Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1f4fa054-5b55-3502-aeef-38673b6dda28.roa
File:                     1f4fa054-5b55-3502-aeef-38673b6dda28.roa (raw, json)
Hash identifier:          c1wQ1CnKmT9a9a095liVrz66WgjkeYNx3okW7QYo1d8=
Subject key identifier:   1E:1F:DE:EE:65:68:3B:A0:A5:42:85:67:C2:4A:EA:25:BB:EC:E0:C5
Certificate issuer:       /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial:       010D0C9F43285849DDF4D6F793E043C3EBBD7980
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1f4fa054-5b55-3502-aeef-38673b6dda28.roa
Signing time:             Fri 16 May 2025 01:00:46 +0000
ROA not before:           Fri 16 May 2025 01:00:46 +0000
ROA not after:            Thu 14 Aug 2025 01:00:46 +0000
asID:                     19905
IP address blocks:        23.128.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dd:f4:d6:f7:93:e0:43:c3:eb:bd:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
        Validity
            Not Before: May 16 01:00:46 2025 GMT
            Not After : Aug 14 01:00:46 2025 GMT
        Subject: CN=6131c6d3-45ad-4719-9e0d-817813d34787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:ef:13:61:bf:d1:b9:23:6d:7f:7e:a1:81:
                    18:e3:e9:45:0f:fc:99:b6:40:66:f3:6d:ff:9e:77:
                    be:87:62:2c:f0:dd:23:70:bf:9a:2b:6b:0c:7d:40:
                    66:01:f8:76:3a:33:60:54:bb:10:76:32:8d:0c:f0:
                    ae:17:0c:20:b5:55:47:2f:a8:e8:2a:16:9c:62:aa:
                    cb:8b:58:bb:38:1a:86:00:a8:b2:e1:e0:61:5a:4d:
                    2b:50:e5:64:09:9e:f5:52:b3:ca:c2:ad:a9:9c:90:
                    55:ae:c7:00:a8:cf:6f:7a:12:01:af:6a:94:c5:e0:
                    8a:17:29:e7:dd:4b:10:c4:03:b2:e3:2e:3e:87:a3:
                    8d:64:92:0b:8d:d5:c6:51:c7:e3:e4:3e:f6:94:05:
                    68:5d:63:2e:39:e7:88:f5:9a:7e:75:bf:e4:c0:a6:
                    6c:7c:6b:4d:db:10:5a:39:13:f6:68:ee:c3:31:ed:
                    d5:ae:52:55:44:3e:e7:3a:58:f4:fa:55:1c:1b:47:
                    9d:79:8b:71:44:a6:90:60:4f:7d:45:94:d3:d5:78:
                    2b:4b:a0:26:20:33:59:8f:5d:77:08:22:6a:59:f8:
                    83:67:5c:05:83:31:b5:0b:22:23:4f:87:06:04:48:
                    d5:13:a0:68:d5:de:89:a9:60:7d:4a:0c:93:63:0d:
                    e3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1F:DE:EE:65:68:3B:A0:A5:42:85:67:C2:4A:EA:25:BB:EC:E0:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1f4fa054-5b55-3502-aeef-38673b6dda28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl

            X509v3 Authority Key Identifier:
                keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:eb:92:d8:03:d1:24:4a:9d:b0:99:64:2d:03:98:a4:96:ca:
