Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/b6bdc6ff-ac51-300f-8948-308bb0783629.roa
File:                     b6bdc6ff-ac51-300f-8948-308bb0783629.roa (raw, json)
Hash identifier:          9bY+Ws4YfVlG7RCN7nKGFpaTmpo5eVPcMQyUWGaazRE=
Subject key identifier:   E5:CC:80:63:69:66:6D:CA:D4:EB:7B:DD:DE:AE:4D:81:2C:21:7E:B9
Certificate issuer:       /CN=daef5cc1-9697-4016-a7b1-84106520128a
Certificate serial:       010D0C9F4328584902EC172C45564906AC31DB80
Authority key identifier: 53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/b6bdc6ff-ac51-300f-8948-308bb0783629.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     36318
IP address blocks:        23.160.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:17:2c:45:56:49:06:ac:31:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daef5cc1-9697-4016-a7b1-84106520128a
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=1b91854f-051d-4a54-9c1a-5ad3ce8f992e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b1:f3:7e:53:38:8a:8d:fc:f6:ba:99:70:dd:
                    aa:11:54:ac:88:f4:15:63:8c:7c:30:13:9e:82:44:
                    55:4b:27:4b:8d:83:46:76:56:7f:23:58:75:29:10:
                    8d:2a:82:78:94:7f:73:73:1f:79:28:dd:02:fa:24:
                    6a:79:77:4c:10:16:b4:43:4a:dc:e3:3c:14:8e:34:
                    dc:ad:4e:b8:c2:27:a0:40:91:88:ba:c3:95:1e:0a:
                    bd:92:92:58:3f:40:3e:5d:a9:c7:6d:2f:6d:f0:64:
                    aa:e3:b6:a5:2f:d6:1e:7b:5e:10:55:06:13:df:22:
                    d2:9d:82:f6:22:8a:e4:58:34:4b:67:93:53:eb:8a:
                    b8:ce:2e:75:1e:ce:eb:9d:32:be:34:55:8c:e4:a0:
                    01:79:e8:53:76:14:bd:de:9a:43:a3:7e:cc:a0:d3:
                    ea:01:e6:20:44:e7:bc:58:f5:a9:e8:47:e0:f1:7e:
                    ba:b3:6f:5a:ac:e4:ce:d9:18:f9:7e:18:43:d2:eb:
                    78:fc:f3:fb:49:22:36:c8:7f:a7:f8:2c:4b:dd:9d:
                    17:ac:85:89:6b:ac:22:a0:88:d4:82:5c:ff:47:96:
                    e6:3f:53:5a:0d:be:56:b1:1c:28:6f:f9:0e:f8:2c:
                    53:36:1a:5f:73:40:6d:64:1e:12:a8:37:ec:02:fb:
                    a9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CC:80:63:69:66:6D:CA:D4:EB:7B:DD:DE:AE:4D:81:2C:21:7E:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/b6bdc6ff-ac51-300f-8948-308bb0783629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl

            X509v3 Authority Key Identifier:
                keyid:53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:d4:8f:cc:9e:cb:f2:93:45:f8:b3:f0:ea:85:4f:79:f3:73:
         9b:45:f6:0d:06:22:e4:90:23:c0:46:53:4c:83:1b:99:c8:34:
         3a:90:21:ef:91:20:9c:c8:07:7c:11:8f:6c:9f:75:e8:43:a2:
         b2:28:a0:8c:87:30:64:49:a0:66:d3:48:ea:7a:5e:3c:fe:ff:
         59:a7:fa:95:5b:80:e9:32:97:96:72:06:28:6b:48:7c:3b:17:
         ee:bb:1f:43:b5:ed:2f:fc:a5:c4:34:42:e0:95:81:6b:65:1e:
         5a:25:85:17:05:ed:44:3c:33:fb:b9:53:17:ee:48:37:f6:fb:
         db:d0:c9:81:69:e8:87:5a:89:e8:5e:d4:59:40:09:5c:c4:c6:
         3a:c0:5e:4d:d0:f5:51:e8:7d:2f:e2:45:bf:87:d7:22:45:c4:
         fc:da:17:e3:3e:e8:79:8c:ff:4a:d5:c0:c6:13:d8:f4:19:ee:
         20:6d:36:fc:96:07:c2:56:2d:2f:40:1c:a0:e2:b2:d0:13:7c:
         8a:55:e4:14:bc:04:4f:08:ce:af:e8:85:ff:73:ce:4b:c9:1b:
         38:56:d8:b3:f7:30:3f:b9:92:99:0e:bc:c6:55:e4:69:1b:17:
         4f:ad:41:39:85:1e:6f:02:63:fc:48:8c:4b:56:12:75:b7:ad:
         29:33:51:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BcsRVZJBqwx24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGFlZjVjYzEtOTY5Ny00MDE2LWE3YjEtODQxMDY1MjAx
MjhhMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
MWI5MTg1NGYtMDUxZC00YTU0LTljMWEtNWFkM2NlOGY5OTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7HzflM4io389rqZcN2qEVSsiPQVY4x8MBOe
gkRVSydLjYNGdlZ/I1h1KRCNKoJ4lH9zcx95KN0C+iRqeXdMEBa0Q0rc4zwUjjTc
rU64wiegQJGIusOVHgq9kpJYP0A+XanHbS9t8GSq47alL9Yee14QVQYT3yLSnYL2
IorkWDRLZ5NT64q4zi51Hs7rnTK+NFWM5KABeehTdhS93ppDo37MoNPqAeYgROe8
WPWp6Efg8X66s29arOTO2Rj5fhhD0ut4/PP7SSI2yH+n+CxL3Z0XrIWJa6wioIjU
glz/R5bmP1NaDb5WsRwob/kO+CxTNhpfc0BtZB4SqDfsAvupPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOXMgGNpZm3K1Ot73d6uTYEsIX65MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYWVm
NWNjMS05Njk3LTQwMTYtYTdiMS04NDEwNjUyMDEyOGEvYjZiZGM2ZmYtYWM1MS0z
MDBmLTg5NDgtMzA4YmIwNzgzNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGFlZjVjYzEtOTY5Ny00MDE2LWE3
YjEtODQxMDY1MjAxMjhhL2RhZWY1Y2MxLTk2OTctNDAxNi1hN2IxLTg0MTA2NTIw
MTI4YS5jcmwwHwYDVR0jBBgwFoAUU5ElfGQKg+eUefKE5srTZ00KJZAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYWVmNWNjMS05Njk3LTQwMTYtYTdiMS04NDEw
NjUyMDEyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6BYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJvUj8yey/KTRfiz8OqFT3nzc5tF9g0GIuSQI8BGU0yDG5nINDqQIe+R
IJzIB3wRj2yfdehDorIooIyHMGRJoGbTSOp6Xjz+/1mn+pVbgOkyl5ZyBihrSHw7
F+67H0O17S/8pcQ0QuCVgWtlHlolhRcF7UQ8M/u5UxfuSDf2+9vQyYFp6Idaiehe
1FlACVzExjrAXk3Q9VHofS/iRb+H1yJFxPzaF+M+6HmM/0rVwMYT2PQZ7iBtNvyW
B8JWLS9AHKDistATfIpV5BS8BE8Izq/ohf9zzkvJGzhW2LP3MD+5kpkOvMZV5Gkb
F0+tQTmFHm8CY/xIjEtWEnW3rSkzUZs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:49:00 2025 by rpki-client