Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e46ca754-1298-3ac1-bd5b-394ee5346fc3.roa
File:                     e46ca754-1298-3ac1-bd5b-394ee5346fc3.roa (raw, json)
Hash identifier:          nM3ca6aUrw7s67WYNlTd3dRmScZMzIwTuqFAW8E0gLw=
Subject key identifier:   11:AB:E4:C9:30:DD:5A:99:31:FE:3D:81:54:B6:0B:62:37:6C:BD:7A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849F2E54CC360EC194B448FD460
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e46ca754-1298-3ac1-bd5b-394ee5346fc3.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     20940
IP address blocks:        23.64.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:4c:c3:60:ec:19:4b:44:8f:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=821660c7-1abb-4a2a-bbe1-0e1fc29b42b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b2:15:8e:43:e7:26:e5:22:04:f4:88:aa:b0:
                    74:95:93:22:43:ff:16:5c:58:72:43:05:34:54:01:
                    b7:15:69:7b:a8:86:a7:39:dd:c1:e6:88:3b:28:ef:
                    e2:5d:38:7b:be:7b:59:bd:2c:37:67:4f:43:43:6d:
                    2d:f7:8d:29:bc:83:fb:63:53:67:79:7b:1e:33:7f:
                    17:a4:a2:00:98:ce:4d:cc:8b:5e:fa:fa:4b:66:71:
                    37:60:76:c8:ff:f4:16:29:ad:99:aa:ce:8e:f1:ee:
                    c8:22:d3:e4:94:f9:a5:16:4a:a6:41:1b:b7:f7:6a:
                    3d:9d:8a:51:f5:aa:62:fd:a0:bf:50:2a:80:fe:00:
                    94:bc:75:6c:5c:1a:3f:34:ee:ee:3c:f4:8f:68:6d:
                    7a:81:8a:88:c4:fe:ca:ee:17:27:64:a2:2b:76:3e:
                    db:ee:6c:bc:60:a3:28:17:91:42:b6:ad:f4:1b:74:
                    c0:70:09:1e:12:c9:57:bb:a6:36:eb:1b:3d:31:7e:
                    ef:1b:68:e0:ac:0f:8f:fb:51:3f:f0:4f:19:50:54:
                    88:d6:3a:9b:e5:c3:6d:9b:39:54:25:60:f5:57:80:
                    c9:c0:e1:95:6e:a3:17:a5:11:90:54:e6:a1:c0:89:
                    dd:03:99:80:87:3b:11:8b:de:95:83:9b:fb:28:2e:
                    3c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AB:E4:C9:30:DD:5A:99:31:FE:3D:81:54:B6:0B:62:37:6C:BD:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e46ca754-1298-3ac1-bd5b-394ee5346fc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.64.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f6:4b:9e:5c:cc:a5:e5:18:a3:2d:06:78:e3:06:21:7d:39:
         c9:a1:39:a7:60:ab:7c:7d:57:4c:db:c8:69:7c:84:08:da:43:
         e6:a1:ad:0c:6a:a4:d9:2c:28:f3:81:3d:e0:67:71:a1:19:a7:
         7d:b9:12:15:5f:1e:c0:8d:a9:25:7b:d4:71:e2:eb:d5:8e:66:
         32:2c:fe:49:85:6a:17:42:b2:74:f0:76:21:05:fc:53:64:ff:
         17:6e:d1:05:ea:4f:74:98:55:02:9f:79:9e:8f:7f:6a:99:81:
         67:e6:10:96:2d:11:3f:65:0c:f4:e4:81:24:a2:da:d9:b9:54:
         5c:50:03:aa:2c:5d:a2:3a:ba:02:0f:0c:50:2e:ac:2a:36:bb:
         d3:8c:e6:c4:36:19:8d:10:9f:56:48:b0:d8:fb:8f:44:3b:ab:
         63:72:b2:f8:b8:6b:1c:e3:fb:46:ed:51:66:0c:c7:72:fb:dd:
         c6:e1:e2:1f:ed:28:f0:e5:6b:5d:cc:38:00:44:c9:46:22:e1:
         5a:73:f5:7c:5b:03:a5:98:d6:99:36:2e:7d:ed:b5:48:44:2e:
         5c:e0:f1:9f:a6:e9:7a:9e:49:0b:8d:88:1e:d2:f2:b7:95:ab:
         bb:4a:ba:3f:85:c9:41:f7:b2:db:bc:fc:1b:d3:d8:5f:fd:3f:
         72:49:5f:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5UzDYOwZS0SP1GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk
ODIxNjYwYzctMWFiYi00YTJhLWJiZTEtMGUxZmMyOWI0MmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7IVjkPnJuUiBPSIqrB0lZMiQ/8WXFhyQwU0
VAG3FWl7qIanOd3B5og7KO/iXTh7vntZvSw3Z09DQ20t940pvIP7Y1NneXseM38X
pKIAmM5NzIte+vpLZnE3YHbI//QWKa2Zqs6O8e7IItPklPmlFkqmQRu392o9nYpR
9api/aC/UCqA/gCUvHVsXBo/NO7uPPSPaG16gYqIxP7K7hcnZKIrdj7b7my8YKMo
F5FCtq30G3TAcAkeEslXu6Y26xs9MX7vG2jgrA+P+1E/8E8ZUFSI1jqb5cNtmzlU
JWD1V4DJwOGVbqMXpRGQVOahwIndA5mAhzsRi96Vg5v7KC48ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBGr5Mkw3VqZMf49gVS2C2I3bL16MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQ2Y2E3NTQtMTI5OC0z
YWMxLWJkNWItMzk0ZWU1MzQ2ZmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0A5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAf2S55czKXlGKMtBnjjBiF9OcmhOadgq3x9V0zbyGl8hAjaQ+ahrQxq
pNksKPOBPeBncaEZp325EhVfHsCNqSV71HHi69WOZjIs/kmFahdCsnTwdiEF/FNk
/xdu0QXqT3SYVQKfeZ6Pf2qZgWfmEJYtET9lDPTkgSSi2tm5VFxQA6osXaI6ugIP
DFAurCo2u9OM5sQ2GY0Qn1ZIsNj7j0Q7q2Nysvi4axzj+0btUWYMx3L73cbh4h/t
KPDla13MOABEyUYi4Vpz9XxbA6WY1pk2Ln3ttUhELlzg8Z+m6XqeSQuNiB7S8reV
q7tKuj+FyUH3stu8/BvT2F/9P3JJX0w=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:36:14 2025 by rpki-client