Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d3b1a9c-fdb0-3b35-8ad3-7199186808f9.roa
File:                     2d3b1a9c-fdb0-3b35-8ad3-7199186808f9.roa (raw, json)
Hash identifier:          IMOo/D2DCaKMXjlNWIH95Rwbpbevrvw14vMU0WKF6A8=
Subject key identifier:   F0:8C:C0:4B:9D:E9:3F:A7:82:D7:68:D3:6F:D2:82:4D:39:2F:65:8F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858488E0C073B7DB3EB0989FA5D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d3b1a9c-fdb0-3b35-8ad3-7199186808f9.roa
Signing time:             Wed 15 Jan 2025 17:15:54 +0000
ROA not before:           Wed 15 Jan 2025 17:15:54 +0000
ROA not after:            Tue 15 Apr 2025 16:15:54 +0000
asID:                     214238
IP address blocks:        23.230.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8e:0c:07:3b:7d:b3:eb:09:89:fa:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 15 17:15:54 2025 GMT
            Not After : Apr 15 16:15:54 2025 GMT
        Subject: CN=beb2f766-7134-42a2-bdfb-bfb87c140aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e8:da:ac:b2:47:e7:1e:f0:3b:4a:e4:72:e7:
                    e4:d3:59:1d:ae:92:b4:99:ed:ff:b9:7c:ed:93:6b:
                    98:8a:63:fa:55:bb:b7:31:96:58:5e:80:60:88:72:
                    e1:04:ee:e4:35:59:46:9a:c3:52:04:47:6b:50:ab:
                    93:11:5c:3d:18:77:b2:cc:a4:08:66:11:0b:14:f2:
                    77:54:ac:46:50:d2:74:67:98:1d:4e:4a:4f:05:e1:
                    f1:9e:1a:09:7d:f8:08:36:d9:4b:54:3e:bd:ea:fa:
                    ec:e0:d0:ce:12:04:fe:14:a5:d6:ff:86:a1:02:c2:
                    d1:4b:5e:8f:9b:f6:cc:1d:50:5c:a1:b1:fa:a4:e1:
                    8e:32:b2:a7:84:44:fa:47:56:7b:78:0b:32:d6:7b:
                    04:a4:8d:3d:2c:2e:9c:27:ed:2c:ec:15:c3:f6:52:
                    9f:88:ae:a9:a6:22:71:80:f4:50:7e:9a:52:d9:a9:
                    d9:fa:74:c3:f4:17:e5:3b:a7:e5:14:3a:db:0a:35:
                    05:8e:02:78:fa:00:d1:7b:a0:07:20:cb:86:fd:49:
                    7e:52:89:4f:48:9d:f8:a2:fc:96:9c:a8:1a:33:61:
                    e5:ba:a8:40:20:b0:a1:d7:83:4a:38:98:a9:94:db:
                    ca:88:5b:f9:77:f1:21:99:a0:87:da:cc:6d:7b:ed:
                    3a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8C:C0:4B:9D:E9:3F:A7:82:D7:68:D3:6F:D2:82:4D:39:2F:65:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d3b1a9c-fdb0-3b35-8ad3-7199186808f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:de:72:59:0f:aa:4c:a6:06:ac:46:cd:1e:32:09:a4:4e:6f:
         93:b6:b6:f4:da:25:22:2c:49:96:d5:92:4c:4e:5c:ab:c2:bb:
         6c:cf:2f:28:56:7d:1d:33:31:dc:02:dc:5b:8a:c9:1c:24:9d:
         90:5d:ed:1a:d2:1e:6d:b1:87:b2:e7:cc:7c:9f:45:06:bb:cc:
         b9:25:0c:a0:d4:35:a4:71:41:00:cf:14:c0:7e:e1:d9:46:ce:
         66:9c:6f:08:93:f4:e6:09:d4:4e:0e:36:ab:4f:ae:cb:09:91:
         7e:cc:f2:78:3e:13:74:ed:12:7f:6a:e3:be:c1:fe:0d:6e:6c:
         c2:02:ed:b8:9a:eb:86:af:a6:2c:b7:59:71:f0:3a:74:97:60:
         fd:e7:b5:d7:ff:24:19:dd:2a:4a:85:25:da:f9:9a:95:0a:db:
         07:7b:ba:8a:f4:1b:33:5c:b5:05:10:05:05:66:10:6d:7f:ce:
         d1:fa:f9:3d:9c:2a:e7:a3:b5:b6:4e:1f:0d:11:c3:ac:a5:4f:
         4a:38:03:0e:3a:54:33:48:4e:d2:64:1c:3c:f2:78:84:25:5a:
         6e:e3:8f:51:05:1a:a8:67:ba:ec:42:76:11:55:10:22:d8:87:
         42:e8:91:a1:1a:99:86:b6:63:32:2e:39:2e:2f:38:04:e0:a0:
         5a:f1:7d:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiODAc7fbPrCYn6XQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDExNTE3MTU1NFoXDTI1MDQxNTE2MTU1NFowLzEtMCsGA1UEAxMk
YmViMmY3NjYtNzEzNC00MmEyLWJkZmItYmZiODdjMTQwYWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOjarLJH5x7wO0rkcufk01kdrpK0me3/uXzt
k2uYimP6Vbu3MZZYXoBgiHLhBO7kNVlGmsNSBEdrUKuTEVw9GHeyzKQIZhELFPJ3
VKxGUNJ0Z5gdTkpPBeHxnhoJffgINtlLVD696vrs4NDOEgT+FKXW/4ahAsLRS16P
m/bMHVBcobH6pOGOMrKnhET6R1Z7eAsy1nsEpI09LC6cJ+0s7BXD9lKfiK6ppiJx
gPRQfppS2anZ+nTD9BflO6flFDrbCjUFjgJ4+gDRe6AHIMuG/Ul+UolPSJ34ovyW
nKgaM2HluqhAILCh14NKOJiplNvKiFv5d/EhmaCH2sxte+060QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCMwEud6T+ngtdo02/Sgk05L2WPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmQzYjFhOWMtZmRiMC0z
YjM1LThhZDMtNzE5OTE4NjgwOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+aZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADeclkPqkymBqxGzR4yCaROb5O2tvTaJSIsSZbVkkxOXKvCu2zPLyhW
fR0zMdwC3FuKyRwknZBd7RrSHm2xh7LnzHyfRQa7zLklDKDUNaRxQQDPFMB+4dlG
zmacbwiT9OYJ1E4ONqtPrssJkX7M8ng+E3TtEn9q477B/g1ubMIC7bia64avpiy3
WXHwOnSXYP3ntdf/JBndKkqFJdr5mpUK2wd7uor0GzNctQUQBQVmEG1/ztH6+T2c
KuejtbZOHw0Rw6ylT0o4Aw46VDNITtJkHDzyeIQlWm7jj1EFGqhnuuxCdhFVECLY
h0LokaEamYa2YzIuOS4vOATgoFrxfYk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:36:08 2025 by rpki-client