Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/66217c64-c6c1-3c43-8b41-e7570f54843c.roa
File:                     66217c64-c6c1-3c43-8b41-e7570f54843c.roa (raw, json)
Hash identifier:          jKKds8aCX5XU9Z1a6LS9JUZfZ1j24h1dOYog0WrleDg=
Subject key identifier:   B6:F2:7E:11:DE:B5:53:C5:D6:10:90:57:0D:67:CE:79:44:54:B6:70
Certificate issuer:       /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial:       010D0C9F432858497DF588420C13C504FD79C2C0
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/66217c64-c6c1-3c43-8b41-e7570f54843c.roa
Signing time:             Fri 11 Apr 2025 15:44:35 +0000
ROA not before:           Fri 11 Apr 2025 15:44:35 +0000
ROA not after:            Thu 10 Jul 2025 15:44:35 +0000
asID:                     11286
IP address blocks:        69.31.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:f5:88:42:0c:13:c5:04:fd:79:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
        Validity
            Not Before: Apr 11 15:44:35 2025 GMT
            Not After : Jul 10 15:44:35 2025 GMT
        Subject: CN=fe260af2-a26d-4a11-a7f7-4fb3557ae4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:53:52:2b:b3:99:00:c7:93:14:2f:7d:d3:e2:
                    f7:db:ad:c4:f4:d4:f1:8d:9a:e8:4e:a7:e5:6a:0c:
                    d7:bc:bb:e3:56:d9:16:cc:dc:a3:ea:21:01:1c:15:
                    bf:bc:86:b8:2c:76:8f:10:7c:ae:16:09:cd:19:44:
                    1f:81:cb:c1:bf:93:02:db:1c:83:1a:61:81:22:66:
                    c2:33:f2:c5:a2:5a:eb:99:c3:fe:47:ed:c5:82:e8:
                    4a:ad:12:fe:16:38:12:6f:7e:c9:57:28:a8:b5:47:
                    ae:80:5d:f9:01:eb:22:e2:86:97:82:bd:0e:d3:5d:
                    55:64:3e:dd:03:77:00:e5:8d:fc:ea:8e:d6:39:fd:
                    83:a3:f6:60:3c:1e:d9:bd:fe:40:29:55:9f:5c:15:
                    c4:48:71:78:44:d1:e5:1f:94:7f:e9:43:0e:87:27:
                    09:1a:bd:2d:03:78:ec:e6:f7:50:cb:a8:f2:5f:d1:
                    e4:f0:86:a3:58:cf:73:27:58:fc:26:6b:fe:fe:21:
                    a2:c4:77:0f:63:de:70:5b:d3:d9:c3:b5:f9:48:72:
                    ad:d2:1f:54:fb:e1:cd:de:a3:e2:b4:fc:12:a6:d0:
                    61:b3:10:fe:b1:63:a1:c0:d5:1c:88:e4:36:87:48:
                    11:7c:f5:12:1c:72:43:69:83:05:eb:1b:15:7c:00:
                    4a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F2:7E:11:DE:B5:53:C5:D6:10:90:57:0D:67:CE:79:44:54:B6:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/66217c64-c6c1-3c43-8b41-e7570f54843c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl

            X509v3 Authority Key Identifier:
                keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.31.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:7e:90:6c:c5:aa:bc:14:d5:9c:47:f7:04:60:a5:28:6d:48:
