Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26/374ed633-bdd1-3d99-97b2-4ee9ad9c0cb3.roa
File:                     374ed633-bdd1-3d99-97b2-4ee9ad9c0cb3.roa (raw, json)
Hash identifier:          nKgHDBcOlIPGPrhg8SbGi1NGVceHUOA8fO4ZRi45sWs=
Subject key identifier:   66:F1:5D:AD:EC:7B:D2:E4:AB:00:D0:29:25:F8:00:91:96:62:FE:C6
Certificate issuer:       /CN=68769a07-faff-4fc9-92ac-0487571d9f26
Certificate serial:       010D0C9F432858499AF473EE77089AF1532FC660
Authority key identifier: 85:22:E0:14:98:4B:69:56:39:DB:27:8B:CE:91:19:82:2C:89:81:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26/374ed633-bdd1-3d99-97b2-4ee9ad9c0cb3.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     33535
IP address blocks:        23.155.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26/68769a07-faff-4fc9-92ac-0487571d9f26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26/68769a07-faff-4fc9-92ac-0487571d9f26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:73:ee:77:08:9a:f1:53:2f:c6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68769a07-faff-4fc9-92ac-0487571d9f26
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=e8b6c159-2594-41e7-abd5-261d7e00126d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a5:17:07:42:32:52:29:86:ed:5f:d6:84:4a:
                    8b:f5:dd:59:4d:0a:0a:56:96:d2:7b:d3:22:c7:56:
                    3b:e8:7e:0e:00:d1:98:96:d6:79:7e:4a:4e:53:09:
                    ce:33:d7:1a:18:43:06:e4:3b:d0:d4:dd:90:c8:5f:
                    1a:50:c0:34:14:6e:fe:f4:1a:cc:80:2c:cb:55:2e:
                    40:ef:a8:3e:2d:8e:f7:d2:00:a3:04:49:cb:6f:ea:
                    d8:5b:07:67:c5:7d:b2:46:50:a2:d0:47:38:3b:ee:
                    3c:fa:80:24:2a:54:60:43:68:60:2e:b6:5c:b2:30:
                    15:97:50:00:07:fe:22:2d:bf:c0:29:59:60:b2:82:
                    97:ff:ad:0e:b2:1b:c4:7b:2f:f7:47:2d:a0:31:26:
                    0f:61:41:82:09:e8:86:17:e5:6f:e6:d6:68:26:9e:
                    c8:9b:3e:dc:1f:94:06:ea:2d:e0:dd:ab:9c:1a:b3:
                    6c:15:35:19:63:17:39:9f:77:3a:b2:40:91:41:c6:
                    85:d7:df:c8:b3:e1:33:30:9f:52:1f:b2:10:45:6f:
                    15:98:4b:d5:62:84:c6:88:2a:60:b3:9b:9a:da:73:
                    79:70:39:e5:02:23:85:8b:0e:5f:d8:e6:26:bb:1d:
                    98:39:e9:d6:34:64:1e:c0:fb:1f:02:74:1c:53:3d:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F1:5D:AD:EC:7B:D2:E4:AB:00:D0:29:25:F8:00:91:96:62:FE:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26/374ed633-bdd1-3d99-97b2-4ee9ad9c0cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26/68769a07-faff-4fc9-92ac-0487571d9f26.crl

            X509v3 Authority Key Identifier:
