Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/32332e3133372e3233362e302f32342d3234203d3e20343031363832.roa
File:                     32332e3133372e3233362e302f32342d3234203d3e20343031363832.roa (raw, json)
Hash identifier:          Emr07Qb6xmwyEMTV5TDZah5tg+PybXGtV18qCQ23JJA=
Subject key identifier:   EB:EF:D3:7B:50:A4:1F:58:E5:93:0F:C5:69:E8:49:2E:A4:DB:A2:13
Certificate issuer:       /CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959
Certificate serial:       4F9303125C8BACAE39668233982B2933604B2FAA
Authority key identifier: 3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/32332e3133372e3233362e302f32342d3234203d3e20343031363832.roa
Signing time:             Wed 23 Apr 2025 00:37:32 +0000
ROA not before:           Wed 23 Apr 2025 00:32:32 +0000
ROA not after:            Wed 22 Apr 2026 00:37:32 +0000
asID:                     401682
IP address blocks:        23.137.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 09:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:93:03:12:5c:8b:ac:ae:39:66:82:33:98:2b:29:33:60:4b:2f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959
        Validity
            Not Before: Apr 23 00:32:32 2025 GMT
            Not After : Apr 22 00:37:32 2026 GMT
        Subject: CN=EBEFD37B50A41F58E5930FC569E8492EA4DBA213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:52:cd:11:17:fa:58:bd:41:1d:be:62:0b:
                    fb:db:e0:90:d9:13:da:8a:89:40:86:4e:47:3d:c9:
                    cc:90:47:d1:32:fd:a8:df:9c:95:64:9c:38:3e:87:
                    51:d2:ef:82:98:92:ef:95:0e:1e:e3:db:fe:61:28:
                    c1:ba:3f:91:13:1c:dc:d1:78:1e:5e:04:6e:3c:b4:
                    3b:50:90:7d:b4:61:91:e0:1a:eb:e9:d0:f0:3a:01:
                    75:61:77:f7:14:b6:cb:a2:cd:25:9d:cf:03:6d:2b:
                    3f:41:60:de:17:dd:a2:75:4d:dd:ca:94:0d:30:eb:
                    f6:08:3a:54:cc:0a:18:cd:b3:01:11:8f:80:7c:c7:
                    8d:3f:f3:76:61:bb:6c:1c:19:b5:c8:a0:99:50:e0:
                    23:5b:5d:51:12:f9:f4:e5:d6:86:76:d9:5b:aa:e1:
                    01:6b:08:66:36:3b:71:0b:ce:1d:09:bc:c5:4e:37:
                    29:33:2a:f6:73:59:64:06:9f:fd:c7:7f:b2:69:40:
                    9e:b8:0a:c7:87:7d:cf:1a:40:20:d2:31:07:74:a4:
                    6d:56:52:7b:3b:7d:c9:53:a7:40:8d:10:a3:95:72:
                    c6:a0:3a:b7:b4:eb:a1:a6:8f:a8:a4:12:19:91:df:
                    6c:2e:95:80:a7:2f:51:96:cc:66:fe:cd:75:74:0b:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EF:D3:7B:50:A4:1F:58:E5:93:0F:C5:69:E8:49:2E:A4:DB:A2:13
            X509v3 Authority Key Identifier:
                keyid:3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/32332e3133372e3233362e302f32342d3234203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:5d:88:e7:e8:b6:a4:da:0e:ae:45:bb:d6:f6:3e:72:3b:9d:
