Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f83a408a-29d8-3125-a5f7-ea4ad37ffd1d.roa
File:                     f83a408a-29d8-3125-a5f7-ea4ad37ffd1d.roa (raw, json)
Hash identifier:          FXGlkEWGLU4TGaPDvpwCn8FWelWQTLYPF06Qmc1L4+I=
Subject key identifier:   7F:3A:65:BD:68:D2:8A:C4:AD:9E:82:63:EE:8A:AF:2B:86:2A:D4:C8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848BBBB98484482FA497C317DD0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f83a408a-29d8-3125-a5f7-ea4ad37ffd1d.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     55836
IP address blocks:        23.213.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:98:48:44:82:fa:49:7c:31:7d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=8372b48c-5ae9-4eb0-b4da-dbd10c334330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6f:c8:72:ae:bc:a7:ee:07:79:a4:58:06:3b:
                    6e:55:29:1e:e6:95:ee:51:8d:c4:aa:41:15:8d:59:
                    0f:23:a6:16:7a:9d:e2:18:c8:b6:56:b2:07:d4:92:
                    aa:55:6c:83:af:96:bc:f1:ef:41:6a:8c:f9:08:51:
                    eb:5d:ec:56:b0:f4:e9:dc:7d:c6:20:07:b5:73:43:
                    ef:77:d2:ee:83:07:bb:5d:fb:fb:e6:20:88:49:20:
                    c1:04:2d:40:8a:9e:bf:4d:0f:92:cc:7a:95:1f:49:
                    c4:73:2e:9f:72:7c:b0:09:a4:d0:b6:0b:e6:16:cd:
                    0f:df:4e:e1:cc:35:95:19:73:b0:67:e6:ee:1f:b0:
                    22:5f:1a:fd:cf:77:04:f2:7c:f8:52:b6:25:6d:3d:
                    d7:93:6c:40:dc:83:a6:4e:e1:e4:dc:e7:e2:a4:60:
                    77:e3:8d:92:67:e0:2c:a8:13:60:91:13:31:e1:49:
                    b3:23:94:fe:c0:2a:77:f6:07:ff:bf:1c:5d:12:7c:
                    fc:da:12:55:83:d8:ae:64:03:7b:3e:72:14:57:59:
                    37:b9:00:4f:76:25:c9:d8:3d:54:f8:91:45:e8:0c:
                    e1:5a:29:6e:0e:13:0e:59:b2:e9:a4:a6:ad:35:82:
                    9e:44:3d:1e:c7:b2:fb:1b:4b:42:c5:6f:0d:64:15:
                    ae:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3A:65:BD:68:D2:8A:C4:AD:9E:82:63:EE:8A:AF:2B:86:2A:D4:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f83a408a-29d8-3125-a5f7-ea4ad37ffd1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f0:7c:4c:54:42:a4:13:81:71:0a:62:a2:09:3d:f9:b0:e8:
         58:e1:6f:75:96:d9:2b:88:55:a7:13:f5:e4:0d:1a:f7:09:27:
         fa:d3:58:43:6f:90:d4:3e:a9:a9:bc:6b:3f:86:5d:6e:8c:51:
         e5:d1:cf:0e:53:70:7e:5b:91:96:ab:94:1e:fd:2c:dd:ac:46:
         b8:13:cd:e0:4b:53:f6:53:88:99:aa:34:84:0f:9e:90:9a:80:
         80:52:f4:a6:37:48:eb:ad:b2:13:1c:e7:6e:9d:4c:00:35:9d:
         cc:79:b7:7e:6c:7c:b9:e2:0a:52:03:3b:47:78:a8:80:07:74:
         ba:15:5d:fc:29:52:e5:a0:f1:8f:44:cd:c3:82:81:a9:a4:16:
         e8:af:c3:16:ad:7b:41:72:4c:5a:65:d7:f8:08:83:ab:78:39:
         e5:75:ad:43:9a:9e:e7:94:ec:db:5d:09:ee:dd:4a:1c:29:da:
         e0:1b:dd:db:af:1d:85:32:e1:a6:21:78:4a:0e:da:b0:3c:9f:
         c6:da:47:a6:06:a5:86:10:0b:2b:9f:86:ce:5f:bb:8c:8c:86:
         1d:f8:6c:35:ff:08:5c:fd:48:a4:77:91:bb:f6:ee:e8:58:e2:
         a1:7d:71:92:eb:6d:d0:36:5a:e0:3e:06:1a:c8:9c:98:51:a6:
         da:2a:94:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u5hIRIL6SXwxfdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
ODM3MmI0OGMtNWFlOS00ZWIwLWI0ZGEtZGJkMTBjMzM0MzMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG/Icq68p+4HeaRYBjtuVSke5pXuUY3EqkEV
jVkPI6YWep3iGMi2VrIH1JKqVWyDr5a88e9Baoz5CFHrXexWsPTp3H3GIAe1c0Pv
d9Lugwe7Xfv75iCISSDBBC1Aip6/TQ+SzHqVH0nEcy6fcnywCaTQtgvmFs0P307h
zDWVGXOwZ+buH7AiXxr9z3cE8nz4UrYlbT3Xk2xA3IOmTuHk3OfipGB3442SZ+As
qBNgkRMx4UmzI5T+wCp39gf/vxxdEnz82hJVg9iuZAN7PnIUV1k3uQBPdiXJ2D1U
+JFF6AzhWiluDhMOWbLppKatNYKeRD0ex7L7G0tCxW8NZBWuNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH86Zb1o0orErZ6CY+6KryuGKtTIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjgzYTQwOGEtMjlkOC0z
MTI1LWE1ZjctZWE0YWQzN2ZmZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9UMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHwfExUQqQTgXEKYqIJPfmw6Fjhb3WW2SuIVacT9eQNGvcJJ/rTWENv
kNQ+qam8az+GXW6MUeXRzw5TcH5bkZarlB79LN2sRrgTzeBLU/ZTiJmqNIQPnpCa
gIBS9KY3SOutshMc526dTAA1ncx5t35sfLniClIDO0d4qIAHdLoVXfwpUuWg8Y9E
zcOCgamkFuivwxate0FyTFpl1/gIg6t4OeV1rUOanueU7NtdCe7dShwp2uAb3duv
HYUy4aYheEoO2rA8n8baR6YGpYYQCyufhs5fu4yMhh34bDX/CFz9SKR3kbv27uhY
4qF9cZLrbdA2WuA+BhrInJhRptoqlJE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:32 2025 by rpki-client