Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/0dd95984-d9ac-3818-b720-6721242d6420.roa
File:                     0dd95984-d9ac-3818-b720-6721242d6420.roa (raw, json)
Hash identifier:          2P2uoFVmBaXvoDysdzRXhZ69l1k7PeKXSsGQZHC0a2U=
Subject key identifier:   DC:41:6B:19:F3:73:FB:65:25:90:A0:68:2E:03:56:D6:B1:4A:39:8F
Certificate issuer:       /CN=bcb3b598-8d83-4864-818b-f5833b7583e7
Certificate serial:       010D0C9F43285849D594CFD483C49896B7673900
Authority key identifier: 4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/0dd95984-d9ac-3818-b720-6721242d6420.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     213993
IP address blocks:        23.134.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:cf:d4:83:c4:98:96:b7:67:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb3b598-8d83-4864-818b-f5833b7583e7
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=5d69bdf6-1754-4ee8-a984-dc84023a7a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c1:1e:00:50:56:cb:14:35:da:9d:50:66:c5:
                    28:18:44:4c:cf:4f:04:68:e1:92:7c:16:1c:b7:ad:
                    1d:be:29:07:ae:c1:b9:bd:7e:5d:9d:14:53:32:7c:
                    85:2a:08:1d:db:95:b6:32:6d:56:86:74:7e:64:a2:
                    dc:b9:27:af:24:f1:01:b0:98:ca:ee:9a:c3:05:97:
                    bf:bd:0d:8a:f8:51:4f:d0:22:5f:d8:b3:dc:b8:f9:
                    06:32:ea:c8:b3:8c:fc:1f:9c:89:a8:4f:a7:27:d2:
                    ba:19:d6:a9:d5:a6:63:5d:a0:b1:af:78:61:32:c0:
                    64:08:3d:a8:82:d2:93:34:11:fd:01:2d:c4:39:75:
                    8e:f1:b6:1e:7c:f5:87:03:03:92:d9:99:a5:a1:2e:
                    1b:7f:13:ea:40:84:9f:2b:08:e9:17:87:75:59:1e:
                    4d:78:71:bd:05:2a:df:16:fc:07:86:30:64:ea:2c:
                    bd:a7:6a:e2:5a:b6:8d:5a:50:d0:f8:8d:53:29:02:
                    85:28:8c:96:bb:d6:65:ac:b4:dd:92:75:37:d0:64:
                    38:ae:88:7d:91:40:3f:42:f0:f2:47:cc:6e:89:bf:
                    17:08:bc:0c:42:f6:ba:d8:f3:90:c7:a7:97:bf:75:
                    ec:b9:dd:87:6f:bb:b1:20:0c:49:35:51:f6:8d:b2:
                    db:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:41:6B:19:F3:73:FB:65:25:90:A0:68:2E:03:56:D6:B1:4A:39:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/0dd95984-d9ac-3818-b720-6721242d6420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:5a:b9:ae:8d:6b:52:c8:e1:b5:43:d7:e0:8c:0e:eb:aa:1e:
         0b:72:56:fe:30:78:01:ac:8d:09:32:f4:ff:fb:ce:d2:a6:f5:
         5f:98:0c:e0:a8:e9:6d:fd:53:d7:e4:6a:61:e3:8d:cf:7c:91:
         18:8d:f5:dd:14:4e:14:e7:b2:59:c5:18:b7:0f:2a:f5:42:f3:
         27:bd:3e:5c:4e:f8:f5:08:15:8c:e6:0a:f2:91:3c:da:e3:9f:
         0d:53:35:e4:51:65:ae:6b:fd:ef:3a:09:c5:31:84:7b:f8:56:
         b0:03:a3:41:1e:37:de:08:8a:97:8d:4f:72:23:1a:a7:31:16:
         6f:2a:3a:95:19:08:95:9b:40:35:b2:7e:6b:f5:0b:8c:32:38:
         33:9e:f5:a0:31:9f:bf:63:71:5b:34:16:59:f1:0d:dc:15:18:
         e3:58:09:13:ea:7f:be:ed:b3:fd:a4:f9:5d:44:21:0a:61:d6:
         e5:9e:c3:51:ac:3d:ea:92:51:e4:ed:e2:1f:e7:88:de:67:1e:
         27:e5:7a:02:4a:3b:78:e3:9e:2c:13:3a:18:5c:20:40:08:d2:
         9f:6c:a2:01:84:b7:4c:87:a4:73:9e:ff:c8:4d:81:43:83:29:
         25:f0:cf:cb:6f:3f:d7:79:63:f3:c1:fa:bd:6b:88:0c:8a:f1:
         c9:68:7a:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlM/Ug8SYlrdnOQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNiM2I1OTgtOGQ4My00ODY0LTgxOGItZjU4MzNiNzU4
M2U3MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk
NWQ2OWJkZjYtMTc1NC00ZWU4LWE5ODQtZGM4NDAyM2E3YTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisEeAFBWyxQ12p1QZsUoGERMz08EaOGSfBYc
t60dvikHrsG5vX5dnRRTMnyFKggd25W2Mm1WhnR+ZKLcuSevJPEBsJjK7prDBZe/
vQ2K+FFP0CJf2LPcuPkGMurIs4z8H5yJqE+nJ9K6Gdap1aZjXaCxr3hhMsBkCD2o
gtKTNBH9AS3EOXWO8bYefPWHAwOS2ZmloS4bfxPqQISfKwjpF4d1WR5NeHG9BSrf
FvwHhjBk6iy9p2riWraNWlDQ+I1TKQKFKIyWu9ZlrLTdknU30GQ4roh9kUA/QvDy
R8xuib8XCLwMQva62POQx6eXv3Xsud2Hb7uxIAxJNVH2jbLbUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNxBaxnzc/tlJZCgaC4DVtaxSjmPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iY2Iz
YjU5OC04ZDgzLTQ4NjQtODE4Yi1mNTgzM2I3NTgzZTcvMGRkOTU5ODQtZDlhYy0z
ODE4LWI3MjAtNjcyMTI0MmQ2NDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmNiM2I1OTgtOGQ4My00ODY0LTgx
OGItZjU4MzNiNzU4M2U3L2JjYjNiNTk4LThkODMtNDg2NC04MThiLWY1ODMzYjc1
ODNlNy5jcmwwHwYDVR0jBBgwFoAUTwH1eiacjpGp9CgLU9cqPEl4Q6YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iY2IzYjU5OC04ZDgzLTQ4NjQtODE4Yi1mNTgz
M2I3NTgzZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4a0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE9aua6Na1LI4bVD1+CMDuuqHgtyVv4weAGsjQky9P/7ztKm9V+YDOCo
6W39U9fkamHjjc98kRiN9d0UThTnslnFGLcPKvVC8ye9PlxO+PUIFYzmCvKRPNrj
nw1TNeRRZa5r/e86CcUxhHv4VrADo0EeN94IipeNT3IjGqcxFm8qOpUZCJWbQDWy
fmv1C4wyODOe9aAxn79jcVs0FlnxDdwVGONYCRPqf77ts/2k+V1EIQph1uWew1Gs
PeqSUeTt4h/niN5nHiflegJKO3jjniwTOhhcIEAI0p9sogGEt0yHpHOe/8hNgUOD
KSXwz8tvP9d5Y/PB+r1riAyK8cloesk=
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:32:53 2025 by rpki-client