Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/94ea91c5-ac80-3547-b476-b01ece5d19dc.roa
File:                     94ea91c5-ac80-3547-b476-b01ece5d19dc.roa (raw, json)
Hash identifier:          PqC8OnjhyJw0gSC9gvEob1tTtHL6TwTgGcvghPpRBzc=
Subject key identifier:   A0:A0:6B:14:07:14:03:56:CE:6E:FB:FD:F6:AF:33:96:AD:BC:85:9B
Certificate issuer:       /CN=37df7b6b-4b0b-49ae-b674-a5a88d9280f4
Certificate serial:       010D0C9F432858491CFD8AB61FA8E89B49611E60
Authority key identifier: C2:87:47:C5:56:BF:DA:59:33:08:2B:B6:1B:8A:14:6B:15:F3:23:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/94ea91c5-ac80-3547-b476-b01ece5d19dc.roa
Signing time:             Fri 07 Mar 2025 22:07:19 +0000
ROA not before:           Fri 07 Mar 2025 22:07:19 +0000
ROA not after:            Thu 05 Jun 2025 21:07:19 +0000
asID:                     398862
IP address blocks:        23.135.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1c:fd:8a:b6:1f:a8:e8:9b:49:61:1e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37df7b6b-4b0b-49ae-b674-a5a88d9280f4
        Validity
            Not Before: Mar  7 22:07:19 2025 GMT
            Not After : Jun  5 21:07:19 2025 GMT
        Subject: CN=4fb71d84-11cf-499a-af5e-54a0b6473691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e3:82:59:df:58:54:af:fa:de:f2:f6:30:a2:
                    6c:ef:a3:62:60:16:26:0b:e7:34:10:3d:9d:96:61:
                    e5:88:ed:0c:11:a2:24:f9:69:b5:21:53:12:fe:50:
                    40:c1:f2:f6:27:6c:3d:ba:8e:7b:38:cd:66:ce:ec:
                    fe:29:68:11:da:e4:ff:d7:d4:d7:8f:22:aa:f8:33:
                    7e:ee:d6:af:98:fd:68:56:70:2e:49:99:71:a1:df:
                    76:dd:59:a8:d7:50:d4:f6:1c:5c:c7:3a:98:c6:1f:
                    2e:cf:c8:57:e0:37:8d:d4:f9:3c:dd:b4:8b:40:78:
                    08:ab:10:ae:67:ae:45:1a:bc:ae:ec:9e:65:3e:9f:
                    53:ae:3e:74:bb:93:12:2e:f7:92:02:c6:08:05:da:
                    2a:c1:7a:81:e5:ba:a8:fe:86:3d:7e:88:f2:bf:29:
                    52:4b:c9:46:e3:34:75:7a:91:31:0b:4c:12:25:50:
                    bd:d0:f0:9a:c2:ee:7f:73:a7:2e:19:ef:f8:43:b2:
                    68:7e:28:db:f4:26:fa:62:23:3c:86:fc:c2:75:bd:
                    6c:5a:49:f2:f8:b4:bb:83:de:8c:1d:d2:62:46:86:
                    3b:4b:e2:57:68:fc:c2:77:d7:d5:5b:9a:c0:ef:31:
                    07:6a:3d:ac:1d:73:5d:74:0b:c6:d8:4c:63:05:24:
                    ad:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A0:6B:14:07:14:03:56:CE:6E:FB:FD:F6:AF:33:96:AD:BC:85:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/94ea91c5-ac80-3547-b476-b01ece5d19dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.crl

            X509v3 Authority Key Identifier:
