Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/19cbeb46-2c1e-3da8-a6ba-84eda3e8698c.roa
File:                     19cbeb46-2c1e-3da8-a6ba-84eda3e8698c.roa (raw, json)
Hash identifier:          cmddscpsm18qEuBzd9u39NvBbg8mRjxY6vsZJMh6YMo=
Subject key identifier:   E2:BF:13:2B:B0:07:F3:12:66:65:47:75:64:A0:57:B1:64:8B:1F:C5
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F43285849A4BA4EBAD3FACAC39C6CDE00
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/19cbeb46-2c1e-3da8-a6ba-84eda3e8698c.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     11870
IP address blocks:        167.23.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:4e:ba:d3:fa:ca:c3:9c:6c:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=ee421aa7-c826-4252-8649-f446dd0bcbef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:d7:07:45:17:e4:12:63:fd:52:50:b9:b0:
                    0e:0d:76:0e:98:fb:41:66:b0:cf:3a:69:25:d9:0c:
                    dd:ec:3e:b2:d4:ba:53:c9:16:ea:50:62:1d:f3:c0:
                    ea:33:ab:f0:c3:fe:2c:2a:09:d5:82:d1:b8:3b:64:
                    f3:2e:57:ed:f3:d0:d6:3d:f2:0f:41:bc:e7:8a:3e:
                    e9:59:c5:7f:00:10:b0:60:27:70:de:d4:f2:c4:b5:
                    11:62:00:74:79:dc:21:9e:43:83:a2:9f:3f:ea:15:
                    66:f4:50:76:0e:fe:61:11:e1:96:b2:d2:73:ba:93:
                    64:73:17:da:41:d6:2f:ab:41:96:6e:bc:99:f2:3f:
                    82:c0:5a:bf:d4:87:cb:5c:79:8b:b4:73:c8:a1:63:
                    3d:35:cf:4c:ad:2a:74:02:ec:5b:ab:fa:ec:97:92:
                    3e:c4:1f:31:90:5e:9f:5c:d5:97:ed:6e:f1:84:5c:
                    dd:59:39:1b:6f:33:d4:72:c9:7f:ce:34:37:3b:37:
                    03:e6:26:57:0c:a9:63:16:a8:de:18:8e:c1:70:bc:
                    00:f5:25:25:9d:aa:94:5a:6e:52:81:7b:50:65:dc:
                    86:2e:2a:68:9d:b3:d5:1a:05:e7:d5:49:1e:c4:c3:
                    32:92:95:d0:10:42:84:6b:44:96:28:fe:53:6b:66:
                    7f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BF:13:2B:B0:07:F3:12:66:65:47:75:64:A0:57:B1:64:8B:1F:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/19cbeb46-2c1e-3da8-a6ba-84eda3e8698c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:7f:bd:cb:fc:77:e3:dc:dd:1d:5e:c0:d1:c3:eb:ea:43:37:
         a7:3d:e8:42:fb:e2:83:89:f7:3b:a8:d4:8c:45:b7:c5:f2:3f:
         16:7d:cc:7f:b9:5c:5f:80:e5:fa:69:be:41:92:64:22:ab:e5:
         80:64:5f:7f:1b:c8:0c:45:cb:6c:c2:ae:b1:77:21:c4:2f:bf:
         ba:2c:e1:6c:45:69:35:79:0d:ad:b7:e8:6a:91:b0:e3:79:29:
         18:aa:39:44:fd:f6:48:6f:1a:6f:53:01:87:89:e5:ca:f6:89:
         76:4e:fc:09:b6:3d:30:d1:37:ff:5c:7b:10:a1:30:67:f8:9d:
         ca:a7:38:a8:6e:c8:d6:d9:f7:9b:45:9d:75:3f:14:1a:fa:89:
         58:52:b4:8c:fe:66:db:f5:c6:33:9c:b4:a7:fd:ea:32:d2:fd:
         18:59:5e:76:4b:ab:93:0c:c9:9f:1a:ae:84:6b:0a:8f:7b:45:
         23:87:19:77:00:e0:1c:42:85:7b:90:db:2f:a6:d3:e1:ff:c5:
         85:6e:4f:34:9a:f8:5f:f5:e4:08:d4:24:a6:b2:e0:00:08:ae:
         0a:c2:1c:ef:63:12:28:87:c6:d8:78:54:70:57:3c:10:01:2e:
         0e:fb:da:05:d6:b2:a5:15:50:a0:90:e4:3e:34:b3:f1:ad:10:
         68:8f:fe:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuk660/rKw5xs3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm
OGM0MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ZWU0MjFhYTctYzgyNi00MjUyLTg2NDktZjQ0NmRkMGJjYmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUPXB0UX5BJj/VJQubAODXYOmPtBZrDPOmkl
2Qzd7D6y1LpTyRbqUGId88DqM6vww/4sKgnVgtG4O2TzLlft89DWPfIPQbznij7p
WcV/ABCwYCdw3tTyxLURYgB0edwhnkODop8/6hVm9FB2Dv5hEeGWstJzupNkcxfa
QdYvq0GWbryZ8j+CwFq/1IfLXHmLtHPIoWM9Nc9MrSp0Auxbq/rsl5I+xB8xkF6f
XNWX7W7xhFzdWTkbbzPUcsl/zjQ3OzcD5iZXDKljFqjeGI7BcLwA9SUlnaqUWm5S
gXtQZdyGLiponbPVGgXn1UkexMMykpXQEEKEa0SWKP5Ta2Z/iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOK/EyuwB/MSZmVHdWSgV7Fkix/FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1
OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvMTljYmViNDYtMmMxZS0z
ZGE4LWE2YmEtODRlZGEzZTg2OThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5
NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz
ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw
YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxeUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFx/vcv8d+Pc3R1ewNHD6+pDN6c96EL74oOJ9zuo1IxFt8XyPxZ9zH+5
XF+A5fppvkGSZCKr5YBkX38byAxFy2zCrrF3IcQvv7os4WxFaTV5Da236GqRsON5
KRiqOUT99khvGm9TAYeJ5cr2iXZO/Am2PTDRN/9cexChMGf4ncqnOKhuyNbZ95tF
nXU/FBr6iVhStIz+Ztv1xjOctKf96jLS/RhZXnZLq5MMyZ8aroRrCo97RSOHGXcA
4BxChXuQ2y+m0+H/xYVuTzSa+F/15AjUJKay4AAIrgrCHO9jEiiHxth4VHBXPBAB
Lg772gXWsqUVUKCQ5D40s/GtEGiP/qg=
-----END CERTIFICATE-----
Generated at Mon Apr 28 07:58:42 2025 by rpki-client