Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/e23be030-470c-3c12-b4e7-b4b9a0759547.roa
File:                     e23be030-470c-3c12-b4e7-b4b9a0759547.roa (raw, json)
Hash identifier:          wVX4SgI8PMfAgJeb1pZMWIZlwRLCHs4V+rcSXjGLfH0=
Subject key identifier:   4F:B4:62:B6:EC:AC:5C:16:BC:59:3E:91:8F:7B:6A:17:7F:6C:DC:E0
Certificate issuer:       /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
Certificate serial:       010D0C9F4328584843B00723373EE5B6BD29E000
Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/e23be030-470c-3c12-b4e7-b4b9a0759547.roa
Signing time:             Fri 20 Dec 2024 02:00:40 +0000
ROA not before:           Fri 20 Dec 2024 02:00:40 +0000
ROA not after:            Thu 20 Mar 2025 01:00:40 +0000
asID:                     64289
IP address blocks:        206.71.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:43:b0:07:23:37:3e:e5:b6:bd:29:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
        Validity
            Not Before: Dec 20 02:00:40 2024 GMT
            Not After : Mar 20 01:00:40 2025 GMT
        Subject: CN=4ee18d1a-2494-4974-9317-d9156d03368b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:fb:77:4e:67:0d:e1:7a:ba:40:54:0f:c7:
                    91:89:a0:c1:14:67:65:49:dd:ed:5c:09:f6:53:3f:
                    d4:c7:e1:b9:f3:88:06:23:99:c3:f4:fd:5b:5c:8b:
                    30:d3:a3:e7:4a:cf:24:9f:95:48:c4:35:20:f7:2b:
                    57:93:cd:c4:16:6b:4c:11:84:20:46:b8:b9:39:7b:
                    5a:de:c9:25:8c:64:64:e9:98:66:cf:e8:b7:7d:16:
                    24:a2:ee:97:f7:26:68:20:4f:40:e1:88:53:fb:70:
                    4b:e5:ed:90:05:40:83:cf:82:c2:e2:ce:71:13:1a:
                    f1:29:5e:df:cd:b5:c6:6c:7e:6d:b6:13:7a:c6:fc:
                    a5:cc:39:e1:26:57:b1:65:f6:70:6c:7e:12:c0:7e:
                    de:c6:88:8e:6c:70:86:38:82:dd:c4:10:25:83:d9:
                    bf:f3:9f:e8:9e:e5:25:68:27:f9:b7:77:f8:d4:2a:
                    d7:d8:45:7c:57:49:af:5c:6a:8e:b4:e8:66:41:04:
                    d3:ae:d4:cd:a1:c8:2f:e3:7a:eb:73:66:b2:3c:e5:
                    cf:2c:86:39:fc:3a:95:d0:53:80:63:f3:09:cb:74:
                    12:ee:cd:89:cb:17:f7:cf:9c:87:2e:16:f7:74:5d:
                    f7:d6:7c:66:dd:38:fc:99:d3:c0:9d:ec:dd:d1:ac:
                    f5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B4:62:B6:EC:AC:5C:16:BC:59:3E:91:8F:7B:6A:17:7F:6C:DC:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/e23be030-470c-3c12-b4e7-b4b9a0759547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl

            X509v3 Authority Key Identifier:
                keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:14:a5:22:0c:d0:47:d7:28:75:3a:3a:2e:bf:89:76:bb:80:
         92:1c:a0:42:21:70:a2:15:cb:c9:d1:38:95:10:6f:cd:ae:13:
         dd:f3:90:0f:f4:07:92:86:24:df:48:a6:1e:7b:73:67:9d:89:
         74:39:1e:f9:52:ce:97:d4:a6:2b:0f:5f:cd:64:ad:a8:2c:8a:
         ce:6a:b9:4e:89:8d:c5:42:aa:24:a8:92:db:b4:26:87:89:8b:
         74:80:2e:2f:cd:12:9d:e2:de:f3:a0:24:cc:6b:a0:9a:30:b4:
         c3:04:e0:b8:71:61:c7:42:f5:93:3c:f1:f7:30:8d:4c:9c:b3:
         8f:22:f4:ec:07:7a:c6:50:5e:cb:46:00:b6:de:92:28:66:4f:
         47:20:da:21:76:b8:ac:6d:5e:be:31:9e:78:5a:64:92:93:d6:
         ba:82:f4:16:51:69:42:58:7a:c9:90:2f:29:41:df:26:84:24:
         45:b2:3b:37:67:11:00:d8:0e:ee:18:d4:ad:18:da:00:ee:61:
         2a:63:ce:b0:b4:d2:2b:54:3d:0d:2e:96:d5:c4:b3:c0:cc:58:
         3e:99:5b:ba:f3:75:15:24:d4:49:cb:8b:79:cf:81:7b:a4:6d:
         2c:8c:51:5c:43:e9:eb:fb:22:1f:69:19:b3:01:55:92:38:39:
         9b:56:a6:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhDsAcjNz7ltr0p4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIzYmMwN2QtNTRjNi00MTVmLTlkYzEtYzFhMjA5ZjJk
MDgwMB4XDTI0MTIyMDAyMDA0MFoXDTI1MDMyMDAxMDA0MFowLzEtMCsGA1UEAxMk
NGVlMThkMWEtMjQ5NC00OTc0LTkzMTctZDkxNTZkMDMzNjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsav7d05nDeF6ukBUD8eRiaDBFGdlSd3tXAn2
Uz/Ux+G584gGI5nD9P1bXIsw06PnSs8kn5VIxDUg9ytXk83EFmtMEYQgRri5OXta
3skljGRk6Zhmz+i3fRYkou6X9yZoIE9A4YhT+3BL5e2QBUCDz4LC4s5xExrxKV7f
zbXGbH5tthN6xvylzDnhJlexZfZwbH4SwH7exoiObHCGOILdxBAlg9m/85/onuUl
aCf5t3f41CrX2EV8V0mvXGqOtOhmQQTTrtTNocgv43rrc2ayPOXPLIY5/DqV0FOA
Y/MJy3QS7s2Jyxf3z5yHLhb3dF331nxm3Tj8mdPAnezd0az1fQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE+0YrbsrFwWvFk+kY97ahd/bNzgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNi
YzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlmMmQwODAvZTIzYmUwMzAtNDcwYy0z
YzEyLWI0ZTctYjRiOWEwNzU5NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIzYmMwN2QtNTRjNi00MTVmLTlk
YzEtYzFhMjA5ZjJkMDgwL2EyM2JjMDdkLTU0YzYtNDE1Zi05ZGMxLWMxYTIwOWYy
ZDA4MC5jcmwwHwYDVR0jBBgwFoAUMw3RU/41EgfdV4opG2vmF9scWPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEy
MDlmMmQwODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzkeeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQUpSIM0EfXKHU6Oi6/iXa7gJIcoEIhcKIVy8nROJUQb82uE93zkA/0
B5KGJN9Iph57c2ediXQ5HvlSzpfUpisPX81kragsis5quU6JjcVCqiSoktu0JoeJ
i3SALi/NEp3i3vOgJMxroJowtMME4LhxYcdC9ZM88fcwjUycs48i9OwHesZQXstG
ALbekihmT0cg2iF2uKxtXr4xnnhaZJKT1rqC9BZRaUJYesmQLylB3yaEJEWyOzdn
EQDYDu4Y1K0Y2gDuYSpjzrC00itUPQ0ultXEs8DMWD6ZW7rzdRUk1EnLi3nPgXuk
bSyMUVxD6ev7Ih9pGbMBVZI4OZtWppc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:54 2025 by rpki-client