Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/a430f732-5489-393e-9c05-8d4997ae2eaf.roa
File:                     a430f732-5489-393e-9c05-8d4997ae2eaf.roa (raw, json)
Hash identifier:          6vBTUKzVZ6iSjHE8I3hB3CPuEG2WRWYn7/Z20vruIJw=
Subject key identifier:   AE:E4:51:32:9B:1E:04:42:5E:55:78:ED:2F:EA:34:72:0B:10:ED:BB
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F432858483455600EEE49DEDB832B5500
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/a430f732-5489-393e-9c05-8d4997ae2eaf.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     53667
IP address blocks:        23.183.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:60:0e:ee:49:de:db:83:2b:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=8131f228-6996-48d4-a243-eb7b908311b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f9:39:68:ad:e4:55:6e:a4:14:76:5e:54:28:
                    9b:f1:c1:34:b9:6d:47:a6:27:b3:b6:3d:d6:d9:19:
                    a6:4e:ce:8a:ab:ff:9a:b6:2c:14:3b:56:50:41:fe:
                    13:92:16:a3:69:84:25:88:fe:00:36:9d:73:7e:25:
                    30:3e:87:4a:c2:7b:6b:e5:2c:49:e2:d2:dd:81:8f:
                    64:ef:8c:1b:97:44:7c:de:c8:a3:45:c7:06:b3:6b:
                    25:4f:05:83:08:82:25:6e:33:75:d7:c9:6b:34:1a:
                    43:c4:6c:bd:8e:8f:b6:67:a3:f9:25:30:cf:b8:ff:
                    83:3b:af:a9:26:11:16:0b:87:94:67:9b:4a:9f:6b:
                    95:f4:51:b4:5c:05:a5:15:4b:00:a0:3e:a5:4d:52:
                    cf:41:70:7d:c6:ee:d5:ce:a8:25:d6:90:3b:e4:a6:
                    9d:f1:bb:fd:fe:18:10:05:98:e9:96:40:31:f4:53:
                    e1:ee:d7:38:65:b6:b5:63:1b:e2:9e:6c:8e:b0:be:
                    7f:05:c9:40:0f:6e:f3:3b:aa:fd:0a:5b:21:2e:2f:
                    04:53:63:b1:0a:16:19:c4:89:2c:c0:fd:33:cc:ed:
                    1c:08:61:03:73:72:27:89:0d:c3:c2:83:97:80:69:
                    47:50:3e:62:6f:77:7b:97:53:3b:4a:66:4b:ed:dd:
                    d5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E4:51:32:9B:1E:04:42:5E:55:78:ED:2F:EA:34:72:0B:10:ED:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/a430f732-5489-393e-9c05-8d4997ae2eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:55:f7:73:1e:87:a1:bb:d8:ab:70:c4:d2:47:a6:45:9f:62:
         05:59:f4:69:4c:b1:ea:00:15:b5:1c:e5:3b:48:ce:50:f2:0a:
         63:88:45:e4:63:27:0c:0d:08:74:ee:42:ad:da:9f:bf:f1:dd:
         3c:4c:e8:32:28:14:62:4e:15:ab:b8:46:4b:49:77:b0:97:72:
         95:e4:51:56:58:69:14:b2:83:41:87:0a:c6:bd:76:64:96:36:
         6a:e8:6b:38:26:58:02:08:d0:8a:1f:a8:61:53:fe:f8:1a:ae:
         80:61:93:66:6e:07:f9:30:1f:ff:b1:a4:9c:23:aa:b9:be:27:
         cf:06:e7:da:c9:d1:86:a4:ec:c9:77:61:c9:96:05:cb:6c:c2:
         1a:03:36:aa:6a:9d:59:7e:4f:c0:77:93:1d:71:92:2d:e2:01:
         04:51:6c:c3:42:b3:a7:3d:6f:cc:8a:a0:c1:6e:3f:1a:7f:c7:
         f3:3a:ed:71:52:09:48:0d:57:df:f4:63:86:bc:af:c8:d5:84:
         82:b5:8a:7b:2d:48:db:d0:5b:74:39:dd:61:d6:24:19:28:88:
         02:b3:0f:f5:8f:34:c7:09:c9:35:11:1b:58:8e:fa:a5:53:bb:
         73:ab:a8:78:93:9a:0a:8c:33:f1:81:01:2b:e1:b8:97:01:67:
         25:11:75:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VWAO7kne24MrVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi
OWQ3MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
ODEzMWYyMjgtNjk5Ni00OGQ0LWEyNDMtZWI3YjkwODMxMWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifk5aK3kVW6kFHZeVCib8cE0uW1Hpieztj3W
2RmmTs6Kq/+atiwUO1ZQQf4TkhajaYQliP4ANp1zfiUwPodKwntr5SxJ4tLdgY9k
74wbl0R83sijRccGs2slTwWDCIIlbjN118lrNBpDxGy9jo+2Z6P5JTDPuP+DO6+p
JhEWC4eUZ5tKn2uV9FG0XAWlFUsAoD6lTVLPQXB9xu7Vzqgl1pA75Kad8bv9/hgQ
BZjplkAx9FPh7tc4Zba1YxvinmyOsL5/BclAD27zO6r9ClshLi8EU2OxChYZxIks
wP0zzO0cCGEDc3IniQ3DwoOXgGlHUD5ib3d7l1M7SmZL7d3VIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK7kUTKbHgRCXlV47S/qNHILEO27MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi
NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvYTQzMGY3MzItNTQ4OS0z
OTNlLTljMDUtOGQ0OTk3YWUyZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj
MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi
YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm
NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7dRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZV93Meh6G72KtwxNJHpkWfYgVZ9GlMseoAFbUc5TtIzlDyCmOIReRj
JwwNCHTuQq3an7/x3TxM6DIoFGJOFau4RktJd7CXcpXkUVZYaRSyg0GHCsa9dmSW
NmroazgmWAII0IofqGFT/vgaroBhk2ZuB/kwH/+xpJwjqrm+J88G59rJ0Yak7Ml3
YcmWBctswhoDNqpqnVl+T8B3kx1xki3iAQRRbMNCs6c9b8yKoMFuPxp/x/M67XFS
CUgNV9/0Y4a8r8jVhIK1instSNvQW3Q53WHWJBkoiAKzD/WPNMcJyTURG1iO+qVT
u3OrqHiTmgqMM/GBASvhuJcBZyURdZQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:32 2025 by rpki-client