Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d736fe43-2d2f-3395-aa13-2247794e89d4.roa
File:                     d736fe43-2d2f-3395-aa13-2247794e89d4.roa (raw, json)
Hash identifier:          zhbmiPB/i13VvAWoTdgOmo1p/M63aj0aKDAyJZHc0E8=
Subject key identifier:   1C:FD:E6:8A:52:82:39:28:6A:ED:AF:C2:A2:98:2E:C9:BE:C0:56:D9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F694AFBE8AFA966453100
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d736fe43-2d2f-3395-aa13-2247794e89d4.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     19157
IP address blocks:        23.86.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:69:4a:fb:e8:af:a9:66:45:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=23a1e342-8b54-4d11-80af-fba38b07e61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:59:13:e0:2f:0e:35:98:cd:15:b6:ae:39:47:
                    d0:f6:f8:f2:9f:9d:a6:57:ae:68:a3:69:d4:07:2d:
                    38:4e:5c:6a:f2:07:ba:05:26:e5:b9:8c:9e:3b:4a:
                    d3:a9:96:28:66:56:53:f2:35:0a:67:38:db:61:12:
                    c3:a1:4e:c5:c7:4d:12:f4:d9:59:a9:85:3e:8e:a3:
                    8e:9b:91:70:75:4d:b4:0f:d4:58:47:c2:06:31:db:
                    1a:ba:90:9e:54:1a:67:57:8a:b1:01:c0:96:88:c0:
                    33:35:f7:63:10:1e:cc:69:25:a3:c5:23:c5:5d:37:
                    ac:5a:74:18:6e:50:9e:13:12:69:1b:b6:15:09:b9:
                    5c:bb:29:29:80:82:2f:61:19:d4:d0:6e:7c:fb:0b:
                    37:5a:cb:3d:c6:6b:a6:ab:6c:5f:0a:48:ea:03:74:
                    5c:df:59:4b:49:4f:fd:27:2f:98:81:54:5e:c6:c5:
                    d3:9c:75:e9:c6:af:4c:6e:dd:63:f6:c8:0b:b3:e1:
                    ff:f7:a9:b4:af:5a:0b:46:27:7a:3b:4c:88:ee:c6:
                    6b:ee:1a:78:b4:3f:72:a4:c1:cd:21:a2:7e:3c:61:
                    40:e1:da:14:9b:ed:a8:3b:73:1b:ed:b5:0e:fe:73:
                    82:b1:72:0b:d6:f1:c9:b1:a0:82:80:6b:74:85:5a:
                    e7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FD:E6:8A:52:82:39:28:6A:ED:AF:C2:A2:98:2E:C9:BE:C0:56:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d736fe43-2d2f-3395-aa13-2247794e89d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:0e:5b:85:6c:cc:03:35:d6:b3:39:8b:70:91:ce:9e:6a:e0:
         44:c2:a1:47:24:64:50:30:3a:54:b2:0f:0e:49:15:66:a6:20:
         ce:7b:ec:75:61:21:a8:c6:91:8b:a6:6b:83:e8:0a:78:8f:2c:
         11:cf:cb:54:e7:83:79:61:aa:7c:4d:97:1d:81:1d:d6:a4:45:
         2a:9c:98:b7:14:03:7c:c5:a5:b3:0e:1d:63:54:a3:dd:c7:1b:
         c6:e0:38:d3:de:12:5f:98:1d:8b:23:f6:02:62:ca:17:14:5b:
         ef:35:e4:39:99:c8:c3:f5:7f:3f:66:be:a5:bf:e2:0d:4c:98:
         74:21:b5:54:3b:90:6c:fb:e1:3e:01:67:ac:09:ca:9d:d0:44:
         5a:64:74:69:b5:ff:0e:9f:59:88:7b:d3:91:22:8c:8c:ff:ad:
         19:2c:bd:32:b8:3b:7c:74:10:7c:a2:92:5c:8c:5a:61:9b:32:
         ee:e6:74:25:6f:5d:08:20:6d:c5:e3:8a:70:af:72:49:2f:76:
         43:99:16:60:ee:38:6a:c0:f3:92:f4:cd:6d:03:0a:a4:f3:93:
         37:3b:19:6d:f1:e2:36:a1:3f:2c:a3:ad:29:0b:c7:e8:84:59:
         c2:13:a0:09:f0:eb:b9:3d:f3:11:a7:99:53:5d:6b:ca:a7:3e:
         2b:eb:d3:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2lK++ivqWZFMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
MjNhMWUzNDItOGI1NC00ZDExLTgwYWYtZmJhMzhiMDdlNjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FkT4C8ONZjNFbauOUfQ9vjyn52mV65oo2nU
By04Tlxq8ge6BSbluYyeO0rTqZYoZlZT8jUKZzjbYRLDoU7Fx00S9NlZqYU+jqOO
m5FwdU20D9RYR8IGMdsaupCeVBpnV4qxAcCWiMAzNfdjEB7MaSWjxSPFXTesWnQY
blCeExJpG7YVCblcuykpgIIvYRnU0G58+ws3Wss9xmumq2xfCkjqA3Rc31lLSU/9
Jy+YgVRexsXTnHXpxq9Mbt1j9sgLs+H/96m0r1oLRid6O0yI7sZr7hp4tD9ypMHN
IaJ+PGFA4doUm+2oO3Mb7bUO/nOCsXIL1vHJsaCCgGt0hVrnxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBz95opSgjkoau2vwqKYLsm+wFbZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZDczNmZlNDMtMmQyZi0z
Mzk1LWFhMTMtMjI0Nzc5NGU4OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1YwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHIOW4VszAM11rM5i3CRzp5q4ETCoUckZFAwOlSyDw5JFWamIM577HVh
IajGkYuma4PoCniPLBHPy1Tng3lhqnxNlx2BHdakRSqcmLcUA3zFpbMOHWNUo93H
G8bgONPeEl+YHYsj9gJiyhcUW+815DmZyMP1fz9mvqW/4g1MmHQhtVQ7kGz74T4B
Z6wJyp3QRFpkdGm1/w6fWYh705EijIz/rRksvTK4O3x0EHyiklyMWmGbMu7mdCVv
XQggbcXjinCvckkvdkOZFmDuOGrA85L0zW0DCqTzkzc7GW3x4jahPyyjrSkLx+iE
WcIToAnw67k98xGnmVNda8qnPivr03c=
-----END CERTIFICATE-----
Generated at Fri Jun 6 04:33:17 2025 by rpki-client