Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/73d1d4e2-0cee-3a1e-9534-dcbf7e868732.roa
File:                     73d1d4e2-0cee-3a1e-9534-dcbf7e868732.roa (raw, json)
Hash identifier:          PIPhn1RGlIXztC1c3roshDqvJY6PBOArE4ucZ76hCs0=
Subject key identifier:   D5:1D:1D:44:1C:C7:DD:71:D5:8E:D7:A0:76:97:68:EF:F7:51:90:D5
Certificate issuer:       /CN=e8950c3d-3b43-45b8-93cb-fbf99568c311
Certificate serial:       010D0C9F43285849BB0F745E1A09BC8AE6212300
Authority key identifier: 70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/73d1d4e2-0cee-3a1e-9534-dcbf7e868732.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     394868
IP address blocks:        23.174.0.0/22 maxlen: 24
                          23.174.4.0/24 maxlen: 24
                          2606:e780::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:74:5e:1a:09:bc:8a:e6:21:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8950c3d-3b43-45b8-93cb-fbf99568c311
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=b55f4a00-b641-40b5-8399-e23002c385dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:14:04:0b:9f:de:01:a1:bf:e7:62:8e:2d:
                    c8:0c:cb:0a:12:ce:4e:99:b1:92:1c:f6:f5:fa:06:
                    08:d0:4e:62:40:40:76:4d:98:f2:65:51:ac:37:86:
                    bb:9d:bf:76:45:45:05:cf:69:8a:c6:43:fd:03:f5:
                    aa:a7:36:8d:81:8a:d2:5d:56:0b:29:cd:33:f7:72:
                    8b:1c:b5:aa:4e:06:75:4a:16:bb:4e:d8:33:72:51:
                    e8:7d:33:0d:1d:f5:f9:28:f9:fa:a0:3c:27:d5:c1:
                    34:a0:e5:89:c3:4c:08:84:9e:a5:e5:88:57:94:51:
                    09:41:ff:78:87:f4:ed:54:3c:21:32:ac:eb:45:2a:
                    eb:15:35:db:1a:3a:9f:51:4f:d7:f3:98:91:38:6c:
                    ad:0f:2b:f4:60:66:51:48:76:a4:2e:0c:3e:a0:b8:
                    44:c4:f1:be:38:62:f7:74:b5:19:ca:8e:59:36:55:
                    f9:14:65:47:d4:8f:52:dc:6b:72:56:af:55:a4:93:
                    b4:ed:91:35:57:8d:76:a2:7b:8c:80:b0:12:ff:6a:
                    3e:9a:d7:db:65:81:c9:63:79:cb:02:4d:c7:d0:83:
                    8f:7d:2a:db:14:dd:ac:8b:97:d7:00:de:8f:a8:5d:
                    1a:f0:38:2c:d9:c0:6b:e3:1b:02:e8:b2:a3:2d:1c:
                    1a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1D:1D:44:1C:C7:DD:71:D5:8E:D7:A0:76:97:68:EF:F7:51:90:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/73d1d4e2-0cee-3a1e-9534-dcbf7e868732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.crl

            X509v3 Authority Key Identifier:
                keyid:70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.0.0-23.174.4.255
                IPv6:
                  2606:e780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c6:d9:fd:d3:80:e4:aa:c8:e8:72:39:a6:b8:64:1f:db:5a:
