Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444ef75-c7e4-3273-828e-13da92d78462.roa
File:                     3444ef75-c7e4-3273-828e-13da92d78462.roa (raw, json)
Hash identifier:          VCjgt+8MXvhZjjqCOpGyeN+5nmMTvio0taSRZWOwB8E=
Subject key identifier:   28:BB:F5:86:BC:1A:A1:75:E6:6F:23:1D:F8:12:A4:B3:C1:BC:68:D7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858495C247E16EC9AA9C3882A5980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444ef75-c7e4-3273-828e-13da92d78462.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     16625
IP address blocks:        23.45.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:7e:16:ec:9a:a9:c3:88:2a:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=f88694f9-7fae-49ac-adcb-9f8ebbe9aa64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:23:fb:11:68:7a:8a:4b:67:71:9a:11:01:
                    c6:ba:66:f2:25:f7:2b:9a:59:e6:c8:28:bd:e2:03:
                    ae:65:28:1f:ec:6e:8e:22:66:29:7f:62:1c:72:d8:
                    2d:84:ba:6e:e9:a0:98:a0:5a:e9:2d:62:db:36:34:
                    8a:ac:87:5e:f7:f5:a1:63:05:f9:74:43:61:fd:b4:
                    7f:df:36:12:a2:01:f2:17:3c:66:26:40:43:6e:0c:
                    d0:62:bd:e3:d2:5d:f9:fb:4a:5d:24:11:8e:dd:68:
                    b3:63:81:e6:a8:a2:e8:27:14:03:6a:ac:51:dc:e6:
                    c2:c0:75:d9:15:57:46:16:41:2c:ec:9a:33:69:74:
                    36:e8:f8:87:bc:b9:06:dc:4c:50:41:63:1a:42:c3:
                    10:26:0b:9f:d7:47:51:2e:45:c1:34:30:af:7b:00:
                    dd:d7:19:77:b5:3e:94:70:99:03:88:33:5a:f9:9c:
                    9e:89:87:2b:eb:3f:e1:f5:4a:bb:22:80:03:34:0b:
                    2c:08:24:dd:00:a8:41:f0:2f:41:92:bb:fb:fd:3e:
                    42:9c:24:d7:f4:1b:fd:57:12:d8:55:4d:5c:32:ce:
                    20:11:e7:9c:11:56:33:bb:fb:11:ec:15:43:2b:bb:
                    e2:6a:c2:5b:9a:9e:d0:cb:e9:4d:6b:e9:5c:2a:28:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BB:F5:86:BC:1A:A1:75:E6:6F:23:1D:F8:12:A4:B3:C1:BC:68:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444ef75-c7e4-3273-828e-13da92d78462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.45.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:bd:51:e9:49:86:b3:d0:cf:bc:da:6b:ac:54:15:09:a5:d3:
         a7:d3:15:35:97:01:98:f4:6b:a2:9e:21:3e:16:19:76:b0:ca:
         8d:37:1c:0a:f2:2f:14:8c:bf:08:12:64:c3:c9:cf:cb:5b:98:
         52:b1:40:90:f7:57:92:7c:16:35:6b:b9:e7:41:48:92:32:9e:
         e7:de:ad:12:71:91:67:3d:8c:55:4f:ee:22:32:d8:70:f7:4a:
         0c:ff:bd:f0:29:11:8c:bf:e0:65:ce:91:eb:32:86:2e:54:61:
         e2:de:45:62:ca:a6:bf:b6:f3:b6:36:fd:a7:fb:20:4c:7f:be:
         71:57:3a:4b:c7:14:e0:b6:bb:da:a9:cb:43:84:a8:4c:9e:ed:
         6f:f5:d8:84:89:1d:58:e0:fa:b5:9c:1f:f4:c3:de:20:f2:73:
         fe:36:3a:31:e1:6c:6a:b6:08:16:0a:9d:69:f5:bb:77:ae:d3:
         ba:a1:f0:10:de:9b:be:c4:88:03:01:ef:c0:cf:df:8a:d1:45:
         1c:f7:47:f7:9b:70:17:60:cb:dd:82:34:bd:82:50:3c:b4:4c:
         a3:49:2e:6d:0b:08:8e:09:f4:31:34:a8:ef:b3:f5:99:8c:a7:
         7d:b7:d9:e2:54:da:94:3f:6b:50:ff:fe:e1:0a:1e:29:cc:5f:
         54:c9:59:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJH4W7Jqpw4gqWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
Zjg4Njk0ZjktN2ZhZS00OWFjLWFkY2ItOWY4ZWJiZTlhYTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lAj+xFoeopLZ3GaEQHGumbyJfcrmlnmyCi9
4gOuZSgf7G6OImYpf2IcctgthLpu6aCYoFrpLWLbNjSKrIde9/WhYwX5dENh/bR/
3zYSogHyFzxmJkBDbgzQYr3j0l35+0pdJBGO3WizY4HmqKLoJxQDaqxR3ObCwHXZ
FVdGFkEs7JozaXQ26PiHvLkG3ExQQWMaQsMQJguf10dRLkXBNDCvewDd1xl3tT6U
cJkDiDNa+ZyeiYcr6z/h9Uq7IoADNAssCCTdAKhB8C9Bkrv7/T5CnCTX9Bv9VxLY
VU1cMs4gEeecEVYzu/sR7BVDK7viasJbmp7Qy+lNa+lcKigWtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCi79Ya8GqF15m8jHfgSpLPBvGjXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQ0NGVmNzUtYzdlNC0z
MjczLTgyOGUtMTNkYTkyZDc4NDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFy0gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJO9UelJhrPQz7zaa6xUFQml06fTFTWXAZj0a6KeIT4WGXawyo03HAry
LxSMvwgSZMPJz8tbmFKxQJD3V5J8FjVruedBSJIynuferRJxkWc9jFVP7iIy2HD3
Sgz/vfApEYy/4GXOkesyhi5UYeLeRWLKpr+287Y2/af7IEx/vnFXOkvHFOC2u9qp
y0OEqEye7W/12ISJHVjg+rWcH/TD3iDyc/42OjHhbGq2CBYKnWn1u3eu07qh8BDe
m77EiAMB78DP34rRRRz3R/ebcBdgy92CNL2CUDy0TKNJLm0LCI4J9DE0qO+z9ZmM
p3232eJU2pQ/a1D//uEKHinMX1TJWeY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:59 2025 by rpki-client