Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a/6a722f8b-d694-3096-9674-6ccb8b37296d.roa
File:                     6a722f8b-d694-3096-9674-6ccb8b37296d.roa (raw, json)
Hash identifier:          1oM9DSgWN9kWYCcXif+AcNLPtoJQOdB6zlAXEd4MKsI=
Subject key identifier:   96:BC:55:C8:11:29:F3:77:34:86:07:0A:E5:FC:13:DB:DB:AE:1E:CA
Certificate issuer:       /CN=82bc9526-5cc1-40d3-bedb-64d93ffce85a
Certificate serial:       010D0C9F4328584953C4482D683C31F8E4541200
Authority key identifier: 97:1A:82:23:1E:2F:58:4D:86:30:7B:98:F6:9D:66:EF:86:97:81:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a/6a722f8b-d694-3096-9674-6ccb8b37296d.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     397326
IP address blocks:        23.142.48.0/24 maxlen: 24
                          147.160.170.0/24 maxlen: 24
                          2620:13e:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a/82bc9526-5cc1-40d3-bedb-64d93ffce85a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a/82bc9526-5cc1-40d3-bedb-64d93ffce85a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:48:2d:68:3c:31:f8:e4:54:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82bc9526-5cc1-40d3-bedb-64d93ffce85a
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=8e1ba53f-3966-4d65-8514-1d27256f8d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:e7:d8:b7:6b:b3:50:8e:43:ce:d2:e0:f8:
                    82:a0:80:dc:ff:f7:25:f3:c0:da:65:69:bf:37:ff:
                    66:9e:55:d0:7f:bf:5e:f3:29:46:aa:54:ba:18:48:
                    4d:bb:60:28:66:9a:ff:59:d2:2c:f3:6f:ec:c9:14:
                    8f:1f:2b:7d:50:9a:6a:0d:11:b5:69:71:63:2b:12:
                    4b:7e:ad:b1:50:1a:69:1f:16:66:a0:48:23:42:64:
                    5b:c3:f4:1e:ee:dd:8e:24:5b:a8:ef:b6:f9:06:bc:
                    9b:b3:e2:82:22:87:5f:fd:1d:06:52:69:6b:eb:33:
                    de:d9:03:56:dc:bb:1d:3f:de:00:61:35:4c:28:ad:
                    52:38:4a:aa:ed:ae:60:f4:97:b4:ce:28:e8:cb:70:
                    b9:88:ce:35:53:b9:6f:e8:bc:0f:a2:0d:e5:4a:e6:
                    e4:9b:dc:59:92:2a:3b:4b:90:47:94:0c:ad:98:fc:
                    36:aa:64:3f:95:65:03:49:23:cd:47:f8:34:5a:4d:
                    6b:b9:c3:66:3a:bf:01:74:15:55:65:8f:b0:5a:a9:
                    6d:07:36:5f:c5:c7:6c:bd:20:8a:9f:7f:39:20:92:
                    8d:f2:f6:2e:77:2b:bc:93:5b:33:16:31:8e:f6:95:
                    f1:66:1f:6f:dd:5c:02:15:eb:91:b2:69:e2:28:18:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BC:55:C8:11:29:F3:77:34:86:07:0A:E5:FC:13:DB:DB:AE:1E:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a/6a722f8b-d694-3096-9674-6ccb8b37296d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a/82bc9526-5cc1-40d3-bedb-64d93ffce85a.crl

            X509v3 Authority Key Identifier:
                keyid:97:1A:82:23:1E:2F:58:4D:86:30:7B:98:F6:9D:66:EF:86:97:81:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.48.0/24
