Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa
File:                     2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa (raw, json)
Hash identifier:          Rs5FYV63IhVMbelcacC290U/Kdn5Ko2ToNf/3nRvYHc=
Subject key identifier:   52:E8:4D:62:4D:6C:77:40:3F:B6:49:23:CF:FB:68:1E:57:8B:AE:0D
Certificate issuer:       /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial:       010D0C9F43285849D594DF9F029D7B46D7BDBA80
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     16584
IP address blocks:        23.140.96.0/24 maxlen: 24
                          23.140.97.0/24 maxlen: 24
                          204.9.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:df:9f:02:9d:7b:46:d7:bd:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=6b8f6a89-67cf-481a-9856-a8976f802c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:65:ad:fa:cb:4b:f3:e3:43:52:a9:ce:90:75:
                    6d:ea:0a:60:b3:31:10:17:17:5f:fa:48:90:c3:7b:
                    a7:4d:5c:4f:b3:3b:bf:5d:a3:ea:85:75:8a:a3:f5:
                    33:2c:d9:42:22:9d:5f:7c:91:24:0f:97:d5:7c:42:
                    d2:8a:21:4b:de:57:4b:09:04:f2:ad:7d:e7:c8:bd:
                    b4:43:64:1e:09:5a:11:9b:48:bf:d6:c0:00:8e:53:
                    ca:73:fd:7d:78:80:f7:cd:e1:8f:13:dd:61:56:4d:
                    a3:e5:e1:8a:06:ed:4d:8a:cc:40:76:bf:6d:5b:34:
                    a5:c0:3a:73:78:fe:25:56:ae:d2:b2:20:94:36:af:
                    31:0f:a7:5c:79:3e:91:c0:4d:19:6d:6f:c0:37:7d:
                    02:f5:71:4f:f9:17:f1:6b:e5:f8:46:84:90:9a:b5:
                    44:fc:b5:1b:04:0c:2c:7d:57:e3:cd:c9:aa:5c:3d:
                    8e:b0:92:e3:8b:69:df:00:f8:e4:e2:64:9b:13:a3:
                    7a:bc:9a:d6:20:36:36:0f:b3:ea:c6:1a:b2:1f:bd:
                    11:7b:d3:e9:93:d4:98:a0:a0:39:8f:1d:1b:ff:97:
                    42:c1:61:46:0e:6f:86:44:82:dc:e5:81:34:0f:b1:
                    11:c2:de:32:19:3a:5d:e0:0a:8a:39:31:76:24:fc:
                    0f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E8:4D:62:4D:6C:77:40:3F:B6:49:23:CF:FB:68:1E:57:8B:AE:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl

            X509v3 Authority Key Identifier:
                keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.96.0/23
                  204.9.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:a5:3d:c5:10:05:f0:ac:13:17:b6:65:64:c9:27:ae:b6:
         70:6e:97:5e:6e:2b:61:3e:a6:0f:c2:ba:0c:c7:0f:89:c1:fe:
         d0:e6:5a:2c:a6:de:f7:54:1f:1a:8d:86:bb:ea:4d:3c:7a:1f:
         04:7b:fc:3a:5f:a0:15:81:e9:38:3e:2b:23:4e:70:2e:57:27:
         d5:6f:46:37:7d:8d:e5:9c:cb:ae:f0:ac:b0:8b:8e:20:59:4e:
         b8:f9:e6:1d:85:d8:26:7d:61:a1:e4:bb:b8:68:ee:70:93:c6:
         59:17:69:87:3b:cd:93:b8:7a:1c:da:3f:5a:88:04:8c:7f:67:
         cd:9d:89:bb:fa:cb:90:a4:f0:65:d2:83:0f:9b:f2:56:ca:bc:
         b8:3f:0c:82:4b:aa:d0:33:6f:06:f3:15:24:1f:fc:63:64:1d:
         7a:66:1a:2d:a8:34:c5:c7:3c:87:7b:c3:7d:00:59:c0:6c:f5:
         0e:05:3e:86:61:05:4b:ff:50:bc:1c:2d:a9:16:57:46:bb:c4:
         83:33:4c:2b:5f:8f:ee:da:dd:69:dd:6a:ff:ca:9a:56:82:72:
         d7:34:cc:c0:94:1f:99:90:9c:59:ef:e4:11:5b:fd:97:b1:6b:
         6b:04:78:e8:9f:fd:91:a3:ab:ca:f8:8b:51:3c:5c:68:1b:ba:
         f6:46:26:d6
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnVlN+fAp17Rte9uoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1
NmRiMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk
NmI4ZjZhODktNjdjZi00ODFhLTk4NTYtYTg5NzZmODAyYzg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GWt+stL8+NDUqnOkHVt6gpgszEQFxdf+kiQ
w3unTVxPszu/XaPqhXWKo/UzLNlCIp1ffJEkD5fVfELSiiFL3ldLCQTyrX3nyL20
Q2QeCVoRm0i/1sAAjlPKc/19eID3zeGPE91hVk2j5eGKBu1NisxAdr9tWzSlwDpz
eP4lVq7SsiCUNq8xD6dceT6RwE0ZbW/AN30C9XFP+Rfxa+X4RoSQmrVE/LUbBAws
fVfjzcmqXD2OsJLji2nfAPjk4mSbE6N6vJrWIDY2D7PqxhqyH70Re9Ppk9SYoKA5
jx0b/5dCwWFGDm+GRILc5YE0D7ERwt4yGTpd4AqKOTF2JPwPgQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFLoTWJNbHdAP7ZJI8/7aB5Xi64NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4
NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvMjM4NWRiZDctMmQ3Ny0z
M2ZjLThiZGQtZmI1N2IxZWNkYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi
NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy
NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj
NzZmMjU2ZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBF4xgAwQC
zAkkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADqppT3FEAXwrBMXtmVkySeutnBul15uK2E+pg/CugzHD4nB
/tDmWiym3vdUHxqNhrvqTTx6HwR7/DpfoBWB6Tg+KyNOcC5XJ9VvRjd9jeWcy67w
rLCLjiBZTrj55h2F2CZ9YaHku7ho7nCTxlkXaYc7zZO4ehzaP1qIBIx/Z82dibv6
y5Ck8GXSgw+b8lbKvLg/DIJLqtAzbwbzFSQf/GNkHXpmGi2oNMXHPId7w30AWcBs
9Q4FPoZhBUv/ULwcLakWV0a7xIMzTCtfj+7a3Wndav/KmlaCctc0zMCUH5mQnFnv
5BFb/Zexa2sEeOif/ZGjq8r4i1E8XGgbuvZGJtY=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:05:41 2025 by rpki-client