Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/5e1fab74-1778-30f0-833e-7e9606d6d74e.roa
File:                     5e1fab74-1778-30f0-833e-7e9606d6d74e.roa (raw, json)
Hash identifier:          1k75yKp60UySKtZnGw9Hz2nawt1KfGM7vn+HC/uAQRw=
Subject key identifier:   CD:2B:99:D4:D4:11:21:14:BD:94:A8:B8:51:EA:EA:6E:9A:4E:55:FE
Certificate issuer:       /CN=4ee37184-86de-48c9-af35-5d102d140fa6
Certificate serial:       010D0C9F43285849DDF4DDFFDF549D7BE982C520
Authority key identifier: CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/5e1fab74-1778-30f0-833e-7e9606d6d74e.roa
Signing time:             Fri 16 May 2025 01:00:46 +0000
ROA not before:           Fri 16 May 2025 01:00:46 +0000
ROA not after:            Thu 14 Aug 2025 01:00:46 +0000
asID:                     401538
IP address blocks:        23.130.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dd:f4:dd:ff:df:54:9d:7b:e9:82:c5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee37184-86de-48c9-af35-5d102d140fa6
        Validity
            Not Before: May 16 01:00:46 2025 GMT
            Not After : Aug 14 01:00:46 2025 GMT
        Subject: CN=b5096f73-0c3f-4679-96d9-7ce9b94fc415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0d:0e:19:b7:c8:99:59:1d:6c:58:b1:0f:69:
                    a6:9e:7e:a6:b0:ea:8e:02:bf:1f:00:b4:46:31:7c:
                    f6:4d:f6:8c:a9:0e:a1:13:f5:b2:80:5a:bf:b7:3b:
                    0e:a3:7b:9e:b0:f3:13:da:63:da:d9:3e:ce:ca:65:
                    ac:87:df:4e:99:f1:dd:04:6b:62:9f:a8:76:be:cc:
                    7b:6a:f4:e9:dd:a1:bb:cd:2e:8d:69:18:62:4a:df:
                    e5:d4:0b:d2:59:3e:75:bc:d9:6f:66:72:1b:29:85:
                    e1:54:c1:51:f4:e3:23:20:2e:6f:1b:68:2b:cd:c4:
                    76:de:dc:f2:7c:cb:a0:18:ac:4f:d1:af:c6:da:b1:
                    39:4c:7f:4d:3a:d2:be:35:a9:11:83:88:e5:e7:ae:
                    61:6b:3d:ae:e8:09:e7:07:17:80:1e:54:2f:ea:d3:
                    ad:7a:a6:d2:94:30:e4:8e:de:0b:3e:b6:90:fa:51:
                    f9:a3:72:52:1e:17:b8:3f:ec:62:b0:b4:ad:bd:00:
                    a5:e2:9b:4a:c3:57:26:76:d6:62:7e:10:41:f6:fe:
                    3b:36:65:39:77:89:c7:af:40:45:bb:5a:66:9c:80:
                    dd:06:71:37:52:1c:14:71:a5:09:58:72:89:bf:15:
                    f2:a6:db:98:15:af:0a:4e:49:f0:0a:26:3e:84:fe:
                    57:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2B:99:D4:D4:11:21:14:BD:94:A8:B8:51:EA:EA:6E:9A:4E:55:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/5e1fab74-1778-30f0-833e-7e9606d6d74e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl

            X509v3 Authority Key Identifier:
