Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dea1430-4d73-32b5-a120-d229c9a2faba.roa
File:                     5dea1430-4d73-32b5-a120-d229c9a2faba.roa (raw, json)
Hash identifier:          NHRmGIdT6zUC1uRw2+/U2L6Z/Z01KSKZKNocZxEurHI=
Subject key identifier:   11:D5:89:31:5C:77:4D:CC:71:7E:8A:61:B7:F4:75:8B:3A:47:BC:B0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858495ABED740CC26E24631C44DC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dea1430-4d73-32b5-a120-d229c9a2faba.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     20940
IP address blocks:        23.36.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:d7:40:cc:26:e2:46:31:c4:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=a255e11a-f2ec-4ca7-94e9-9f0cf6468af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:3e:07:22:97:01:6d:70:f7:58:1f:6f:de:
                    9f:47:52:2b:96:28:91:0f:88:ac:3c:1e:a4:c1:95:
                    55:19:5b:ce:18:63:3a:ef:85:f3:6e:1f:b7:dd:4e:
                    56:aa:51:95:62:f3:43:04:1c:7f:52:60:45:30:2d:
                    3a:de:6d:a4:69:43:47:03:7b:17:dd:b7:19:fc:98:
                    f5:b3:28:d7:19:30:bf:64:0f:04:5d:1f:47:8e:1d:
                    37:d2:01:1b:f0:18:46:ac:6a:11:b0:34:e6:44:47:
                    d4:48:54:55:90:95:f4:46:19:36:76:13:9b:2f:14:
                    00:aa:3c:b5:d0:8e:42:e1:d0:b7:5d:7a:93:4e:8f:
                    63:b7:a9:b9:6c:f1:15:ce:f2:cc:6a:fe:78:6c:01:
                    f1:30:dc:f7:e5:87:78:d0:35:55:ed:8a:df:ee:68:
                    7a:27:54:be:22:2b:d0:be:42:ff:3e:0f:73:b4:59:
                    1d:05:5d:d9:89:55:2f:0e:c1:03:c6:9d:c9:0f:52:
                    97:f6:f1:ad:96:6d:be:03:b7:76:a6:7a:80:6c:e2:
                    8c:35:46:83:1c:b9:00:ba:4b:cd:cf:d1:1d:37:36:
                    fe:9d:8c:df:f1:e4:4e:1c:76:c3:60:4e:27:c3:2e:
                    f1:21:f8:de:76:d1:05:98:95:70:9b:1e:81:e4:82:
                    73:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D5:89:31:5C:77:4D:CC:71:7E:8A:61:B7:F4:75:8B:3A:47:BC:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dea1430-4d73-32b5-a120-d229c9a2faba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.36.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:20:ec:29:f7:c7:88:bb:0d:08:27:cb:db:c2:ac:4f:01:71:
         65:37:d1:2b:ac:04:30:8b:1b:d2:75:0b:47:a5:4b:02:77:b4:
         ee:08:2a:19:21:5d:d5:86:98:8b:73:cd:ff:dd:ef:b7:a2:f4:
         ec:01:cb:7f:b7:8a:08:c6:8b:80:fb:46:ab:59:4a:58:80:6f:
         ca:c2:02:0e:28:72:5d:81:85:4f:1c:83:9e:46:4f:32:33:52:
         42:e4:e6:04:93:55:9a:5e:82:d7:f4:9f:cb:fc:6e:67:39:57:
         ca:0c:9b:47:ac:54:61:be:13:93:b5:be:ae:cc:13:c6:6f:cb:
         ab:89:19:77:a8:4b:ba:84:df:8d:a6:76:77:e9:bf:21:af:bc:
         63:c0:91:50:e0:2c:e9:e3:cb:08:a1:5f:f1:0e:37:e0:a8:bd:
         76:f5:27:71:b4:e0:03:f9:bc:b9:d6:72:29:fb:a3:be:fc:ab:
         17:11:0a:be:95:df:46:40:a4:76:b1:5f:3a:74:d3:b6:da:57:
         6d:b2:e6:df:ab:ab:28:98:ba:93:88:dc:e2:48:d9:3b:6a:1b:
         77:b0:bd:a3:05:f9:c7:9c:4c:37:c6:19:1f:f0:13:bb:9e:de:
         74:80:df:ad:ad:6f:d6:34:9c:4f:f9:77:da:86:8f:f2:10:24:
         6a:6a:34:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtdAzCbiRjHETcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
YTI1NWUxMWEtZjJlYy00Y2E3LTk0ZTktOWYwY2Y2NDY4YWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+I+ByKXAW1w91gfb96fR1IrliiRD4isPB6k
wZVVGVvOGGM674Xzbh+33U5WqlGVYvNDBBx/UmBFMC063m2kaUNHA3sX3bcZ/Jj1
syjXGTC/ZA8EXR9Hjh030gEb8BhGrGoRsDTmREfUSFRVkJX0Rhk2dhObLxQAqjy1
0I5C4dC3XXqTTo9jt6m5bPEVzvLMav54bAHxMNz35Yd40DVV7Yrf7mh6J1S+IivQ
vkL/Pg9ztFkdBV3ZiVUvDsEDxp3JD1KX9vGtlm2+A7d2pnqAbOKMNUaDHLkAukvN
z9EdNzb+nYzf8eROHHbDYE4nwy7xIfjedtEFmJVwmx6B5IJztQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBHViTFcd03McX6KYbf0dYs6R7ywMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWRlYTE0MzAtNGQ3My0z
MmI1LWExMjAtZDIyOWM5YTJmYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyS8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0g7Cn3x4i7DQgny9vCrE8BcWU30SusBDCLG9J1C0elSwJ3tO4IKhkh
XdWGmItzzf/d77ei9OwBy3+3igjGi4D7RqtZSliAb8rCAg4ocl2BhU8cg55GTzIz
UkLk5gSTVZpegtf0n8v8bmc5V8oMm0esVGG+E5O1vq7ME8Zvy6uJGXeoS7qE342m
dnfpvyGvvGPAkVDgLOnjywihX/EON+CovXb1J3G04AP5vLnWcin7o778qxcRCr6V
30ZApHaxXzp007baV22y5t+rqyiYupOI3OJI2TtqG3ewvaMF+cecTDfGGR/wE7ue
3nSA362tb9Y0nE/5d9qGj/IQJGpqNIQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:49 2025 by rpki-client