         75:c2:a4:6f:73:8b:74:2e:03:cc:d0:f8:64:db:06:4e:d0:78:
         93:9d:ec:f4:f1:5b:a8:67:9f:42:b5:0e:61:c0:9a:37:54:65:
         38:51:24:22:ee:7a:6b:d9:8d:89:19:9e:fb:71:c3:a4:1c:a7:
         0e:e0:a3:24:16:77:7e:f6:0e:d4:03:9a:ba:ba:c0:00:c4:17:
         a1:3a:0e:23:89:96:02:ac:07:d5:73:a4:cf:56:ad:cb:73:33:
         a4:cc:65:d5:d9:2b:43:47:59:ba:a0:51:d0:ab:cd:b9:ee:e6:
         c9:cb:1a:11:e5:d0:3e:4e:92:0e:12:96:37:a8:4a:d2:f1:91:
         3f:ea:0c:56:88:b4:ca:c4:9b:e0:2f:ad:2f:2c:3f:01:f9:e1:
         65:1a:f9:2f:47:66:1f:fd:d6:19:0a:df:c0:54:b5:0b:22:52:
         8e:5e:c6:87:4f:52:d8:80:31:09:68:fd:34:62:e5:a8:e2:a3:
         95:98:42:af:0a:ab:a4:5f:18:fa:4f:26:ee:cc:f0:61:4b:a9:
         c4:4d:53:14:2c:db:02:ff:7f:c3:9d:bd:12:db:d0:fb:e3:a6:
         2a:24:2b:6f:b1:da:84:3b:7e:21:2a:3d:bf:60:35:7b:a4:98:
         a0:af:55:54
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEm7D3ReGgm8iuYhIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTg5NTBjM2QtM2I0My00NWI4LTkzY2ItZmJmOTk1Njhj
MzExMB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk
YjU1ZjRhMDAtYjY0MS00MGI1LTgzOTktZTIzMDAyYzM4NWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeoUBAuf3gGhv+diji3IDMsKEs5OmbGSHPb1
+gYI0E5iQEB2TZjyZVGsN4a7nb92RUUFz2mKxkP9A/WqpzaNgYrSXVYLKc0z93KL
HLWqTgZ1Sha7TtgzclHofTMNHfX5KPn6oDwn1cE0oOWJw0wIhJ6l5YhXlFEJQf94
h/TtVDwhMqzrRSrrFTXbGjqfUU/X85iROGytDyv0YGZRSHakLgw+oLhExPG+OGL3
dLUZyo5ZNlX5FGVH1I9S3GtyVq9VpJO07ZE1V412onuMgLAS/2o+mtfbZYHJY3nL
Ak3H0IOPfSrbFN2si5fXAN6PqF0a8Dgs2cBr4xsC6LKjLRwaSwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFNUdHUQcx91x1Y7XoHaXaO/3UZDVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lODk1
MGMzZC0zYjQzLTQ1YjgtOTNjYi1mYmY5OTU2OGMzMTEvNzNkMWQ0ZTItMGNlZS0z
YTFlLTk1MzQtZGNiZjdlODY4NzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTg5NTBjM2QtM2I0My00NWI4LTkz
Y2ItZmJmOTk1NjhjMzExL2U4OTUwYzNkLTNiNDMtNDViOC05M2NiLWZiZjk5NTY4
YzMxMS5jcmwwHwYDVR0jBBgwFoAUcIVIM7amlvXdt+DyVMqKKYD/SYowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lODk1MGMzZC0zYjQzLTQ1YjgtOTNjYi1mYmY5
OTU2OGMzMTEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDATBAIAATANMAsDAwEXrgME
ABeuBDANBAIAAjAHAwUAJgbngDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGxtn904DkqsjocjmmuGQf21p1
wqRvc4t0LgPM0Phk2wZO0HiTnez08VuoZ59CtQ5hwJo3VGU4USQi7npr2Y2JGZ77
ccOkHKcO4KMkFnd+9g7UA5q6usAAxBehOg4jiZYCrAfVc6TPVq3LczOkzGXV2StD
R1m6oFHQq8257ubJyxoR5dA+TpIOEpY3qErS8ZE/6gxWiLTKxJvgL60vLD8B+eFl
GvkvR2Yf/dYZCt/AVLULIlKOXsaHT1LYgDEJaP00YuWo4qOVmEKvCqukXxj6Tybu
zPBhS6nETVMULNsC/3/Dnb0S29D746YqJCtvsdqEO34hKj2/YDV7pJigr1VU
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:02:48 2025 by rpki-client