Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0eabbb54-2ffb-3e23-bc5e-396649d27b07.roa
File:                     0eabbb54-2ffb-3e23-bc5e-396649d27b07.roa (raw, json)
Hash identifier:          LAf5cF6iNO0VEiIbqqA6TD8h1oMrE8yR4vbeFqNyWc0=
Subject key identifier:   1A:2F:F6:97:1E:9D:B4:BF:3A:BD:36:23:CF:59:C4:44:8B:A7:D2:90
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849FCAA950AA896486444FDE3C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0eabbb54-2ffb-3e23-bc5e-396649d27b07.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     16625
IP address blocks:        23.199.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:95:0a:a8:96:48:64:44:fd:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=135a6d05-836a-475c-8b0a-1182198ad39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:45:27:3d:93:b3:70:18:e2:9b:b7:61:0b:e2:
                    f1:62:e0:a8:3b:3f:21:0e:29:08:94:6c:1b:55:b1:
                    97:24:d4:cf:94:5c:7d:92:c5:40:74:1f:82:3d:e5:
                    c0:1a:10:92:19:07:78:24:f7:d8:ab:05:1a:f1:d3:
                    fa:e1:4a:16:df:ba:f1:f0:67:68:17:15:ef:7b:26:
                    58:4d:be:c5:d3:c5:06:5b:26:b8:65:f3:5b:5f:b8:
                    da:7d:3c:31:b8:85:16:38:29:02:ae:d7:31:c0:95:
                    d4:3e:6e:77:b4:76:20:54:c4:5b:1e:35:5f:48:7e:
                    ad:da:f1:d7:e2:db:28:1a:51:ea:68:83:69:00:2b:
                    91:64:17:38:29:84:81:4e:26:23:7a:44:48:92:61:
                    01:50:a4:16:68:55:f7:d9:4a:35:e3:81:f7:50:ce:
                    9b:93:5c:1b:9e:0c:07:7a:11:be:2e:28:28:8c:20:
                    f1:73:79:a9:de:c2:52:c6:fc:74:0d:54:c8:90:10:
                    af:69:22:73:45:2f:75:05:dc:c5:01:da:f8:e7:ea:
                    eb:54:81:f9:aa:2c:8d:4c:d1:de:b9:06:3c:97:9d:
                    e2:34:f5:cd:47:c0:0a:ae:0a:32:66:c1:9b:a3:8f:
                    bc:7f:64:6f:8a:0d:6a:0a:2b:01:a3:1b:c0:2e:44:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2F:F6:97:1E:9D:B4:BF:3A:BD:36:23:CF:59:C4:44:8B:A7:D2:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0eabbb54-2ffb-3e23-bc5e-396649d27b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.199.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d4:54:94:20:ef:53:f0:c1:76:8e:fd:e8:f9:fa:c6:51:9d:
         ca:35:7d:83:68:6c:12:ea:c5:af:5c:f0:97:71:1c:bd:8f:f0:
         00:3e:36:f5:1c:9f:00:a9:b6:9d:8f:f9:51:e9:94:d8:f5:db:
         ec:8c:6f:46:e2:a5:2d:7b:e9:51:3e:89:fd:b2:91:3d:57:46:
         bb:ce:1b:55:e0:ef:a0:ab:e3:96:52:22:54:a7:be:74:89:33:
         11:04:cd:26:38:17:8f:5f:95:95:a5:25:b7:bf:f6:4c:5b:a1:
         c5:3b:2b:0c:96:79:b6:7f:23:0b:c1:33:bb:4c:ec:6a:b5:53:
         e2:11:85:af:ce:db:1e:ad:d0:8e:fb:0e:c4:0e:b1:21:a8:96:
         4d:0d:33:83:93:33:8f:03:12:5a:8f:cf:82:38:85:d1:c9:30:
         10:96:59:77:06:7d:c8:85:16:ed:16:a8:d2:f8:a2:e3:b2:c9:
         7c:15:f9:a0:e7:2b:e5:dc:c7:c2:8d:1b:39:7f:65:94:4e:60:
         de:d8:29:77:2c:38:be:b5:bf:aa:ec:0d:a4:02:10:4c:70:c7:
         9b:3c:35:8f:09:e3:9c:66:19:2b:d8:bb:ba:4e:d3:0f:f4:ac:
         df:10:a9:56:f1:8f:2e:cc:02:f4:52:02:77:10:ee:8d:f7:8a:
         f4:a7:c4:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpUKqJZIZET948AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk
MTM1YTZkMDUtODM2YS00NzVjLThiMGEtMTE4MjE5OGFkMzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0UnPZOzcBjim7dhC+LxYuCoOz8hDikIlGwb
VbGXJNTPlFx9ksVAdB+CPeXAGhCSGQd4JPfYqwUa8dP64UoW37rx8GdoFxXveyZY
Tb7F08UGWya4ZfNbX7jafTwxuIUWOCkCrtcxwJXUPm53tHYgVMRbHjVfSH6t2vHX
4tsoGlHqaINpACuRZBc4KYSBTiYjekRIkmEBUKQWaFX32Uo144H3UM6bk1wbngwH
ehG+LigojCDxc3mp3sJSxvx0DVTIkBCvaSJzRS91BdzFAdr45+rrVIH5qiyNTNHe
uQY8l53iNPXNR8AKrgoyZsGbo4+8f2Rvig1qCisBoxvALkSyXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBov9pcenbS/Or02I89ZxESLp9KQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGVhYmJiNTQtMmZmYi0z
ZTIzLWJjNWUtMzk2NjQ5ZDI3YjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8cgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/UVJQg71PwwXaO/ej5+sZRnco1fYNobBLqxa9c8JdxHL2P8AA+NvUc
nwCptp2P+VHplNj12+yMb0bipS176VE+if2ykT1XRrvOG1Xg76Cr45ZSIlSnvnSJ
MxEEzSY4F49flZWlJbe/9kxbocU7KwyWebZ/IwvBM7tM7Gq1U+IRha/O2x6t0I77
DsQOsSGolk0NM4OTM48DElqPz4I4hdHJMBCWWXcGfciFFu0WqNL4ouOyyXwV+aDn
K+Xcx8KNGzl/ZZROYN7YKXcsOL61v6rsDaQCEExwx5s8NY8J45xmGSvYu7pO0w/0
rN8QqVbxjy7MAvRSAncQ7o33ivSnxMg=
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:00:18 2025 by rpki-client