Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31/153ef224-3573-3018-a34a-26038df17084.roa
File:                     153ef224-3573-3018-a34a-26038df17084.roa (raw, json)
Hash identifier:          xZaoDoQez9PSa3WfGvFcOjEUgEN2t/rhmxCdG/0GB9Y=
Subject key identifier:   FA:B3:19:FB:03:D0:29:4E:AF:48:23:C6:18:30:1E:41:66:14:55:5E
Certificate issuer:       /CN=f87263de-03f3-4ca8-b91e-c66fd2256e31
Certificate serial:       010D0C9F4328584A063319C72E183F6BA412C900
Authority key identifier: 87:51:79:C3:0A:FE:8E:F0:D2:87:15:56:A0:53:3B:7E:0E:35:4C:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31/153ef224-3573-3018-a34a-26038df17084.roa
Signing time:             Fri 30 May 2025 10:58:34 +0000
ROA not before:           Fri 30 May 2025 10:58:34 +0000
ROA not after:            Thu 28 Aug 2025 10:58:34 +0000
asID:                     37739
IP address blocks:        23.147.136.0/24 maxlen: 24
                          64.40.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31/f87263de-03f3-4ca8-b91e-c66fd2256e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31/f87263de-03f3-4ca8-b91e-c66fd2256e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:06:33:19:c7:2e:18:3f:6b:a4:12:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f87263de-03f3-4ca8-b91e-c66fd2256e31
        Validity
            Not Before: May 30 10:58:34 2025 GMT
            Not After : Aug 28 10:58:34 2025 GMT
        Subject: CN=c17d225d-97fc-47a5-b792-003fbb9f716d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5c:e7:50:02:92:e7:51:6d:ae:0c:0f:fe:b8:
                    5b:b0:14:59:d4:94:a6:99:e8:f4:9c:be:e9:a8:0a:
                    04:cf:45:55:d2:9a:8d:69:f1:d4:5f:2e:95:5c:1a:
                    3f:b9:6b:fc:e5:72:e6:3a:e0:ba:d9:80:40:74:84:
                    80:6e:93:13:42:89:02:d3:76:cf:3f:21:05:31:f1:
                    4e:bf:2e:47:91:9c:7e:12:8a:e4:a0:c5:63:1c:cc:
                    cf:dc:79:97:31:c9:e2:37:7b:10:43:7d:f8:97:64:
                    95:64:4f:08:50:14:bd:1c:5e:8e:86:39:e9:09:88:
                    07:e1:d7:a7:03:f6:03:98:63:5a:c3:b3:3e:2f:9e:
                    74:2f:9f:c6:ea:88:0f:3b:70:aa:d3:a5:37:86:d6:
                    1b:78:94:d0:51:06:4a:47:d6:0d:01:f7:a9:11:9f:
                    2c:71:8f:ab:8a:50:0d:df:c4:68:50:19:97:8a:14:
                    a9:59:64:76:92:77:2c:6f:0b:b6:90:95:f3:a4:64:
                    28:1b:46:a1:ba:35:4d:96:fc:c8:b8:91:7b:db:34:
                    c2:b8:3d:c0:89:22:5d:22:d1:c6:95:1f:81:c8:6f:
                    14:4e:27:fe:2a:2a:37:79:af:dd:7f:e7:98:fe:bc:
                    5c:7c:eb:98:6c:2d:fa:1d:83:eb:05:c4:ab:46:d3:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B3:19:FB:03:D0:29:4E:AF:48:23:C6:18:30:1E:41:66:14:55:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31/153ef224-3573-3018-a34a-26038df17084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31/f87263de-03f3-4ca8-b91e-c66fd2256e31.crl

