Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55683f0b-f842-3ba8-b2ee-5b8db083f974.roa
File:                     55683f0b-f842-3ba8-b2ee-5b8db083f974.roa (raw, json)
Hash identifier:          mIxY183k7HQpXZzAPk2xmbBNpqkC6iOytmRgoNGh59Y=
Subject key identifier:   F5:ED:45:11:CF:D5:F3:22:40:DC:23:67:25:E3:36:E6:19:C7:A3:7B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849FCAA78840115F0A987800C1C
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55683f0b-f842-3ba8-b2ee-5b8db083f974.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     20940
IP address blocks:        23.192.0.0/11 maxlen: 11
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:78:84:01:15:f0:a9:87:80:0c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=d978bbce-070d-4a0e-8d31-00cc4682cc92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:53:11:e7:0d:ff:fb:e1:f1:2b:1c:3a:35:
                    01:5d:91:78:ea:92:07:25:a3:51:52:2b:3a:0d:7d:
                    b8:54:21:85:d3:ff:be:81:68:55:98:ce:44:4e:f7:
                    f8:43:21:dc:16:ea:40:b8:f9:0c:f0:af:a8:aa:30:
                    aa:76:8f:68:72:e6:03:af:4c:ac:42:40:6e:ac:82:
                    1a:f2:55:13:a6:58:16:b2:82:cf:e0:44:a8:37:3a:
                    af:fb:b3:f4:88:4e:bd:77:bf:78:52:4c:18:d5:8f:
                    09:34:fc:d2:3a:ce:4a:89:12:9f:21:17:b6:77:8a:
                    70:38:66:96:b9:6c:e7:ec:4c:93:8f:77:68:62:bb:
                    97:79:4a:af:c1:90:e3:31:7a:cd:fa:75:14:b0:f7:
                    0f:d2:86:61:49:40:ba:bd:f0:93:9b:1d:1b:c6:b4:
                    f8:95:f0:5b:e3:8a:c1:4b:73:c4:30:c0:49:c5:3c:
                    1d:36:23:da:31:f3:0e:bb:07:40:6f:a4:84:1a:c2:
                    88:49:de:18:a9:5e:7e:ed:c8:ef:32:02:00:4e:26:
                    bd:04:17:d9:d6:f4:c8:6f:1a:f2:ac:39:39:39:5b:
                    26:0a:5d:b5:db:2e:26:c0:5c:2c:f8:3c:86:7b:07:
                    58:38:e8:53:63:49:30:0b:cb:da:55:a3:89:68:24:
                    f1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:ED:45:11:CF:D5:F3:22:40:DC:23:67:25:E3:36:E6:19:C7:A3:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55683f0b-f842-3ba8-b2ee-5b8db083f974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.0.0/11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e4:cd:d2:8a:e8:00:88:ee:10:64:1d:34:4e:c6:3a:8b:2d:
         49:f0:60:dc:bd:ae:ed:5b:56:71:85:59:61:67:fa:5d:fc:fc:
         cf:7d:b0:49:9e:6b:07:da:6a:af:c1:b4:04:13:56:44:2c:0b:
         77:f5:6d:71:c2:18:59:be:1c:cf:24:e9:bb:71:4c:ec:05:84:
         f8:44:95:71:18:92:c5:83:9e:5b:ab:b4:f0:45:75:d9:ca:a2:
         12:01:62:ab:e4:6c:12:85:56:57:ec:0f:70:4f:48:06:03:4a:
         09:ec:a0:3a:b6:41:83:5c:db:3a:51:56:48:9d:d0:16:d0:c5:
         83:0f:6b:52:f1:06:5a:8d:65:25:c4:4a:97:cc:4f:bc:b4:61:
         0b:81:c4:35:e3:dc:97:a4:e5:2c:55:a5:8c:b8:4a:83:21:0d:
         7c:1b:86:c8:e5:ca:70:8d:00:75:22:4d:8a:f2:dd:f1:16:28:
         41:2e:69:b3:43:fe:49:1d:46:6b:eb:5a:15:2c:e3:8e:e4:53:
         ec:82:54:5b:9e:64:9f:6d:f2:49:8a:0e:ba:35:17:11:2a:53:
         2a:08:75:26:1a:41:b5:a6:88:b0:bc:7e:60:7a:e6:d4:78:ba:
         ac:ce:ea:e5:a2:d4:f3:00:42:ce:e8:6c:d2:7e:a5:3a:b6:e0:
         a3:25:c1:ca
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEn8qniEARXwqYeADBwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk
ZDk3OGJiY2UtMDcwZC00YTBlLThkMzEtMDBjYzQ2ODJjYzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNZTEecN//vh8SscOjUBXZF46pIHJaNRUis6
DX24VCGF0/++gWhVmM5ETvf4QyHcFupAuPkM8K+oqjCqdo9ocuYDr0ysQkBurIIa
8lUTplgWsoLP4ESoNzqv+7P0iE69d794UkwY1Y8JNPzSOs5KiRKfIRe2d4pwOGaW
uWzn7EyTj3doYruXeUqvwZDjMXrN+nUUsPcP0oZhSUC6vfCTmx0bxrT4lfBb44rB
S3PEMMBJxTwdNiPaMfMOuwdAb6SEGsKISd4YqV5+7cjvMgIATia9BBfZ1vTIbxry
rDk5OVsmCl212y4mwFws+DyGewdYOOhTY0kwC8vaVaOJaCTxOwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPXtRRHP1fMiQNwjZyXjNuYZx6N7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTU2ODNmMGItZjg0Mi0z
YmE4LWIyZWUtNWI4ZGIwODNmOTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFF8AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIuTN0oroAIjuEGQdNE7GOostSfBg3L2u7VtWcYVZYWf6Xfz8z32wSZ5r
B9pqr8G0BBNWRCwLd/VtccIYWb4czyTpu3FM7AWE+ESVcRiSxYOeW6u08EV12cqi
EgFiq+RsEoVWV+wPcE9IBgNKCeygOrZBg1zbOlFWSJ3QFtDFgw9rUvEGWo1lJcRK
l8xPvLRhC4HENePcl6TlLFWljLhKgyENfBuGyOXKcI0AdSJNivLd8RYoQS5ps0P+
SR1Ga+taFSzjjuRT7IJUW55kn23ySYoOujUXESpTKgh1JhpBtaaIsLx+YHrm1Hi6
rM7q5aLU8wBCzuhs0n6lOrbgoyXByg==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:26:44 2025 by rpki-client