         35:d9:2c:98:76:2d:a4:86:2e:da:33:13:ce:93:8a:c1:f7:51:
         5f:18:d5:be:67:a9:95:84:23:da:04:c8:95:9b:74:ec:bc:ad:
         f8:d0:d3:75:a4:b0:32:4d:59:17:6e:65:76:d0:0e:47:3a:42:
         3b:04:86:de:e3:58:07:16:7b:97:0b:ef:38:27:af:8a:ee:b6:
         00:00:4a:c3:48:45:0e:ba:36:10:81:f4:ba:c2:c6:2d:d7:19:
         4a:d4:d7:08:b6:04:e4:1c:8e:73:76:44:d9:42:8d:f2:82:34:
         36:64:5f:f1:49:4b:2a:22:08:45:dc:56:0b:01:f4:19:06:98:
         5b:50:20:ae:6b:f2:41:60:c4:09:96:e2:e7:18:08:ed:8c:79:
         4a:8d:f7:a8:37:10:4e:11:d0:c6:06:dd:6d:d1:a5:e3:8b:8e:
         3d:93:b8:0f:96:a8:5a:5d:d2:89:f8:ea:e2:f1:f9:47:ea:7e:
         06:73:1c:ec:b0:4d:df:74:3d:88:56:12:4f:e6:80:b0:4f:cf:
         26:88:a2:82:87:56:7b:c7:47:34:21:5a:ee:5e:b0:55:25:90:
         fd:d1:fe:80:32:22:65:3d:a4:aa:94:65:f7:49:40:c9:b5:de:
         74:d4:a2:b5
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUT5MDElyLrK45ZoIzmCspM2BLL6owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTg3NDFhYzRmMWZmOWEwNjg4ZjFiNWJmMTM1NWU1Nzg4
Mzc0MjUzNDYxMjM1NmQ5NTkwHhcNMjUwNDIzMDAzMjMyWhcNMjYwNDIyMDAzNzMy
WjAzMTEwLwYDVQQDEyhFQkVGRDM3QjUwQTQxRjU4RTU5MzBGQzU2OUU4NDkyRUE0
REJBMjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRtSzREX+li9
QR2+Ygv72+CQ2RPaiolAhk5HPcnMkEfRMv2o35yVZJw4PodR0u+CmJLvlQ4e49v+
YSjBuj+RExzc0XgeXgRuPLQ7UJB9tGGR4Brr6dDwOgF1YXf3FLbLos0lnc8DbSs/
QWDeF92idU3dypQNMOv2CDpUzAoYzbMBEY+AfMeNP/N2YbtsHBm1yKCZUOAjW11R
Evn05daGdtlbquEBawhmNjtxC84dCbzFTjcpMyr2c1lkBp/9x3+yaUCeuArHh33P
GkAg0jEHdKRtVlJ7O33JU6dAjRCjlXLGoDq3tOuhpo+opBIZkd9sLpWApy9Rlsxm
/s11dAuQFQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFOvv03tQpB9Y5ZMPxWnoSS6k
26ITMB8GA1UdIwQYMBaAFDuj+4k9g4oVcYpbxxV1DO2Jnv0fMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3LzAv
M0JBM0ZCODkzRDgzOEExNTcxOEE1QkM3MTU3NTBDRUQ4OTlFRkQxRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQyLTAzMzJlOTA2MDEzMi9lODc0
MWFjNGYxZmY5YTA2ODhmMWI1YmYxMzU1ZTU3ODgzNzQyNTM0NjEyMzU2ZDk1OS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3
NGI0MmNhMTg2Ny8wLzMyMzMyZTMxMzMzNzJlMzIzMzM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzMDMxMzYzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4nsMA0GCSqGSIb3DQEB
CwUAA4IBAQBbXYjn6Lak2g6uRbvW9j5yO5012SyYdi2khi7aMxPOk4rB91FfGNW+
Z6mVhCPaBMiVm3TsvK340NN1pLAyTVkXbmV20A5HOkI7BIbe41gHFnuXC+84J6+K
7rYAAErDSEUOujYQgfS6wsYt1xlK1NcItgTkHI5zdkTZQo3ygjQ2ZF/xSUsqIghF
3FYLAfQZBphbUCCua/JBYMQJluLnGAjtjHlKjfeoNxBOEdDGBt1t0aXji449k7gP
lqhaXdKJ+Ori8flH6n4GcxzssE3fdD2IVhJP5oCwT88miKKCh1Z7x0c0IVruXrBV
JZD90f6AMiJlPaSqlGX3SUDJtd501KK1
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:56:17 2025 by rpki-client