Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164/63b5036e-4bfa-3cbe-a1cc-326e5c89a349.roa
File:                     63b5036e-4bfa-3cbe-a1cc-326e5c89a349.roa (raw, json)
Hash identifier:          J6kVawNQY4RpFQnBK/h+lT72JS02DWZ4zX/NU2jtxRI=
Subject key identifier:   45:8E:C9:E2:C9:70:46:30:89:BC:86:A3:D3:E3:BD:9B:88:3C:C3:F8
Certificate issuer:       /CN=032fb77e-a6e2-484b-8175-944f82030164
Certificate serial:       010D0C9F4328584A07D52DCB889C676A90695500
Authority key identifier: CE:4D:66:FF:71:A1:45:9E:15:12:A8:ED:A4:73:04:A7:06:8D:36:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164/63b5036e-4bfa-3cbe-a1cc-326e5c89a349.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     7247
IP address blocks:        23.130.184.0/24 maxlen: 32
                          2602:fbee::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164/032fb77e-a6e2-484b-8175-944f82030164.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164/032fb77e-a6e2-484b-8175-944f82030164.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:2d:cb:88:9c:67:6a:90:69:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032fb77e-a6e2-484b-8175-944f82030164
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=448ffbc7-ebc5-4273-825e-222ea6c28c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1b:21:7e:fe:70:5e:d8:c5:89:a0:f1:1d:52:
                    9f:63:d9:90:6e:2b:ac:65:cc:5d:4c:d9:51:b6:b4:
                    18:63:02:c1:a3:a2:18:f8:d9:bb:48:bb:f2:c2:64:
                    4e:cc:1e:c0:01:ae:7c:88:c1:c5:9e:b2:54:30:f2:
                    1c:55:4c:0e:13:94:d0:eb:3f:38:8d:3a:f6:29:f9:
                    e0:da:22:80:33:a1:dd:46:4b:de:92:e0:87:f9:14:
                    e3:42:32:37:39:33:df:a5:98:79:91:a4:c1:c0:ee:
                    92:6c:c5:b2:49:e4:ec:b5:17:19:2d:6c:93:d7:39:
                    b2:32:2a:f3:1e:89:56:05:dd:52:d2:0a:56:3e:41:
                    29:24:99:61:27:8b:d9:fd:b9:c2:8f:6b:19:41:38:
                    3e:0d:bd:71:fd:c2:72:08:5b:aa:3e:68:13:86:75:
                    0f:e0:9f:b0:1b:a9:e6:3f:38:92:fd:d4:9d:45:b1:
                    49:1b:97:eb:b9:b1:cd:96:d3:8d:06:9b:36:34:82:
                    7b:c7:78:6f:00:90:03:61:48:f0:d4:36:6f:96:8b:
                    ea:c3:76:db:7f:9c:d5:17:6e:a6:02:8c:d1:c3:92:
                    70:07:03:69:dd:6f:61:3b:97:26:96:f1:49:96:dd:
                    26:ff:c8:41:61:05:18:94:93:0f:1e:fd:4b:d4:94:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8E:C9:E2:C9:70:46:30:89:BC:86:A3:D3:E3:BD:9B:88:3C:C3:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164/63b5036e-4bfa-3cbe-a1cc-326e5c89a349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164/032fb77e-a6e2-484b-8175-944f82030164.crl

            X509v3 Authority Key Identifier:
                keyid:CE:4D:66:FF:71:A1:45:9E:15:12:A8:ED:A4:73:04:A7:06:8D:36:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.184.0/24