         20:f3:bb:77:f9:a8:67:2b:95:81:06:71:21:63:b2:1b:75:af:
         9c:69:d0:be:45:fc:d0:30:59:0b:6b:70:ab:ce:88:dd:7b:31:
         0b:75:a8:b5:6d:80:12:bf:7e:35:81:d4:68:1f:18:9f:0c:88:
         13:cd:f6:ba:3e:da:b3:b4:ad:d4:20:c0:a0:1b:7a:95:da:be:
         e3:65:cf:6e:3d:6d:92:17:98:7f:99:9a:e6:8f:97:93:bd:fd:
         6f:b3:da:be:3b:bf:c3:b1:4a:52:6d:13:45:97:68:66:2e:1c:
         37:39:14:0a:c6:5e:e0:5b:6d:c3:65:23:b0:34:d6:85:55:24:
         19:a0:89:45:43:3a:6c:8b:0a:b4:6c:15:b5:fa:ca:fb:cf:41:
         47:cc:e6:a2:36:c2:ad:14:88:23:eb:9e:10:e7:50:e0:70:fe:
         1b:3f:b0:3e:29:1e:4c:a8:1b:83:80:04:c5:c5:06:24:0b:72:
         96:49:45:6c:46:ce:1d:86:26:85:96:dd:3b:c9:14:83:38:d6:
         e6:fa:08:4e:7a:ed:6c:0d:07:54:2b:eb:c0:23:3e:43:01:6c:
         ff:04:32:09:4f:de:b7:56:9d:83:c7:70:65:9c:88:2c:49:f4:
         e2:24:7a:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnd9Nb3k+BDw+u9eYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRmNmViZDctMGNjZC00YzA2LTgwYTAtNDVmZDc2MDc3
ZjU0MB4XDTI1MDUxNjAxMDA0NloXDTI1MDgxNDAxMDA0NlowLzEtMCsGA1UEAxMk
NjEzMWM2ZDMtNDVhZC00NzE5LTllMGQtODE3ODEzZDM0Nzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/fvE2G/0bkjbX9+oYEY4+lFD/yZtkBm823/
nne+h2Is8N0jcL+aK2sMfUBmAfh2OjNgVLsQdjKNDPCuFwwgtVVHL6joKhacYqrL
i1i7OBqGAKiy4eBhWk0rUOVkCZ71UrPKwq2pnJBVrscAqM9vehIBr2qUxeCKFynn
3UsQxAOy4y4+h6ONZJILjdXGUcfj5D72lAVoXWMuOeeI9Zp+db/kwKZsfGtN2xBa
ORP2aO7DMe3VrlJVRD7nOlj0+lUcG0edeYtxRKaQYE99RZTT1XgrS6AmIDNZj113
CCJqWfiDZ1wFgzG1CyIjT4cGBEjVE6Bo1d6JqWB9SgyTYw3jhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB4f3u5laDugpUKFZ8JK6iW77ODFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2
ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZkNzYwNzdmNTQvMWY0ZmEwNTQtNWI1NS0z
NTAyLWFlZWYtMzg2NzNiNmRkYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRmNmViZDctMGNjZC00YzA2LTgw
YTAtNDVmZDc2MDc3ZjU0LzVkZjZlYmQ3LTBjY2QtNGMwNi04MGEwLTQ1ZmQ3NjA3
N2Y1NC5jcmwwHwYDVR0jBBgwFoAU+ZXymTKY5kpAyLxIzydJ7K1e/qcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZk
NzYwNzdmNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF4B4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvrktgD0SRKnbCZZC0DmKSWyiDzu3f5qGcrlYEGcSFjsht1r5xp0L5F
/NAwWQtrcKvOiN17MQt1qLVtgBK/fjWB1GgfGJ8MiBPN9ro+2rO0rdQgwKAbepXa
vuNlz249bZIXmH+ZmuaPl5O9/W+z2r47v8OxSlJtE0WXaGYuHDc5FArGXuBbbcNl
I7A01oVVJBmgiUVDOmyLCrRsFbX6yvvPQUfM5qI2wq0UiCPrnhDnUOBw/hs/sD4p
HkyoG4OABMXFBiQLcpZJRWxGzh2GJoWW3TvJFIM41ub6CE567WwNB1Qr68AjPkMB
bP8EMglP3rdWnYPHcGWciCxJ9OIkep8=
-----END CERTIFICATE-----
Generated at Sat Jun 7 05:05:26 2025 by rpki-client