Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/206f36c7-1c35-3269-ae51-246289621a05.roa
File:                     206f36c7-1c35-3269-ae51-246289621a05.roa (raw, json)
Hash identifier:          AuGemoiZqvYhuw7pmpi2EaX+K9mgXTy3Ydbn3MDSu5M=
Subject key identifier:   23:F2:9C:1A:8C:8D:2B:74:C5:6B:54:36:7A:3D:DD:2D:D4:64:10:50
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849ABB4B48116D4BD5A1B5F6F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/206f36c7-1c35-3269-ae51-246289621a05.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     32787
IP address blocks:        23.45.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:b4:81:16:d4:bd:5a:1b:5f:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=fa237a9d-dbcd-4922-bac2-7f0250b7fe6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:86:1c:2c:cf:ac:51:a4:c3:10:7e:5a:ed:ca:
                    a5:5a:3a:3c:c6:e6:86:2b:7d:8b:00:bc:28:10:a2:
                    f1:e1:44:4d:8b:68:53:40:d0:12:10:6e:01:d8:c3:
                    7d:90:8b:8b:d9:b5:f4:38:6b:74:b7:7f:61:78:23:
                    41:23:26:ae:d3:aa:e8:3c:f4:13:17:e2:9d:89:9d:
                    be:83:ab:18:38:ad:d4:3b:8b:39:71:f6:f5:80:c3:
                    11:35:44:7a:9e:b9:31:7d:72:1b:54:e4:76:ad:7b:
                    8f:a1:8c:60:c4:41:ba:b6:cb:ad:74:d3:b2:8a:37:
                    6d:cc:00:7c:35:72:d9:82:1f:40:ae:09:d3:7d:8b:
                    ee:e6:d1:fe:94:3a:c2:52:0c:59:d8:75:2f:1f:d4:
                    f8:a7:e5:c4:f8:9b:ba:c4:dc:d1:e8:12:6b:cf:e0:
                    42:e6:8c:aa:e0:0c:b0:e4:4c:4a:26:fb:ca:9a:e1:
                    de:5a:c1:25:fa:ea:a6:89:bf:bf:14:96:0a:43:6c:
                    fd:09:10:ef:1f:5a:61:66:84:01:7b:78:60:d7:36:
                    35:c8:c7:8b:5a:d5:47:00:e7:30:6b:e9:13:0b:79:
                    9d:47:0c:67:1f:87:17:2f:0a:44:9a:41:d2:36:57:
                    e9:b7:8e:26:dd:b3:55:ae:d5:3f:e1:1d:08:fa:7e:
                    46:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F2:9C:1A:8C:8D:2B:74:C5:6B:54:36:7A:3D:DD:2D:D4:64:10:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/206f36c7-1c35-3269-ae51-246289621a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.45.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1c:52:20:22:66:38:18:02:98:ea:e2:34:ef:43:6a:3a:d4:
         f2:29:cf:a1:12:07:cf:e6:fa:f5:b5:00:ca:d0:a6:5a:33:21:
         26:aa:fb:99:08:1a:bd:8e:30:fd:34:8a:9f:30:ce:35:b1:e7:
         0d:53:44:d0:fb:95:8c:32:f2:9c:2e:6b:be:dc:36:6e:07:fd:
         09:b7:9b:97:1c:e9:3a:e7:98:c3:f9:b5:ab:51:99:90:cc:0b:
         e6:70:40:12:7e:b2:78:6f:79:bb:b7:da:38:6a:29:7f:cb:9f:
         88:4c:1f:33:1c:48:e2:cf:51:ad:1b:ad:b4:b6:c8:17:26:1a:
         1c:e8:0a:55:5d:be:21:36:eb:9a:3c:38:d2:15:d2:13:7f:3a:
         a9:16:17:77:d0:3a:fb:fb:a2:f0:fe:c7:99:a8:95:4c:b7:1a:
         cd:43:93:50:a8:4c:43:db:0f:74:31:83:02:40:bd:7d:c5:85:
         ca:97:38:4c:b3:5d:58:80:2f:b0:d7:62:42:5e:61:15:14:36:
         27:e9:f5:85:40:a6:28:ac:0b:58:84:57:69:31:e4:0a:0f:cb:
         02:c3:ea:66:87:b7:8f:7e:ad:f0:82:6e:3c:cd:42:bc:72:5d:
         32:de:8d:e7:b5:f6:72:5b:a7:04:72:5e:1d:e6:f4:31:95:d5:
         53:18:a7:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLSBFtS9WhtfbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk
ZmEyMzdhOWQtZGJjZC00OTIyLWJhYzItN2YwMjUwYjdmZTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YYcLM+sUaTDEH5a7cqlWjo8xuaGK32LALwo
EKLx4URNi2hTQNASEG4B2MN9kIuL2bX0OGt0t39heCNBIyau06roPPQTF+KdiZ2+
g6sYOK3UO4s5cfb1gMMRNUR6nrkxfXIbVOR2rXuPoYxgxEG6tsutdNOyijdtzAB8
NXLZgh9ArgnTfYvu5tH+lDrCUgxZ2HUvH9T4p+XE+Ju6xNzR6BJrz+BC5oyq4Ayw
5ExKJvvKmuHeWsEl+uqmib+/FJYKQ2z9CRDvH1phZoQBe3hg1zY1yMeLWtVHAOcw
a+kTC3mdRwxnH4cXLwpEmkHSNlfpt44m3bNVrtU/4R0I+n5GQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPynBqMjSt0xWtUNno93S3UZBBQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjA2ZjM2YzctMWMzNS0z
MjY5LWFlNTEtMjQ2Mjg5NjIxYTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFy0QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAscUiAiZjgYApjq4jTvQ2o61PIpz6ESB8/m+vW1AMrQplozISaq+5kI
Gr2OMP00ip8wzjWx5w1TRND7lYwy8pwua77cNm4H/Qm3m5cc6TrnmMP5tatRmZDM
C+ZwQBJ+snhvebu32jhqKX/Ln4hMHzMcSOLPUa0brbS2yBcmGhzoClVdviE265o8
ONIV0hN/OqkWF3fQOvv7ovD+x5molUy3Gs1Dk1CoTEPbD3QxgwJAvX3FhcqXOEyz
XViAL7DXYkJeYRUUNifp9YVApiisC1iEV2kx5AoPywLD6maHt49+rfCCbjzNQrxy
XTLejee19nJbpwRyXh3m9DGV1VMYp04=
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:46:35 2025 by rpki-client