            X509v3 Authority Key Identifier:
                keyid:87:51:79:C3:0A:FE:8E:F0:D2:87:15:56:A0:53:3B:7E:0E:35:4C:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.136.0/24
                  64.40.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:16:bb:b7:eb:eb:4f:13:5e:d7:b0:87:bf:f5:cb:b7:96:44:
         bd:23:ad:19:cd:1b:38:0a:93:2f:ab:9a:46:0d:d9:11:b9:2e:
         96:b4:f2:64:b4:b9:38:af:3d:83:ee:67:99:74:46:bb:dd:d5:
         91:e7:6b:9b:bd:aa:38:74:25:ea:bd:c9:b5:92:9a:01:bb:05:
         bd:52:2b:b1:09:50:cb:90:53:24:40:e6:9e:8a:ec:ef:f1:ad:
         ce:7e:e8:fc:25:55:25:c4:74:67:6a:01:b0:e8:93:ef:b4:a6:
         3f:6d:99:33:3a:28:31:3d:2c:45:09:33:25:c4:35:29:f5:d8:
         39:86:f1:50:33:1a:cd:0a:0e:73:9a:79:9e:89:51:75:8d:1a:
         2f:93:1b:70:74:39:7a:89:9c:6e:ef:a7:f4:8c:ae:bb:46:6c:
         f8:6d:c8:59:86:55:de:6e:a5:16:b9:8c:a5:3b:7d:b6:97:58:
         2e:76:35:9c:45:a2:1d:e4:fb:a6:37:88:b4:0a:ac:1d:b3:ba:
         55:02:18:dc:f0:f2:1a:26:fe:84:f1:94:cf:d7:13:65:0d:91:
         c5:9f:04:f1:5b:d7:5b:c4:e7:93:9d:c7:47:a7:ab:32:e8:0b:
         f9:10:8d:2a:42:a1:b9:ee:44:eb:99:cc:e8:4c:88:ed:27:d6:
         70:d9:b5:78
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoGMxnHLhg/a6QSyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MjYzZGUtMDNmMy00Y2E4LWI5MWUtYzY2ZmQyMjU2
ZTMxMB4XDTI1MDUzMDEwNTgzNFoXDTI1MDgyODEwNTgzNFowLzEtMCsGA1UEAxMk
YzE3ZDIyNWQtOTdmYy00N2E1LWI3OTItMDAzZmJiOWY3MTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1znUAKS51FtrgwP/rhbsBRZ1JSmmej0nL7p
qAoEz0VV0pqNafHUXy6VXBo/uWv85XLmOuC62YBAdISAbpMTQokC03bPPyEFMfFO
vy5HkZx+EorkoMVjHMzP3HmXMcniN3sQQ334l2SVZE8IUBS9HF6OhjnpCYgH4den
A/YDmGNaw7M+L550L5/G6ogPO3Cq06U3htYbeJTQUQZKR9YNAfepEZ8scY+rilAN
38RoUBmXihSpWWR2kncsbwu2kJXzpGQoG0ahujVNlvzIuJF72zTCuD3AiSJdItHG
lR+ByG8UTif+Kio3ea/df+eY/rxcfOuYbC36HYPrBcSrRtPjywIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFPqzGfsD0ClOr0gjxhgwHkFmFFVeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mODcy
NjNkZS0wM2YzLTRjYTgtYjkxZS1jNjZmZDIyNTZlMzEvMTUzZWYyMjQtMzU3My0z
MDE4LWEzNGEtMjYwMzhkZjE3MDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjg3MjYzZGUtMDNmMy00Y2E4LWI5
MWUtYzY2ZmQyMjU2ZTMxL2Y4NzI2M2RlLTAzZjMtNGNhOC1iOTFlLWM2NmZkMjI1
NmUzMS5jcmwwHwYDVR0jBBgwFoAUh1F5wwr+jvDShxVWoFM7fg41TAowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mODcyNjNkZS0wM2YzLTRjYTgtYjkxZS1jNjZm
ZDIyNTZlMzEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF5OIAwQC
QCjEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFQWu7fr608TXtewh7/1y7eWRL0jrRnNGzgKky+rmkYN2RG5
Lpa08mS0uTivPYPuZ5l0Rrvd1ZHna5u9qjh0Jeq9ybWSmgG7Bb1SK7EJUMuQUyRA
5p6K7O/xrc5+6PwlVSXEdGdqAbDok++0pj9tmTM6KDE9LEUJMyXENSn12DmG8VAz
Gs0KDnOaeZ6JUXWNGi+TG3B0OXqJnG7vp/SMrrtGbPhtyFmGVd5upRa5jKU7fbaX
WC52NZxFoh3k+6Y3iLQKrB2zulUCGNzw8hom/oTxlM/XE2UNkcWfBPFb11vE55Od
x0enqzLoC/kQjSpCobnuROuZzOhMiO0n1nDZtXg=
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:48:54 2025 by rpki-client