Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d0ee3b7e-8791-318c-a0af-42cde9f9f239.roa
File:                     d0ee3b7e-8791-318c-a0af-42cde9f9f239.roa (raw, json)
Hash identifier:          +cz1HIS/Aa6PT5XE8J3OxPYRC+oq8Ow0DM3yoNFIWEA=
Subject key identifier:   37:70:7F:F6:5C:29:CF:E1:D1:B5:14:26:CC:FC:AC:87:4F:F8:E3:E6
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F43285848EF616499ECA0FE80FD8C9120
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d0ee3b7e-8791-318c-a0af-42cde9f9f239.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     398493
IP address blocks:        23.161.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:64:99:ec:a0:fe:80:fd:8c:91:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=a68b4613-ae6f-44c9-a6e4-e3402f62fd47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:54:81:27:d6:20:25:55:5b:7b:bd:be:ff:1c:
                    9c:b8:7f:4d:63:60:b2:14:6d:3b:a7:e5:d5:d8:88:
                    cc:3f:ea:3b:7f:0e:d1:5d:a4:4b:89:a2:12:2e:60:
                    2c:7a:37:b2:b7:54:e1:07:8e:f1:99:67:90:51:4b:
                    3a:9d:e9:b2:9f:b6:68:9a:ad:80:da:d5:11:a4:5c:
                    4d:b1:ac:26:9d:60:f5:ce:9d:f1:73:3c:41:39:63:
                    10:76:64:e0:99:b6:1a:93:56:97:ed:d5:5f:3b:9e:
                    14:10:97:c4:e0:57:18:35:1a:1b:49:3f:71:6a:0d:
                    b5:84:42:cb:5f:11:39:ef:af:7b:39:a2:89:1a:2e:
                    b8:78:a9:02:ea:1f:fb:cd:8b:cc:d7:f8:ef:fa:61:
                    6f:9b:b4:76:af:55:c6:bb:5a:1d:7c:8a:97:13:47:
                    78:11:7e:ec:72:0b:f1:28:c7:18:2d:79:5b:5b:d7:
                    4f:d8:73:b9:94:62:02:95:97:00:18:ce:a9:ce:37:
                    04:5d:ae:46:88:f2:1a:78:44:f5:3a:91:79:ac:6d:
                    88:8c:ce:b7:cf:0b:4b:d1:39:c7:b6:7c:61:3a:be:
                    8b:b3:8c:55:a6:f8:8c:10:1c:43:7d:ba:54:4e:e7:
                    d9:cd:66:4a:72:6a:6b:d1:77:c9:f7:68:24:34:2d:
                    9c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:70:7F:F6:5C:29:CF:E1:D1:B5:14:26:CC:FC:AC:87:4F:F8:E3:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d0ee3b7e-8791-318c-a0af-42cde9f9f239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:33:1c:f6:0a:cd:81:79:87:82:55:97:a6:e1:a3:5d:36:d6:
         03:18:bb:b1:b6:12:11:59:26:58:59:06:de:6b:46:f2:d9:e8:
         cc:b2:a1:8b:d6:30:d3:25:5e:04:e1:58:e2:80:71:ec:96:df:
         08:fe:c3:58:05:94:59:9e:91:ec:99:5e:66:c7:fa:89:6c:d1:
         69:b2:c3:15:08:32:d4:14:82:cd:6f:e3:58:6a:dc:01:76:2a:
         36:aa:20:c6:01:de:c3:be:eb:49:6e:79:58:19:df:9a:33:2a:
         40:1c:16:6a:6d:93:b3:f8:b6:44:7c:e5:2c:5e:8e:db:de:90:
         db:8f:44:ba:74:66:7d:2d:c6:6a:96:a3:fc:cd:5c:31:84:32:
         b3:ed:c3:c9:11:1d:11:e9:33:60:d4:06:84:6c:b4:4b:ea:cd:
         3f:27:0d:45:49:df:80:d4:56:89:3d:63:75:76:ea:36:dd:0b:
         23:13:7c:07:eb:8b:01:2f:97:14:1e:e3:78:f0:dd:5c:7e:e5:
         96:0b:7f:8f:5d:49:eb:95:4c:44:b2:44:a1:eb:b9:92:0d:2e:
         a4:b6:a3:1b:d8:dd:a6:de:32:ba:3d:42:08:a2:90:20:6b:bc:
         b8:28:8d:75:4d:14:5b:ac:c2:26:cc:c6:ab:84:d5:e1:5e:eb:
         ac:1b:49:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWSZ7KD+gP2MkSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGVkZWM1NzYtODdkMC00ZWM2LTllMTMtMzk0MjMwOTk2
ZTUzMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
YTY4YjQ2MTMtYWU2Zi00NGM5LWE2ZTQtZTM0MDJmNjJmZDQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFSBJ9YgJVVbe72+/xycuH9NY2CyFG07p+XV
2IjMP+o7fw7RXaRLiaISLmAsejeyt1ThB47xmWeQUUs6nemyn7Zomq2A2tURpFxN
sawmnWD1zp3xczxBOWMQdmTgmbYak1aX7dVfO54UEJfE4FcYNRobST9xag21hELL
XxE57697OaKJGi64eKkC6h/7zYvM1/jv+mFvm7R2r1XGu1odfIqXE0d4EX7scgvx
KMcYLXlbW9dP2HO5lGIClZcAGM6pzjcEXa5GiPIaeET1OpF5rG2IjM63zwtL0TnH
tnxhOr6Ls4xVpviMEBxDfbpUTufZzWZKcmpr0XfJ92gkNC2cSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdwf/ZcKc/h0bUUJsz8rIdP+OPmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZWRl
YzU3Ni04N2QwLTRlYzYtOWUxMy0zOTQyMzA5OTZlNTMvZDBlZTNiN2UtODc5MS0z
MThjLWEwYWYtNDJjZGU5ZjlmMjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGVkZWM1NzYtODdkMC00ZWM2LTll
MTMtMzk0MjMwOTk2ZTUzLzBlZGVjNTc2LTg3ZDAtNGVjNi05ZTEzLTM5NDIzMDk5
NmU1My5jcmwwHwYDVR0jBBgwFoAUVVR18A9v9kbDTjKoTV/FyuaYCIcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZWRlYzU3Ni04N2QwLTRlYzYtOWUxMy0zOTQy
MzA5OTZlNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6FwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMszHPYKzYF5h4JVl6bho1021gMYu7G2EhFZJlhZBt5rRvLZ6MyyoYvW
MNMlXgThWOKAceyW3wj+w1gFlFmekeyZXmbH+ols0WmywxUIMtQUgs1v41hq3AF2
KjaqIMYB3sO+60lueVgZ35ozKkAcFmptk7P4tkR85SxejtvekNuPRLp0Zn0txmqW
o/zNXDGEMrPtw8kRHRHpM2DUBoRstEvqzT8nDUVJ34DUVok9Y3V26jbdCyMTfAfr
iwEvlxQe43jw3Vx+5ZYLf49dSeuVTESyRKHruZINLqS2oxvY3abeMro9QgiikCBr
vLgojXVNFFuswibMxquE1eFe66wbSeM=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:58:55 2025 by rpki-client