                IPv6:
                  2602:fbee::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:50:2c:87:6e:2b:be:10:f8:bc:b2:56:81:de:98:f3:b4:0f:
         aa:b8:db:e7:9c:fc:92:4e:0e:29:c0:cc:89:b4:fc:9d:7c:6c:
         26:58:b1:ac:0f:39:ce:18:d0:84:a7:f5:17:ca:49:f7:c9:9a:
         22:b3:ed:62:52:38:f9:79:53:26:dc:b7:94:e9:f2:41:c6:67:
         97:c4:5f:b4:fd:86:39:b9:33:06:45:8c:fb:4e:be:0d:28:d4:
         a7:32:00:c7:63:51:81:0d:d3:2d:f9:25:90:91:a2:98:8b:cf:
         03:80:a4:50:63:46:a6:07:68:73:0c:ac:af:de:a4:17:e4:f3:
         96:f3:6a:91:7d:5f:44:18:b5:2b:01:97:47:d3:30:1a:ec:15:
         76:a4:e1:58:fa:e6:83:8f:9d:77:de:24:60:ed:36:1d:35:89:
         f7:e5:fd:bc:9c:7f:7d:38:1b:5c:e2:a2:d4:d8:31:06:1b:4e:
         5c:bb:44:15:e3:d6:fe:0c:03:00:ba:a5:88:65:43:ad:4a:4b:
         da:fe:f9:4d:e8:dc:60:1c:6e:1e:d3:3e:9d:b4:dc:b0:af:12:
         83:f3:cd:27:36:e1:fc:9c:22:b4:ae:0d:c1:1f:84:c7:9d:6e:
         26:09:ab:17:74:0d:50:e2:de:f7:f6:f2:95:7a:d2:16:b9:67:
         34:ad:c3:f8
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEoH1S3LiJxnapBpVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDMyZmI3N2UtYTZlMi00ODRiLTgxNzUtOTQ0ZjgyMDMw
MTY0MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk
NDQ4ZmZiYzctZWJjNS00MjczLTgyNWUtMjIyZWE2YzI4YzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bshfv5wXtjFiaDxHVKfY9mQbiusZcxdTNlR
trQYYwLBo6IY+Nm7SLvywmROzB7AAa58iMHFnrJUMPIcVUwOE5TQ6z84jTr2Kfng
2iKAM6HdRkvekuCH+RTjQjI3OTPfpZh5kaTBwO6SbMWySeTstRcZLWyT1zmyMirz
HolWBd1S0gpWPkEpJJlhJ4vZ/bnCj2sZQTg+Db1x/cJyCFuqPmgThnUP4J+wG6nm
PziS/dSdRbFJG5frubHNltONBps2NIJ7x3hvAJADYUjw1DZvlovqw3bbf5zVF26m
AozRw5JwBwNp3W9hO5cmlvFJlt0m/8hBYQUYlJMPHv1L1JTPywIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFEWOyeLJcEYwibyGo9PjvZuIPMP4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMzJm
Yjc3ZS1hNmUyLTQ4NGItODE3NS05NDRmODIwMzAxNjQvNjNiNTAzNmUtNGJmYS0z
Y2JlLWExY2MtMzI2ZTVjODlhMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDMyZmI3N2UtYTZlMi00ODRiLTgx
NzUtOTQ0ZjgyMDMwMTY0LzAzMmZiNzdlLWE2ZTItNDg0Yi04MTc1LTk0NGY4MjAz
MDE2NC5jcmwwHwYDVR0jBBgwFoAUzk1m/3GhRZ4VEqjtpHMEpwaNNucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wMzJmYjc3ZS1hNmUyLTQ4NGItODE3NS05NDRm
ODIwMzAxNjQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4K4MA4E
AgACMAgDBgAmAvvuADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0UCyHbiu+EPi8slaB3pjztA+quNvnnPyS
Tg4pwMyJtPydfGwmWLGsDznOGNCEp/UXykn3yZois+1iUjj5eVMm3LeU6fJBxmeX
xF+0/YY5uTMGRYz7Tr4NKNSnMgDHY1GBDdMt+SWQkaKYi88DgKRQY0amB2hzDKyv
3qQX5POW82qRfV9EGLUrAZdH0zAa7BV2pOFY+uaDj5133iRg7TYdNYn35f28nH99
OBtc4qLU2DEGG05cu0QV49b+DAMAuqWIZUOtSkva/vlN6NxgHG4e0z6dtNywrxKD
880nNuH8nCK0rg3BH4THnW4mCasXdA1Q4t739vKVetIWuWc0rcP4
-----END CERTIFICATE-----
Generated at Thu Jun 19 09:16:14 2025 by rpki-client