                keyid:C2:87:47:C5:56:BF:DA:59:33:08:2B:B6:1B:8A:14:6B:15:F3:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d1:64:be:96:b3:04:c2:0d:fb:f8:70:5a:27:88:4b:03:1b:
         c8:bb:76:38:65:5a:8d:ff:e2:0f:a3:70:7f:c4:18:13:75:d8:
         47:46:91:44:3d:b5:e6:2d:86:56:7e:08:4a:c2:bf:8d:c5:19:
         20:d4:1e:c9:56:3e:d9:e8:55:5a:ae:69:a4:65:8f:65:0c:1f:
         45:cb:98:25:6b:64:b6:92:2f:35:1b:01:9e:24:0e:7c:0f:93:
         ef:a0:c1:cd:1f:e4:05:72:85:63:bc:ad:cd:c3:46:03:fe:2a:
         52:c0:32:8c:9e:c7:db:b8:f7:a7:d0:45:a3:fe:9d:eb:4d:ac:
         dd:84:c7:10:06:43:9d:58:4a:ce:24:86:a3:7c:6f:f5:63:fc:
         66:23:e7:ea:a0:07:67:d8:15:63:32:c5:04:23:16:1e:4d:55:
         37:57:e9:a2:c2:bc:b5:1f:6a:39:01:88:30:16:04:cd:bb:0e:
         d8:ff:1c:82:4a:06:85:80:81:7f:2f:66:e3:61:c3:2c:07:21:
         e4:ae:15:d3:8a:ba:b0:a0:c6:04:e1:a9:3e:80:5e:fb:14:b1:
         5c:99:12:9e:3e:aa:ba:4d:78:b6:b8:70:0f:f2:ac:8e:27:17:
         18:df:c1:7b:b9:a1:cc:f4:58:5c:3a:55:ad:4d:68:58:93:c4:
         6f:d1:4e:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkc/Yq2H6jom0lhHmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdkZjdiNmItNGIwYi00OWFlLWI2NzQtYTVhODhkOTI4
MGY0MB4XDTI1MDMwNzIyMDcxOVoXDTI1MDYwNTIxMDcxOVowLzEtMCsGA1UEAxMk
NGZiNzFkODQtMTFjZi00OTlhLWFmNWUtNTRhMGI2NDczNjkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluOCWd9YVK/63vL2MKJs76NiYBYmC+c0ED2d
lmHliO0MEaIk+Wm1IVMS/lBAwfL2J2w9uo57OM1mzuz+KWgR2uT/19TXjyKq+DN+
7tavmP1oVnAuSZlxod923Vmo11DU9hxcxzqYxh8uz8hX4DeN1Pk83bSLQHgIqxCu
Z65FGryu7J5lPp9Trj50u5MSLveSAsYIBdoqwXqB5bqo/oY9fojyvylSS8lG4zR1
epExC0wSJVC90PCawu5/c6cuGe/4Q7Jofijb9Cb6YiM8hvzCdb1sWkny+LS7g96M
HdJiRoY7S+JXaPzCd9fVW5rA7zEHaj2sHXNddAvG2ExjBSStywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKCgaxQHFANWzm77/favM5atvIWbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zN2Rm
N2I2Yi00YjBiLTQ5YWUtYjY3NC1hNWE4OGQ5MjgwZjQvOTRlYTkxYzUtYWM4MC0z
NTQ3LWI0NzYtYjAxZWNlNWQxOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzdkZjdiNmItNGIwYi00OWFlLWI2
NzQtYTVhODhkOTI4MGY0LzM3ZGY3YjZiLTRiMGItNDlhZS1iNjc0LWE1YTg4ZDky
ODBmNC5jcmwwHwYDVR0jBBgwFoAUwodHxVa/2lkzCCu2G4oUaxXzI+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8zN2RmN2I2Yi00YjBiLTQ5YWUtYjY3NC1hNWE4
OGQ5MjgwZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4fEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHRZL6WswTCDfv4cFoniEsDG8i7djhlWo3/4g+jcH/EGBN12EdGkUQ9
teYthlZ+CErCv43FGSDUHslWPtnoVVquaaRlj2UMH0XLmCVrZLaSLzUbAZ4kDnwP
k++gwc0f5AVyhWO8rc3DRgP+KlLAMoyex9u496fQRaP+netNrN2ExxAGQ51YSs4k
hqN8b/Vj/GYj5+qgB2fYFWMyxQQjFh5NVTdX6aLCvLUfajkBiDAWBM27Dtj/HIJK
BoWAgX8vZuNhwywHIeSuFdOKurCgxgThqT6AXvsUsVyZEp4+qrpNeLa4cA/yrI4n
FxjfwXu5ocz0WFw6Va1NaFiTxG/RTs0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:44 2025 by rpki-client