Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa
File:                     ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa (raw, json)
Hash identifier:          h9cB91feSREYOT6PGvjC3ufuDE0GMhw+4pUvU1bBW4M=
Subject key identifier:   77:16:C2:34:13:F7:73:AC:7B:3F:D8:EB:B2:30:BB:C9:7E:8C:97:C0
Certificate issuer:       /CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
Certificate serial:       010D0C9F43285848D2113B73DBD78CCD8B3ADD00
Authority key identifier: E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     33436
IP address blocks:        23.165.144.0/24 maxlen: 24
                          2602:fd09::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:3b:73:db:d7:8c:cd:8b:3a:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=76a75cf6-9b65-426a-9c5f-87df153728e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:75:7a:18:09:36:ae:19:c5:a3:39:e7:1e:f3:
                    b8:f2:5c:3d:dc:0b:08:92:55:df:05:24:55:35:75:
                    78:e9:57:09:d4:e0:86:f7:9b:8f:49:17:42:b0:bd:
                    a6:a0:0c:5a:5b:f8:08:d1:11:2f:0a:ed:65:81:9c:
                    95:b2:b1:0f:93:e6:ba:60:fb:8d:f4:c6:31:75:26:
                    93:fe:7c:79:f9:40:90:0f:a5:b0:0d:f1:ff:b8:ea:
                    78:7d:94:02:72:f4:de:ef:fc:de:9c:22:b0:43:e2:
                    75:f9:9b:29:da:97:68:54:75:88:07:bd:ec:6c:8b:
                    71:41:c9:96:b4:82:2e:8d:79:dd:6f:4d:6d:2e:cf:
                    f8:41:53:a1:0c:3a:e6:55:74:a1:a0:d3:ce:26:32:
                    67:22:d1:79:33:55:53:51:15:44:64:56:e8:b8:d7:
                    f3:b6:30:df:2e:e4:a0:cd:62:17:c0:04:5e:20:2c:
                    57:02:e3:d0:6d:c1:8a:21:4c:be:8c:6f:20:72:8a:
                    94:ea:cf:67:c1:9e:d3:a3:6e:85:cd:ef:23:13:70:
                    d0:5f:3e:d4:ac:df:cd:77:84:3f:43:e2:d0:59:c4:
                    4a:a2:1e:e2:9e:09:9b:6d:2f:a3:92:89:47:cc:42:
                    33:1c:fa:f5:38:f8:d8:d7:25:a7:ff:ce:11:fe:aa:
                    06:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:16:C2:34:13:F7:73:AC:7B:3F:D8:EB:B2:30:BB:C9:7E:8C:97:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl

            X509v3 Authority Key Identifier:
                keyid:E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.144.0/24
                IPv6:
                  2602:fd09::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:9d:63:5f:44:7b:05:78:37:b4:a3:d1:fc:51:7b:5b:df:84:
         b4:42:c7:1f:18:b8:9d:6a:c1:8c:a2:0d:90:58:cd:ee:1b:69:
         99:ac:b3:cd:2f:bb:a0:67:1b:6c:83:d5:ea:ae:03:25:5c:9e:
         65:60:15:56:16:c4:97:fe:9b:f1:9f:6f:a8:0c:ad:14:63:36:
         5f:5e:12:76:22:3e:81:34:59:ad:61:1c:27:af:f7:49:ea:69:
         29:96:94:f8:e7:fd:98:11:8c:6a:4d:5e:d0:4d:d0:ae:1d:9a:
         a5:43:a3:a3:9f:ea:4c:47:e3:a8:a9:b2:d5:9e:a9:76:c8:d9:
         f0:20:ab:56:32:7e:a0:f1:41:33:9d:8a:16:36:f7:01:b4:7b:
         e0:23:f9:21:6c:d1:dc:78:ed:9a:40:55:63:12:d5:ee:a6:ae:
         54:df:87:d4:83:45:79:58:e1:6c:fc:78:97:d3:78:68:53:2b:
         d8:32:3a:3d:8f:da:f1:ff:9a:10:0b:db:3b:7d:e5:5f:a1:a8:
         9a:51:fd:60:30:17:44:58:55:54:ce:0e:15:9b:c3:ee:81:4a:
         d8:65:f6:6b:15:e1:62:8c:db:ad:2d:7d:8e:60:a3:9c:6a:8b:
         cf:2b:b7:71:17:12:4c:81:73:7f:3f:a0:d8:4e:45:61:f5:1a:
         0f:11:a0:b4
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEjSETtz29eMzYs63QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmNjNDM5YTEtZjVlZC00OTM3LWI0NzgtNjRkYTZiNGZl
ODg3MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
NzZhNzVjZjYtOWI2NS00MjZhLTljNWYtODdkZjE1MzcyOGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnV6GAk2rhnFoznnHvO48lw93AsIklXfBSRV
NXV46VcJ1OCG95uPSRdCsL2moAxaW/gI0REvCu1lgZyVsrEPk+a6YPuN9MYxdSaT
/nx5+UCQD6WwDfH/uOp4fZQCcvTe7/zenCKwQ+J1+Zsp2pdoVHWIB73sbItxQcmW
tIIujXndb01tLs/4QVOhDDrmVXShoNPOJjJnItF5M1VTURVEZFbouNfztjDfLuSg
zWIXwAReICxXAuPQbcGKIUy+jG8gcoqU6s9nwZ7To26Fze8jE3DQXz7UrN/Nd4Q/
Q+LQWcRKoh7ingmbbS+jkolHzEIzHPr1OPjY1yWn/84R/qoGcwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFHcWwjQT93Osez/Y67Iwu8l+jJfAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82Y2M0
MzlhMS1mNWVkLTQ5MzctYjQ3OC02NGRhNmI0ZmU4ODcvZWUwZGJiMWItNWEyMy0z
MmMwLWFiZmEtZjI5NzY3OGUwY2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmNjNDM5YTEtZjVlZC00OTM3LWI0
NzgtNjRkYTZiNGZlODg3LzZjYzQzOWExLWY1ZWQtNDkzNy1iNDc4LTY0ZGE2YjRm
ZTg4Ny5jcmwwHwYDVR0jBBgwFoAU54Oux1f+8aa2yRyYWepU8k0eWVQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82Y2M0MzlhMS1mNWVkLTQ5MzctYjQ3OC02NGRh
NmI0ZmU4ODcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6WQMA4E
AgACMAgDBgQmAv0JADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfnWNfRHsFeDe0o9H8UXtb34S0QscfGLid
asGMog2QWM3uG2mZrLPNL7ugZxtsg9XqrgMlXJ5lYBVWFsSX/pvxn2+oDK0UYzZf
XhJ2Ij6BNFmtYRwnr/dJ6mkplpT45/2YEYxqTV7QTdCuHZqlQ6Ojn+pMR+OoqbLV
nql2yNnwIKtWMn6g8UEznYoWNvcBtHvgI/khbNHceO2aQFVjEtXupq5U34fUg0V5
WOFs/HiX03hoUyvYMjo9j9rx/5oQC9s7feVfoaiaUf1gMBdEWFVUzg4Vm8PugUrY
ZfZrFeFijNutLX2OYKOcaovPK7dxFxJMgXN/P6DYTkVh9RoPEaC0
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:45 2025 by rpki-client