                  147.160.170.0/24
                IPv6:
                  2620:13e:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:06:21:69:cd:8d:a6:d9:5b:99:0c:36:fd:15:e4:06:c8:88:
         b5:94:8e:61:7d:36:ca:45:07:85:c6:28:8f:bc:50:43:37:de:
         09:7c:49:cb:b7:db:b6:cb:9d:96:6d:17:52:56:ad:48:48:22:
         a4:2f:b2:f8:11:e9:b9:91:af:9e:f0:36:d5:f8:3d:64:d0:b3:
         26:97:16:bb:b8:e5:7e:66:16:c2:7f:47:34:da:4d:48:3f:df:
         b2:f7:5f:c1:2d:05:d9:46:4c:57:6d:0c:e3:24:7d:06:95:de:
         a8:1a:13:56:c6:e2:5f:1d:7f:07:88:e5:0e:90:ff:ab:1b:25:
         21:90:40:43:40:ff:df:ac:0d:40:14:8a:55:58:69:b8:3e:6f:
         87:12:85:5a:eb:59:d8:61:ea:9f:e5:d6:23:4a:19:e4:f0:32:
         65:09:b4:11:96:df:f9:39:cf:72:b7:2f:b4:e9:39:62:cc:c8:
         ca:4d:57:49:85:b6:17:2a:8a:91:60:95:ae:a1:6b:0d:5f:79:
         9a:ca:b2:8f:4e:e3:00:19:ff:ea:51:f4:03:af:e4:02:27:19:
         a3:4e:b7:0d:db:fc:90:0c:14:fc:cf:13:dc:89:f1:dd:7f:1a:
         6f:3d:0a:32:2d:80:f6:38:46:10:84:5a:82:95:f2:c2:b1:ef:
         83:26:ca:12
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWElTxEgtaDwx+ORUEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODJiYzk1MjYtNWNjMS00MGQzLWJlZGItNjRkOTNmZmNl
ODVhMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
OGUxYmE1M2YtMzk2Ni00ZDY1LTg1MTQtMWQyNzI1NmY4ZDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlDn2Ldrs1COQ87S4PiCoIDc//cl88DaZWm/
N/9mnlXQf79e8ylGqlS6GEhNu2AoZpr/WdIs82/syRSPHyt9UJpqDRG1aXFjKxJL
fq2xUBppHxZmoEgjQmRbw/Qe7t2OJFuo77b5Brybs+KCIodf/R0GUmlr6zPe2QNW
3LsdP94AYTVMKK1SOEqq7a5g9Je0zijoy3C5iM41U7lv6LwPog3lSubkm9xZkio7
S5BHlAytmPw2qmQ/lWUDSSPNR/g0Wk1rucNmOr8BdBVVZY+wWqltBzZfxcdsvSCK
n385IJKN8vYudyu8k1szFjGO9pXxZh9v3VwCFeuRsmniKBgv7wIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFJa8VcgRKfN3NIYHCuX8E9vbrh7KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MmJj
OTUyNi01Y2MxLTQwZDMtYmVkYi02NGQ5M2ZmY2U4NWEvNmE3MjJmOGItZDY5NC0z
MDk2LTk2NzQtNmNjYjhiMzcyOTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODJiYzk1MjYtNWNjMS00MGQzLWJl
ZGItNjRkOTNmZmNlODVhLzgyYmM5NTI2LTVjYzEtNDBkMy1iZWRiLTY0ZDkzZmZj
ZTg1YS5jcmwwHwYDVR0jBBgwFoAUlxqCIx4vWE2GMHuY9p1m74aXgfowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MmJjOTUyNi01Y2MxLTQwZDMtYmVkYi02NGQ5
M2ZmY2U4NWEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF44wAwQA
k6CqMA4EAgACMAgDBgAmIAE+MDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8BiFpzY2m2VuZDDb9FeQGyIi1
lI5hfTbKRQeFxiiPvFBDN94JfEnLt9u2y52WbRdSVq1ISCKkL7L4Eem5ka+e8DbV
+D1k0LMmlxa7uOV+ZhbCf0c02k1IP9+y91/BLQXZRkxXbQzjJH0Gld6oGhNWxuJf
HX8HiOUOkP+rGyUhkEBDQP/frA1AFIpVWGm4Pm+HEoVa61nYYeqf5dYjShnk8DJl
CbQRlt/5Oc9yty+06TlizMjKTVdJhbYXKoqRYJWuoWsNX3mayrKPTuMAGf/qUfQD
r+QCJxmjTrcN2/yQDBT8zxPcifHdfxpvPQoyLYD2OEYQhFqClfLCse+DJsoS
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:21:04 2025 by rpki-client