Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff742787-0cd8-3934-b70d-4dddd88f19e2.roa
File:                     ff742787-0cd8-3934-b70d-4dddd88f19e2.roa (raw, json)
Hash identifier:          HjYCZWLq43hCLFCXJfPIUUCxkCYeJa3VcGNTELYy15Y=
Subject key identifier:   ED:4F:FB:DA:BE:B3:BD:E6:EB:C7:10:55:72:DD:F3:47:29:07:E9:35
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848A1361D7D6DA76980E0B68D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff742787-0cd8-3934-b70d-4dddd88f19e2.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     14445
IP address blocks:        23.230.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:1d:7d:6d:a7:69:80:e0:b6:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=ecae86c1-10af-4b66-b0a2-a6f54fae1e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:01:21:f7:15:8f:fe:94:87:c3:65:73:a5:
                    8a:ea:a7:5f:38:13:b1:b2:11:12:86:99:13:f7:1c:
                    3a:4e:2c:5a:bd:4b:92:18:ad:eb:52:79:53:31:e9:
                    0b:cc:a9:1c:e7:b2:b4:2b:41:69:c9:db:c4:25:91:
                    2d:66:1e:9b:0a:97:73:5e:75:c3:d7:47:72:50:6a:
                    45:af:0b:42:06:6c:a0:7e:bf:9b:eb:ad:89:e6:b5:
                    eb:47:ad:8a:46:c7:bf:e1:54:9d:a4:d7:a3:d8:b2:
                    18:c7:b5:e6:28:62:1c:d7:fb:02:46:aa:dd:b3:fe:
                    88:e2:22:f1:15:38:58:79:ca:6b:15:e2:92:54:b6:
                    12:bf:4a:7e:ee:02:d3:ca:34:73:63:db:86:f8:e5:
                    b7:19:2d:7f:df:46:6e:fc:67:d3:10:26:e6:a2:06:
                    66:c4:ff:90:c7:19:22:5b:f8:37:af:1f:0f:43:71:
                    53:24:68:6a:6e:0b:6d:9e:ea:6e:e5:54:c7:ad:5a:
                    3b:ac:74:72:7d:7a:7c:50:4b:97:b1:3b:59:97:1e:
                    05:2a:ef:63:2d:c2:78:33:a4:3e:0f:4a:6b:28:48:
                    40:90:97:1c:22:8a:26:88:30:1b:e6:6f:89:93:7e:
                    b8:35:41:a6:99:9e:d6:eb:29:de:1e:65:97:7c:f9:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4F:FB:DA:BE:B3:BD:E6:EB:C7:10:55:72:DD:F3:47:29:07:E9:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff742787-0cd8-3934-b70d-4dddd88f19e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b2:d3:9a:06:ff:aa:a9:4e:3f:8c:20:5d:16:77:b9:f4:11:
         b4:61:27:45:4b:cb:3c:1a:a3:48:74:e2:94:7f:b1:dd:a4:f3:
         c0:ef:09:55:91:b8:83:f5:4b:2e:cf:18:26:2f:73:2b:e0:be:
         43:8d:b6:97:c6:95:8e:fe:cf:e8:d8:15:b3:39:10:f1:f0:8f:
         76:45:ee:b3:0f:bf:05:8f:c5:d0:cb:2c:7a:62:cb:f6:5b:5e:
         67:75:2d:2d:f1:b2:8f:b7:32:ba:73:d9:f1:f9:d8:f2:ff:86:
         01:b1:9a:a1:07:63:48:24:ce:14:49:12:d8:65:50:1e:ae:97:
         fb:30:e3:35:77:4d:65:ef:08:d0:9a:7e:59:c4:9b:74:9f:07:
         7f:a6:14:ff:c2:68:52:02:7b:b8:4b:74:e7:85:f0:cc:24:8b:
         4d:02:ec:d0:e7:6f:f7:ba:df:33:1e:0d:99:5f:0c:e3:16:c7:
         51:c8:92:b3:54:d7:0d:85:8a:4a:13:ce:8f:53:7d:91:4b:9a:
         31:fc:43:64:25:6b:82:0f:f4:13:f2:c3:4b:8e:ee:d9:54:61:
         67:6e:0b:1b:25:c7:37:c1:e9:40:33:76:63:e3:6c:0c:53:05:
         21:54:d8:ef:11:ea:97:39:0c:5f:e8:5e:25:90:14:99:6b:0a:
         de:06:bb:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNh19badpgOC2jQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
ZWNhZTg2YzEtMTBhZi00YjY2LWIwYTItYTZmNTRmYWUxZTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8EBIfcVj/6Uh8Nlc6WK6qdfOBOxshEShpkT
9xw6TixavUuSGK3rUnlTMekLzKkc57K0K0FpydvEJZEtZh6bCpdzXnXD10dyUGpF
rwtCBmygfr+b662J5rXrR62KRse/4VSdpNej2LIYx7XmKGIc1/sCRqrds/6I4iLx
FThYecprFeKSVLYSv0p+7gLTyjRzY9uG+OW3GS1/30Zu/GfTECbmogZmxP+Qxxki
W/g3rx8PQ3FTJGhqbgttnupu5VTHrVo7rHRyfXp8UEuXsTtZlx4FKu9jLcJ4M6Q+
D0prKEhAkJccIoomiDAb5m+Jk364NUGmmZ7W6yneHmWXfPlSxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1P+9q+s73m68cQVXLd80cpB+k1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZmY3NDI3ODctMGNkOC0z
OTM0LWI3MGQtNGRkZGQ4OGYxOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+ZWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIuy05oG/6qpTj+MIF0Wd7n0EbRhJ0VLyzwao0h04pR/sd2k88DvCVWR
uIP1Sy7PGCYvcyvgvkONtpfGlY7+z+jYFbM5EPHwj3ZF7rMPvwWPxdDLLHpiy/Zb
Xmd1LS3xso+3Mrpz2fH52PL/hgGxmqEHY0gkzhRJEthlUB6ul/sw4zV3TWXvCNCa
flnEm3SfB3+mFP/CaFICe7hLdOeF8Mwki00C7NDnb/e63zMeDZlfDOMWx1HIkrNU
1w2FikoTzo9TfZFLmjH8Q2Qla4IP9BPyw0uO7tlUYWduCxslxzfB6UAzdmPjbAxT
BSFU2O8R6pc5DF/oXiWQFJlrCt4Gu0k=
-----END CERTIFICATE-----
Generated at Sun Feb 9 15:13:02 2025 by rpki-client