                keyid:85:22:E0:14:98:4B:69:56:39:DB:27:8B:CE:91:19:82:2C:89:81:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/68769a07-faff-4fc9-92ac-0487571d9f26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:17:7f:63:8d:a4:53:58:07:f4:8c:04:2b:98:7d:b9:c8:20:
         b3:c0:23:0f:7e:21:d2:f7:bb:0f:75:d7:71:4e:c3:cb:75:59:
         be:f9:c5:c0:61:91:a1:bb:3d:79:cc:0e:1f:e6:88:86:10:2e:
         05:06:11:f9:78:1c:96:84:4d:29:54:79:41:3e:89:15:0d:1c:
         61:65:7a:13:f7:20:14:73:01:60:9f:b8:3f:cf:63:62:a2:73:
         1f:82:e6:20:d7:71:91:a4:2f:28:c6:ca:09:1b:47:30:57:84:
         f4:6c:64:15:c6:21:b8:63:b2:a8:b0:c5:f1:cf:a6:22:a3:d0:
         bb:dc:df:61:80:f9:d4:f8:8e:de:b9:6a:e5:2a:4c:c7:1f:3d:
         ae:35:3c:96:d3:4d:6d:0c:de:bd:e2:02:66:e1:9a:e5:0a:c1:
         87:79:2f:5d:26:64:8f:01:87:b3:32:7f:15:9a:86:53:f6:e8:
         95:d2:70:98:a9:37:da:3b:3b:3b:fe:bc:15:50:9d:b3:22:ce:
         50:4a:4c:2d:b2:63:92:66:49:8a:88:bd:f5:16:ef:49:c4:e0:
         b9:9e:f3:4a:21:3c:8f:0f:c2:4e:ff:3c:04:8d:42:92:d2:85:
         82:81:54:ab:33:ca:ad:cd:90:4a:22:7f:a2:39:81:8e:5e:d8:
         c8:ab:c5:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HPudwia8VMvxmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3NjlhMDctZmFmZi00ZmM5LTkyYWMtMDQ4NzU3MWQ5
ZjI2MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk
ZThiNmMxNTktMjU5NC00MWU3LWFiZDUtMjYxZDdlMDAxMjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqUXB0IyUimG7V/WhEqL9d1ZTQoKVpbSe9Mi
x1Y76H4OANGYltZ5fkpOUwnOM9caGEMG5DvQ1N2QyF8aUMA0FG7+9BrMgCzLVS5A
76g+LY730gCjBEnLb+rYWwdnxX2yRlCi0Ec4O+48+oAkKlRgQ2hgLrZcsjAVl1AA
B/4iLb/AKVlgsoKX/60OshvEey/3Ry2gMSYPYUGCCeiGF+Vv5tZoJp7Imz7cH5QG
6i3g3aucGrNsFTUZYxc5n3c6skCRQcaF19/Is+EzMJ9SH7IQRW8VmEvVYoTGiCpg
s5ua2nN5cDnlAiOFiw5f2OYmux2YOenWNGQewPsfAnQcUz019QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGbxXa3se9LkqwDQKSX4AJGWYv7GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82ODc2
OWEwNy1mYWZmLTRmYzktOTJhYy0wNDg3NTcxZDlmMjYvMzc0ZWQ2MzMtYmRkMS0z
ZDk5LTk3YjItNGVlOWFkOWMwY2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjg3NjlhMDctZmFmZi00ZmM5LTky
YWMtMDQ4NzU3MWQ5ZjI2LzY4NzY5YTA3LWZhZmYtNGZjOS05MmFjLTA0ODc1NzFk
OWYyNi5jcmwwHwYDVR0jBBgwFoAUhSLgFJhLaVY52yeLzpEZgiyJgQ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82ODc2OWEwNy1mYWZmLTRmYzktOTJhYy0wNDg3
NTcxZDlmMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5sYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYXf2ONpFNYB/SMBCuYfbnIILPAIw9+IdL3uw9113FOw8t1Wb75xcBh
kaG7PXnMDh/miIYQLgUGEfl4HJaETSlUeUE+iRUNHGFlehP3IBRzAWCfuD/PY2Ki
cx+C5iDXcZGkLyjGygkbRzBXhPRsZBXGIbhjsqiwxfHPpiKj0Lvc32GA+dT4jt65
auUqTMcfPa41PJbTTW0M3r3iAmbhmuUKwYd5L10mZI8Bh7MyfxWahlP26JXScJip
N9o7Ozv+vBVQnbMizlBKTC2yY5JmSYqIvfUW70nE4Lme80ohPI8Pwk7/PASNQpLS
hYKBVKszyq3NkEoif6I5gY5e2MirxeQ=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:43 2025 by rpki-client