Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/843cf6ab-c96b-3e76-be87-2bea83664ff9.roa
File:                     843cf6ab-c96b-3e76-be87-2bea83664ff9.roa (raw, json)
Hash identifier:          JOh0HaGZZoiudwZQXiZp9WOp7S8agNKKJKKzxlM9Ku8=
Subject key identifier:   5B:3E:ED:94:2E:D4:62:66:B2:62:22:F0:E6:79:86:DD:F3:40:65:71
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F4328584A0C0561DDE8B2F5090825F300
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/843cf6ab-c96b-3e76-be87-2bea83664ff9.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     397994
IP address blocks:        23.136.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:61:dd:e8:b2:f5:09:08:25:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=eb03c45a-69ba-4dea-b4fc-0800da9286e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:c3:c0:c5:56:cd:3a:52:ae:00:7b:6d:e1:
                    35:20:9d:82:25:57:c0:04:21:3d:e3:f7:ba:c9:7c:
                    69:10:29:79:a6:41:c3:ad:5a:5c:16:1f:54:81:14:
                    ef:f6:52:4e:1b:8c:e7:5b:9e:8e:27:96:41:57:70:
                    9f:5d:25:ad:b0:f6:13:21:c3:21:3e:73:2f:a8:12:
                    55:06:3a:b0:a7:78:78:2c:4e:11:8d:0d:81:ab:3f:
                    a8:45:86:dc:54:28:31:85:3c:4f:37:bf:4c:58:8a:
                    c1:a0:d8:90:6d:b8:0c:b8:e8:6e:72:d8:53:94:e5:
                    1d:f7:3a:ad:d0:92:33:34:2c:88:22:c6:0a:ad:85:
                    e2:79:8d:be:c3:7d:b5:88:81:b0:b2:ec:43:5f:25:
                    58:c2:52:d0:fe:fb:16:b8:77:a1:da:99:e4:58:bf:
                    f6:c8:5d:92:3a:34:ef:eb:a5:94:45:d3:5e:93:54:
                    33:73:cc:91:a6:12:88:3e:05:53:54:22:c7:8f:7a:
                    42:d0:3f:61:d5:a1:4b:e8:18:30:51:7e:28:66:ef:
                    82:55:84:5e:d3:84:09:0a:cb:f6:b8:84:2b:69:1f:
                    cf:39:b7:06:8c:bf:27:be:b6:9f:b4:73:ab:d2:60:
                    f6:73:a8:63:9b:de:87:8b:cb:de:07:1d:ea:1d:e0:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3E:ED:94:2E:D4:62:66:B2:62:22:F0:E6:79:86:DD:F3:40:65:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/843cf6ab-c96b-3e76-be87-2bea83664ff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b1:45:34:45:0d:30:d6:50:94:a0:cf:18:f2:23:d5:3a:7c:
         98:59:4d:df:83:e3:fe:9f:27:2d:5e:b0:6a:4f:6d:22:5c:ac:
         2d:1e:12:f8:42:69:4f:79:26:43:de:12:bc:82:75:0f:70:9c:
         e3:9c:2f:b2:17:a7:e0:62:fa:e5:73:e1:d8:db:b7:c1:27:7b:
         b4:08:50:69:7e:18:13:3c:b7:61:0d:16:75:df:82:50:7a:0e:
         87:25:26:99:3d:fa:3a:55:cd:a2:ca:77:db:5c:5d:a8:20:a5:
         21:49:2e:f0:eb:2f:84:a5:d3:69:93:f9:9f:9a:85:1e:cb:54:
         99:5d:cd:9a:04:e0:c1:67:ac:96:e5:ec:a5:7d:f4:f8:f9:09:
         25:e3:38:85:85:87:48:1f:d1:a3:8a:a3:39:ac:bf:7b:37:fb:
         0a:c9:da:2f:a8:5a:ee:5d:79:7e:a7:52:3a:e5:f6:2c:66:89:
         20:13:71:3d:b6:c5:f2:15:eb:26:9a:a9:65:4c:2b:aa:18:b4:
         1d:cf:5a:8d:ee:c5:4b:59:19:92:15:16:f9:63:4d:5e:3a:d9:
         23:89:d7:e1:7e:c4:f3:8d:a2:68:7d:c4:ed:a7:95:5e:24:3c:
         d5:8c:77:2a:09:98:05:df:0e:64:a0:99:03:cc:de:ae:33:04:
         0b:c5:e6:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWHd6LL1CQgl8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5
OWM3MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
ZWIwM2M0NWEtNjliYS00ZGVhLWI0ZmMtMDgwMGRhOTI4NmUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdnDwMVWzTpSrgB7beE1IJ2CJVfABCE94/e6
yXxpECl5pkHDrVpcFh9UgRTv9lJOG4znW56OJ5ZBV3CfXSWtsPYTIcMhPnMvqBJV
Bjqwp3h4LE4RjQ2Bqz+oRYbcVCgxhTxPN79MWIrBoNiQbbgMuOhucthTlOUd9zqt
0JIzNCyIIsYKrYXieY2+w321iIGwsuxDXyVYwlLQ/vsWuHeh2pnkWL/2yF2SOjTv
66WURdNek1Qzc8yRphKIPgVTVCLHj3pC0D9h1aFL6BgwUX4oZu+CVYRe04QJCsv2
uIQraR/PObcGjL8nvraftHOr0mD2c6hjm96Hi8veBx3qHeCe+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFs+7ZQu1GJmsmIi8OZ5ht3zQGVxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0
ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvODQzY2Y2YWItYzk2Yi0z
ZTc2LWJlODctMmJlYTgzNjY0ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1
NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj
OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm
MzY0Yzk5YzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4gIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFCxRTRFDTDWUJSgzxjyI9U6fJhZTd+D4/6fJy1esGpPbSJcrC0eEvhC
aU95JkPeEryCdQ9wnOOcL7IXp+Bi+uVz4djbt8Ene7QIUGl+GBM8t2ENFnXfglB6
DoclJpk9+jpVzaLKd9tcXaggpSFJLvDrL4Sl02mT+Z+ahR7LVJldzZoE4MFnrJbl
7KV99Pj5CSXjOIWFh0gf0aOKozmsv3s3+wrJ2i+oWu5deX6nUjrl9ixmiSATcT22
xfIV6yaaqWVMK6oYtB3PWo3uxUtZGZIVFvljTV462SOJ1+F+xPONomh9xO2nlV4k
PNWMdyoJmAXfDmSgmQPM3q4zBAvF5vo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:11 2025 by rpki-client