Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/b9aa9043-6366-309e-9aa7-9c2d03ddabc7.roa
File:                     b9aa9043-6366-309e-9aa7-9c2d03ddabc7.roa (raw, json)
Hash identifier:          zpNFpMqhC6tBwwi4Iou5DFSmRkS9p5dV31wObUl/Uf0=
Subject key identifier:   45:C4:68:77:1A:24:91:A2:79:63:65:E0:91:BE:A6:FC:FF:7A:DB:E6
Certificate issuer:       /CN=83ab5212-bed9-4bb3-8d8e-83a8705c4e88
Certificate serial:       010D0C9F4328584A2ABAE603D5364CDF82866F00
Authority key identifier: 94:12:A6:E3:E3:4F:DB:A2:B8:38:93:96:88:21:81:FB:38:B5:36:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/b9aa9043-6366-309e-9aa7-9c2d03ddabc7.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     23470
IP address blocks:        23.166.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e6:03:d5:36:4c:df:82:86:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83ab5212-bed9-4bb3-8d8e-83a8705c4e88
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=0392a095-9879-4773-b8e0-a6dd1d733a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d4:bd:ee:b5:01:ef:bf:e9:ee:54:0e:0d:64:
                    2c:59:1a:16:45:a9:3f:3e:cf:0e:f7:46:9a:ea:8b:
                    31:76:28:fb:39:05:9c:13:88:71:79:16:41:42:0c:
                    42:7c:f4:54:b3:02:8f:6a:00:95:fd:ae:6c:1b:82:
                    47:f7:dc:4c:62:80:04:24:a4:0e:e8:3e:32:8f:b5:
                    0f:91:fa:ae:9b:9c:eb:62:89:47:49:82:18:a7:45:
                    b0:00:cb:20:b9:8c:6f:14:35:67:f1:fd:d1:2e:e6:
                    ab:bd:b8:84:b5:e8:72:56:3c:38:de:b4:4d:d5:68:
                    0b:2f:47:5b:90:18:67:0d:54:75:07:8d:ba:b3:11:
                    e3:0d:e2:b1:10:c5:b7:46:19:24:cb:68:b8:00:f9:
                    0f:c6:37:03:92:cf:eb:08:a7:f6:5b:74:01:74:17:
                    48:3b:45:2f:bd:83:a7:16:77:74:80:05:ef:97:bd:
                    50:f2:83:c0:a5:4a:fa:b7:0d:fe:84:da:c7:98:b6:
                    59:08:fd:c9:b8:f7:bc:ce:97:02:47:25:64:30:71:
                    00:c7:61:95:15:b2:74:99:89:86:7c:ed:0d:36:a4:
                    89:9b:4a:a8:48:d0:42:67:d2:4f:82:fa:ff:27:a3:
                    ee:39:9f:8b:59:1e:8a:1a:fa:f6:99:1a:0a:a9:4f:
                    ef:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C4:68:77:1A:24:91:A2:79:63:65:E0:91:BE:A6:FC:FF:7A:DB:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/b9aa9043-6366-309e-9aa7-9c2d03ddabc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.crl

            X509v3 Authority Key Identifier:
                keyid:94:12:A6:E3:E3:4F:DB:A2:B8:38:93:96:88:21:81:FB:38:B5:36:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:a0:9b:f7:76:3f:04:15:16:e0:81:86:cb:63:00:1d:ff:31:
         c3:62:bd:3e:57:e0:70:72:01:b8:26:2f:6d:ba:8a:49:b0:15:
         36:f8:76:ef:a3:e3:ca:60:65:78:05:59:c5:f9:45:97:20:db:
         e2:7a:78:a0:3e:2a:a0:e6:2e:ed:7c:25:38:e5:b5:36:b1:19:
         22:51:bf:dd:b9:c3:18:2f:04:78:2d:fa:9b:3b:f3:ab:fa:8c:
         f2:e9:12:d0:ff:f9:d8:e0:42:d4:28:ca:c3:6e:8c:e7:5e:df:
         c1:49:6a:65:aa:98:60:ae:89:a7:3a:18:32:5a:e4:67:e1:cd:
         ee:24:ae:85:8b:3e:77:e3:e1:bd:7e:44:93:57:51:67:d7:f4:
         63:f8:b5:19:a4:6f:8b:33:ed:f9:0f:63:0d:6b:b5:fc:b5:39:
         aa:7d:51:cf:6f:1f:c6:b9:b0:fe:a2:f8:7b:f4:a4:53:c8:59:
         23:a9:96:5d:ba:61:c5:36:af:63:75:20:51:5a:54:4e:75:cd:
         72:45:2b:b3:ad:f7:fb:13:45:26:3e:f2:a3:03:93:fe:5f:1f:
         84:ad:1c:e4:9f:49:30:63:5a:58:5f:da:50:b8:63:01:df:11:
         09:76:e0:f3:e6:d8:c8:28:15:6d:f2:49:0c:24:47:8a:81:d0:
         99:5e:b1:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuYD1TZM34KGbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODNhYjUyMTItYmVkOS00YmIzLThkOGUtODNhODcwNWM0
ZTg4MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
MDM5MmEwOTUtOTg3OS00NzczLWI4ZTAtYTZkZDFkNzMzYTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNS97rUB77/p7lQODWQsWRoWRak/Ps8O90aa
6osxdij7OQWcE4hxeRZBQgxCfPRUswKPagCV/a5sG4JH99xMYoAEJKQO6D4yj7UP
kfqum5zrYolHSYIYp0WwAMsguYxvFDVn8f3RLuarvbiEtehyVjw43rRN1WgLL0db
kBhnDVR1B426sxHjDeKxEMW3Rhkky2i4APkPxjcDks/rCKf2W3QBdBdIO0UvvYOn
Fnd0gAXvl71Q8oPApUr6tw3+hNrHmLZZCP3JuPe8zpcCRyVkMHEAx2GVFbJ0mYmG
fO0NNqSJm0qoSNBCZ9JPgvr/J6PuOZ+LWR6KGvr2mRoKqU/vHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEXEaHcaJJGieWNl4JG+pvz/etvmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84M2Fi
NTIxMi1iZWQ5LTRiYjMtOGQ4ZS04M2E4NzA1YzRlODgvYjlhYTkwNDMtNjM2Ni0z
MDllLTlhYTctOWMyZDAzZGRhYmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODNhYjUyMTItYmVkOS00YmIzLThk
OGUtODNhODcwNWM0ZTg4LzgzYWI1MjEyLWJlZDktNGJiMy04ZDhlLTgzYTg3MDVj
NGU4OC5jcmwwHwYDVR0jBBgwFoAUlBKm4+NP26K4OJOWiCGB+zi1NvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84M2FiNTIxMi1iZWQ5LTRiYjMtOGQ4ZS04M2E4
NzA1YzRlODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6YYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+gm/d2PwQVFuCBhstjAB3/McNivT5X4HByAbgmL226ikmwFTb4du+j
48pgZXgFWcX5RZcg2+J6eKA+KqDmLu18JTjltTaxGSJRv925wxgvBHgt+ps786v6
jPLpEtD/+djgQtQoysNujOde38FJamWqmGCuiac6GDJa5Gfhze4kroWLPnfj4b1+
RJNXUWfX9GP4tRmkb4sz7fkPYw1rtfy1Oap9Uc9vH8a5sP6i+Hv0pFPIWSOpll26
YcU2r2N1IFFaVE51zXJFK7Ot9/sTRSY+8qMDk/5fH4StHOSfSTBjWlhf2lC4YwHf
EQl24PPm2MgoFW3ySQwkR4qB0JlesRA=
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:09:42 2025 by rpki-client