                keyid:CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6e:14:4e:89:3d:52:91:b9:51:de:30:9a:d8:f7:10:b3:be:
         a8:ed:ac:2a:2e:c4:d9:47:fe:90:35:f0:7f:50:0f:a2:c4:8f:
         b9:6a:b3:9e:d3:b9:32:aa:0f:7b:2a:bb:d6:d1:bd:96:c4:27:
         16:58:4b:18:37:76:ac:c1:90:54:b5:08:03:7a:76:76:5a:f5:
         05:e7:63:38:91:20:50:2d:94:e7:0b:b3:a8:77:66:f0:c2:fe:
         f4:95:f8:89:76:29:b9:91:cf:55:7e:1f:e0:19:26:4f:70:08:
         1a:c7:6b:a4:c9:7c:94:6d:b4:b7:80:5b:f9:0c:2c:90:2e:81:
         94:15:d6:72:85:32:36:09:f7:76:fb:d7:51:85:bf:bf:d9:0d:
         14:b7:0f:91:66:55:8d:17:f4:89:8d:c8:65:fd:e7:ec:1f:96:
         14:29:d0:45:41:29:0c:1e:a9:92:57:c2:d4:f6:81:b0:f4:bd:
         7b:7b:d5:3c:f8:23:5f:9e:ce:16:ce:fb:3f:3f:69:ee:b4:92:
         b9:94:f2:da:77:60:9f:83:5b:3e:30:2f:60:c7:22:ba:90:88:
         c9:d2:56:00:74:1d:ff:58:24:e1:4b:ce:1c:6c:78:6b:4d:dd:
         83:52:b8:75:2b:4c:b2:c5:09:f1:80:56:b6:5f:b6:f5:00:eb:
         92:d1:8f:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnd9N3/31Sde+mCxSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVlMzcxODQtODZkZS00OGM5LWFmMzUtNWQxMDJkMTQw
ZmE2MB4XDTI1MDUxNjAxMDA0NloXDTI1MDgxNDAxMDA0NlowLzEtMCsGA1UEAxMk
YjUwOTZmNzMtMGMzZi00Njc5LTk2ZDktN2NlOWI5NGZjNDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw0OGbfImVkdbFixD2mmnn6msOqOAr8fALRG
MXz2TfaMqQ6hE/WygFq/tzsOo3uesPMT2mPa2T7OymWsh99OmfHdBGtin6h2vsx7
avTp3aG7zS6NaRhiSt/l1AvSWT51vNlvZnIbKYXhVMFR9OMjIC5vG2grzcR23tzy
fMugGKxP0a/G2rE5TH9NOtK+NakRg4jl565haz2u6AnnBxeAHlQv6tOteqbSlDDk
jt4LPraQ+lH5o3JSHhe4P+xisLStvQCl4ptKw1cmdtZifhBB9v47NmU5d4nHr0BF
u1pmnIDdBnE3UhwUcaUJWHKJvxXyptuYFa8KTknwCiY+hP5XDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM0rmdTUESEUvZSouFHq6m6aTlX+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZWUz
NzE4NC04NmRlLTQ4YzktYWYzNS01ZDEwMmQxNDBmYTYvNWUxZmFiNzQtMTc3OC0z
MGYwLTgzM2UtN2U5NjA2ZDZkNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGVlMzcxODQtODZkZS00OGM5LWFm
MzUtNWQxMDJkMTQwZmE2LzRlZTM3MTg0LTg2ZGUtNDhjOS1hZjM1LTVkMTAyZDE0
MGZhNi5jcmwwHwYDVR0jBBgwFoAUzO2fuO7Sl7dYq+gKqtPIy9hM0Z8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZWUzNzE4NC04NmRlLTQ4YzktYWYzNS01ZDEw
MmQxNDBmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4KcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNuFE6JPVKRuVHeMJrY9xCzvqjtrCouxNlH/pA18H9QD6LEj7lqs57T
uTKqD3squ9bRvZbEJxZYSxg3dqzBkFS1CAN6dnZa9QXnYziRIFAtlOcLs6h3ZvDC
/vSV+Il2KbmRz1V+H+AZJk9wCBrHa6TJfJRttLeAW/kMLJAugZQV1nKFMjYJ93b7
11GFv7/ZDRS3D5FmVY0X9ImNyGX95+wflhQp0EVBKQweqZJXwtT2gbD0vXt71Tz4
I1+ezhbO+z8/ae60krmU8tp3YJ+DWz4wL2DHIrqQiMnSVgB0Hf9YJOFLzhxseGtN
3YNSuHUrTLLFCfGAVrZftvUA65LRj/o=
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:40:40 2025 by rpki-client