         bb:64:ec:cf:50:6c:78:12:aa:67:29:89:19:ec:0d:f3:1a:b0:
         6a:f9:2a:b1:38:3f:44:49:dd:5c:6a:46:43:cd:88:3e:3e:df:
         0d:44:17:f5:ab:79:7a:f3:01:70:94:b4:26:f6:e2:fb:37:46:
         0a:6c:1e:3d:6a:d1:dc:1f:cc:f1:5a:8b:d1:b1:ae:1a:cc:e7:
         7d:ca:9a:39:1a:e0:12:f1:c9:c7:78:7d:14:0f:c7:1b:1f:93:
         ce:09:d8:f9:e0:de:ca:79:06:d0:4a:dd:10:cf:bf:ce:78:71:
         99:b0:20:ea:29:68:19:8b:1d:b7:cd:41:c3:05:52:1d:9a:c2:
         02:4c:cc:54:71:aa:4f:de:0b:70:bd:a1:3a:41:2b:2a:17:c5:
         29:eb:c8:48:f8:b0:c0:4e:24:7a:30:78:e2:68:ca:cb:5b:23:
         5a:be:81:64:68:d8:a4:62:b0:0a:12:44:fc:23:f0:00:22:3e:
         c5:29:a6:49:14:b1:8b:ba:68:4e:c5:a9:e2:e9:a8:cc:3d:b6:
         03:11:9b:a3:3d:4f:ae:51:9c:ad:a2:b8:d4:84:62:19:a0:7a:
         c1:a6:db:f0:39:1a:8a:c9:6d:8b:5d:0a:83:3e:ec:9f:61:06:
         c1:b7:33:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl99YhCDBPFBP15wsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNiNTkwZTgtMzBjNS00OTk3LWJiZjMtZjJmZTEwYTI5
ZTg3MB4XDTI1MDQxMTE1NDQzNVoXDTI1MDcxMDE1NDQzNVowLzEtMCsGA1UEAxMk
ZmUyNjBhZjItYTI2ZC00YTExLWE3ZjctNGZiMzU1N2FlNGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVNSK7OZAMeTFC990+L3263E9NTxjZroTqfl
agzXvLvjVtkWzNyj6iEBHBW/vIa4LHaPEHyuFgnNGUQfgcvBv5MC2xyDGmGBImbC
M/LFolrrmcP+R+3FguhKrRL+FjgSb37JVyiotUeugF35Aesi4oaXgr0O011VZD7d
A3cA5Y386o7WOf2Do/ZgPB7Zvf5AKVWfXBXESHF4RNHlH5R/6UMOhycJGr0tA3js
5vdQy6jyX9Hk8IajWM9zJ1j8Jmv+/iGixHcPY95wW9PZw7X5SHKt0h9U++HN3qPi
tPwSptBhsxD+sWOhwNUciOQ2h0gRfPUSHHJDaYMF6xsVfABKzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLbyfhHetVPF1hCQVw1nznlEVLZwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1
OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZlMTBhMjllODcvNjYyMTdjNjQtYzZjMS0z
YzQzLThiNDEtZTc1NzBmNTQ4NDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNiNTkwZTgtMzBjNS00OTk3LWJi
ZjMtZjJmZTEwYTI5ZTg3LzIzYjU5MGU4LTMwYzUtNDk5Ny1iYmYzLWYyZmUxMGEy
OWU4Ny5jcmwwHwYDVR0jBBgwFoAUcy1hwgTHlLBjGpuuELFhCs6jUygwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZl
MTBhMjllODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARR9UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADh+kGzFqrwU1ZxH9wRgpShtSLtk7M9QbHgSqmcpiRnsDfMasGr5KrE4
P0RJ3VxqRkPNiD4+3w1EF/WreXrzAXCUtCb24vs3RgpsHj1q0dwfzPFai9GxrhrM
533Kmjka4BLxycd4fRQPxxsfk84J2Png3sp5BtBK3RDPv854cZmwIOopaBmLHbfN
QcMFUh2awgJMzFRxqk/eC3C9oTpBKyoXxSnryEj4sMBOJHoweOJoystbI1q+gWRo
2KRisAoSRPwj8AAiPsUppkkUsYu6aE7FqeLpqMw9tgMRm6M9T65RnK2iuNSEYhmg
esGm2/A5GorJbYtdCoM+7J9hBsG3M/g=
-----END CERTIFICATE-----
Generated at Tue Apr 15 11:46:52 2025 by rpki-client