:96:e1:41:31:29:7e:
                    8e:9f:f2:13:7c:dc:f0:a8:b0:fa:2c:0c:d8:a6:99:
                    87:37:a7:e3:59:bf:be:7d:ff:ef:51:06:ef:e1:d1:
                    fa:ed:6d:1d:89:99:d5:37:53:7b:bb:60:66:7a:7c:
                    75:df:e8:5c:ac:fd:ce:65:43:32:f6:42:14:10:b7:
                    1f:27:f0:1c:88:41:d6:9c:f0:7e:8d:7e:a4:59:01:
                    d1:ac:49:59:fd:87:2f:68:bd:64:a7:a9:25:37:60:
                    a3:33:30:5a:17:57:81:3a:a9:1f:8a:15:b6:93:1c:
                    bc:66:d2:62:28:e6:d7:b1:ae:72:b0:16:bd:74:3a:
                    fb:45:06:f0:c9:a8:2c:8a:7c:5f:88:e5:90:2b:d1:
                    48:9e:44:cd:f2:63:cd:1e:14:75:73:7c:0e:ec:27:
                    41:27:ff:79:2e:69:d7:aa:91:44:35:c9:a0:09:f2:
                    f2:9d:a4:69:69:02:e8:36:79:1b:94:77:de:05:20:
                    7c:00:af:f9:a6:fe:4b:dd:d0:dc:2b:56:42:f7:0d:
                    f3:5a:0b:77:47:46:a1:f6:bc:1e:57:95:16:10:76:
                    65:16:68:ef:02:02:8f:54:e1:f4:60:a8:0a:a5:ad:
                    42:6d:85:83:9d:a2:c7:26:64:8b:28:c4:29:6a:ee:
                    72:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4B:78:B0:17:EE:C6:50:4D:FF:71:3B:95:07:A4:3C:32:1B:0A:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/2a96e1c8-e510-35b1-b0ed-2f58569aac75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/845381b0-384a-4243-95e1-ae5dd9916fd7.crl

            X509v3 Authority Key Identifier:
                keyid:CB:FC:80:79:7D:34:80:E4:19:8F:0D:A6:8E:CB:C6:E2:03:D3:60:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:94:d3:95:31:f5:20:b7:7f:92:b0:ca:12:97:66:c0:38:a3:
         c0:be:2c:f4:59:6c:6c:be:33:d2:48:a1:79:6e:97:61:9c:56:
         87:eb:d9:be:f3:58:af:01:c5:16:70:1b:e9:b5:74:59:fe:0e:
         d1:78:0b:09:f4:85:7c:a8:c8:0c:c6:3c:55:7d:b4:7c:cb:d1:
         07:aa:5e:c3:3e:c3:f7:2e:8d:50:0a:b4:91:4c:45:b0:e7:5e:
         16:7b:62:e9:b2:88:88:27:8b:20:a6:71:81:7c:ad:79:6e:dc:
         1c:03:75:f2:70:65:57:aa:dd:17:18:d6:bf:0b:a2:aa:66:f7:
         55:94:71:6f:fd:ce:81:0b:c4:af:18:d8:ec:69:7b:3a:94:59:
         dc:07:e1:68:4f:50:7c:28:a9:26:0f:ec:61:0b:f4:bf:ce:32:
         b8:bd:de:82:38:d9:81:25:ff:c5:ea:54:bd:61:a7:d8:2c:cb:
         06:90:c6:9e:30:22:1c:cf:ec:9f:4b:d2:b3:e8:b8:b9:7a:4e:
         59:f7:52:63:d9:99:65:91:44:b8:d6:8a:09:5e:61:26:dd:6d:
         d4:d1:70:b8:93:4c:9b:3c:1e:2d:35:57:3b:b5:64:75:7d:52:
         ee:94:61:f7:55:80:3a:1f:67:f0:34:89:4d:a0:de:16:ad:7e:
         c1:cf:2b:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jhhrxYcl0VScvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQ1MzgxYjAtMzg0YS00MjQzLTk1ZTEtYWU1ZGQ5OTE2
ZmQ3MB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk
MzI5M2MzZTktYzIxMy00ZDY2LWIyYjktZWI3MjNjZDFjYjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+6KeBSaZv6W4UExKX6On/ITfNzwqLD6LAzY
ppmHN6fjWb++ff/vUQbv4dH67W0diZnVN1N7u2Bmenx13+hcrP3OZUMy9kIUELcf
J/AciEHWnPB+jX6kWQHRrElZ/YcvaL1kp6klN2CjMzBaF1eBOqkfihW2kxy8ZtJi
KObXsa5ysBa9dDr7RQbwyagsinxfiOWQK9FInkTN8mPNHhR1c3wO7CdBJ/95LmnX
qpFENcmgCfLynaRpaQLoNnkblHfeBSB8AK/5pv5L3dDcK1ZC9w3zWgt3R0ah9rwe
V5UWEHZlFmjvAgKPVOH0YKgKpa1CbYWDnaLHJmSLKMQpau5y+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE9LeLAX7sZQTf9xO5UHpDwyGwpeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84NDUz
ODFiMC0zODRhLTQyNDMtOTVlMS1hZTVkZDk5MTZmZDcvMmE5NmUxYzgtZTUxMC0z
NWIxLWIwZWQtMmY1ODU2OWFhYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODQ1MzgxYjAtMzg0YS00MjQzLTk1
ZTEtYWU1ZGQ5OTE2ZmQ3Lzg0NTM4MWIwLTM4NGEtNDI0My05NWUxLWFlNWRkOTkx
NmZkNy5jcmwwHwYDVR0jBBgwFoAUy/yAeX00gOQZjw2mjsvG4gPTYCkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84NDUzODFiMC0zODRhLTQyNDMtOTVlMS1hZTVk
ZDk5MTZmZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF544MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+U05Ux9SC3f5KwyhKXZsA4o8C+LPRZbGy+M9JIoXlul2GcVofr2b7z
WK8BxRZwG+m1dFn+DtF4Cwn0hXyoyAzGPFV9tHzL0QeqXsM+w/cujVAKtJFMRbDn
XhZ7YumyiIgniyCmcYF8rXlu3BwDdfJwZVeq3RcY1r8Loqpm91WUcW/9zoELxK8Y
2OxpezqUWdwH4WhPUHwoqSYP7GEL9L/OMri93oI42YEl/8XqVL1hp9gsywaQxp4w
IhzP7J9L0rPouLl6Tln3UmPZmWWRRLjWigleYSbdbdTRcLiTTJs8Hi01Vzu1ZHV9
Uu6UYfdVgDofZ/A0iU2g3hatfsHPK7Q=
-----END CERTIFICATE-----
Generated at Wed Apr 9 18:11:40 2025 by rpki-client