Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/23f81894-2f7e-328f-bc1f-b6a7eb26f895.roa
File:                     23f81894-2f7e-328f-bc1f-b6a7eb26f895.roa (raw, json)
Hash identifier:          FKTCWC/qNYMKa7Ly5HVpHV8mtGxJcxXwcIn3Vl14pM0=
Subject key identifier:   2E:8A:C9:46:F3:59:F6:12:E7:32:DF:B9:45:3B:F1:A5:C6:50:F3:AC
Certificate issuer:       /CN=a7840f46-b135-4a45-8c47-daede4b0b707
Certificate serial:       010D0C9F43285849301D3ADCF7AC3FE4BA028AE0
Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/23f81894-2f7e-328f-bc1f-b6a7eb26f895.roa
Signing time:             Fri 14 Mar 2025 18:31:31 +0000
ROA not before:           Fri 14 Mar 2025 18:31:31 +0000
ROA not after:            Thu 12 Jun 2025 18:31:31 +0000
asID:                     12213
IP address blocks:        131.226.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:1d:3a:dc:f7:ac:3f:e4:ba:02:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707
        Validity
            Not Before: Mar 14 18:31:31 2025 GMT
            Not After : Jun 12 18:31:31 2025 GMT
        Subject: CN=e9681936-b6f6-452e-b418-9302b1202197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0c:23:04:8e:31:0b:5d:55:82:0e:cc:8a:48:
                    39:f9:39:58:f9:ac:d4:aa:d0:5e:0d:a3:bb:c0:5d:
                    d4:bd:71:38:9f:49:ef:69:ba:97:d0:cc:9b:09:76:
                    e0:f8:52:0e:f2:a7:8e:21:8b:99:35:0a:52:35:da:
                    69:41:1b:6b:a1:df:08:ba:6d:99:50:b7:02:06:c4:
                    3c:24:e4:3c:ae:e3:e8:01:cb:70:ab:59:bc:78:6e:
                    22:37:58:e6:ad:92:c3:e3:b2:b9:82:35:82:71:f6:
                    16:9c:82:4a:e6:50:8e:2b:28:cf:b3:34:52:a1:d2:
                    a3:07:99:74:75:4d:30:db:bc:c3:0f:80:95:11:b1:
                    83:17:b8:55:12:db:af:ce:cd:47:be:e4:a2:f2:bd:
                    98:ae:61:77:84:e9:46:2f:ee:97:81:53:7a:e5:1b:
                    f9:9d:a4:f4:4f:49:3e:d7:0b:11:c1:7e:cf:9b:af:
                    90:5c:40:cc:ba:93:57:f1:c7:39:dc:20:f8:53:c4:
                    49:56:d1:e5:45:84:e9:7f:93:3d:f5:20:69:f4:16:
                    55:7b:4c:32:8b:da:66:d7:78:95:e1:fa:ff:6a:37:
                    d8:49:e2:b9:2a:aa:45:9a:b4:6b:73:fc:e7:43:f7:
                    b1:f9:90:23:21:67:b5:e1:ee:76:fe:42:28:eb:6f:
                    ba:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8A:C9:46:F3:59:F6:12:E7:32:DF:B9:45:3B:F1:A5:C6:50:F3:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/23f81894-2f7e-328f-bc1f-b6a7eb26f895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl

            X509v3 Authority Key Identifier:
                keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:09:fb:6f:da:61:5d:7a:82:5d:1c:67:69:90:09:6b:2e:2d:
         db:35:76:06:e2:12:e5:82:df:4c:a8:0f:e5:0e:41:c1:6b:34:
         fc:62:4c:1c:07:ab:84:fd:8b:bf:90:13:b3:61:39:78:b8:3a:
         88:13:bf:e2:45:b5:ff:ea:08:51:11:9f:71:89:6c:a3:55:52:
         55:f4:89:aa:e9:34:55:37:96:91:0d:bf:49:df:bf:e6:fa:77:
         9f:45:3f:de:46:12:40:84:f7:c8:a3:a3:e8:a3:8f:66:63:f7:
         bf:54:e4:f1:fe:1b:fb:4b:10:22:cb:05:36:00:8a:5d:82:53:
         e6:e5:71:07:66:4f:f0:d9:4d:ae:58:44:fb:85:2c:1d:f4:60:
         b1:74:39:98:5e:36:c4:96:22:cb:27:f3:0c:71:66:b8:ec:30:
         24:d0:86:13:3a:2f:1f:f2:b7:78:35:3d:1b:0b:32:4f:9f:92:
         e7:63:a5:9a:26:82:48:3c:5f:41:60:24:3f:d2:20:e0:c7:a4:
         7a:1b:b1:87:3b:2a:58:65:15:ac:7a:8c:aa:c7:85:24:da:92:
         fa:50:fb:67:a0:ff:b7:c9:f1:43:f2:19:1f:7e:50:b7:1f:63:
         4b:fe:18:45:75:1a:84:ac:ec:f9:bd:41:61:cb:bd:1b:db:58:
         45:48:d1:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkwHTrc96w/5LoCiuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi
NzA3MB4XDTI1MDMxNDE4MzEzMVoXDTI1MDYxMjE4MzEzMVowLzEtMCsGA1UEAxMk
ZTk2ODE5MzYtYjZmNi00NTJlLWI0MTgtOTMwMmIxMjAyMTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAwjBI4xC11Vgg7Mikg5+TlY+azUqtBeDaO7
wF3UvXE4n0nvabqX0MybCXbg+FIO8qeOIYuZNQpSNdppQRtrod8Ium2ZULcCBsQ8
JOQ8ruPoActwq1m8eG4iN1jmrZLD47K5gjWCcfYWnIJK5lCOKyjPszRSodKjB5l0
dU0w27zDD4CVEbGDF7hVEtuvzs1HvuSi8r2YrmF3hOlGL+6XgVN65Rv5naT0T0k+
1wsRwX7Pm6+QXEDMupNX8cc53CD4U8RJVtHlRYTpf5M99SBp9BZVe0wyi9pm13iV
4fr/ajfYSeK5KqpFmrRrc/znQ/ex+ZAjIWe14e52/kIo62+6JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC6KyUbzWfYS5zLfuUU78aXGUPOsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0
MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMjNmODE4OTQtMmY3ZS0z
MjhmLWJjMWYtYjZhN2ViMjZmODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj
NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw
YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk
ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGg+LAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIJ+2/aYV16gl0cZ2mQCWsuLds1dgbiEuWC30yoD+UOQcFrNPxiTBwH
q4T9i7+QE7NhOXi4OogTv+JFtf/qCFERn3GJbKNVUlX0iarpNFU3lpENv0nfv+b6
d59FP95GEkCE98ijo+ijj2Zj979U5PH+G/tLECLLBTYAil2CU+blcQdmT/DZTa5Y
RPuFLB30YLF0OZheNsSWIssn8wxxZrjsMCTQhhM6Lx/yt3g1PRsLMk+fkudjpZom
gkg8X0FgJD/SIODHpHobsYc7KlhlFax6jKrHhSTakvpQ+2eg/7fJ8UPyGR9+ULcf
Y0v+GEV1GoSs7Pm9QWHLvRvbWEVI0Ug=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:34 2025 by rpki-client