Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/2f5c6178-be65-33b2-b1a2-5f0214904d11.roa
File:                     2f5c6178-be65-33b2-b1a2-5f0214904d11.roa (raw, json)
Hash identifier:          4vnaI2AJzr5L0mWcM1xzD5LBa9ao1+A1+GnTTgRhfiw=
Subject key identifier:   BA:AF:45:47:C8:EC:6C:9B:EF:EF:C9:AE:50:D3:99:A7:C6:E5:E7:16
Certificate issuer:       /CN=ea152a71-38ff-47de-9174-fc40dc152c36
Certificate serial:       010D0C9F43285849D85F91EA8D6C9ED6BAA3BB00
Authority key identifier: E2:10:F0:A4:43:06:CD:E3:2A:AD:0D:9B:4C:CB:4C:4E:B8:24:B0:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/2f5c6178-be65-33b2-b1a2-5f0214904d11.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     400741
IP address blocks:        23.143.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/ea152a71-38ff-47de-9174-fc40dc152c36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/ea152a71-38ff-47de-9174-fc40dc152c36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:91:ea:8d:6c:9e:d6:ba:a3:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea152a71-38ff-47de-9174-fc40dc152c36
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=267a1c7c-6fc4-4ac4-9ac3-0a4c21f8b01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8c:88:35:fa:17:71:f5:56:bb:cc:f1:2b:08:
                    e2:be:59:c1:b5:4f:bd:6d:52:49:b3:3c:b6:32:82:
                    a2:d0:74:b5:6a:f2:a8:9c:50:a7:aa:4f:6f:87:5c:
                    68:35:fb:20:8b:a1:00:37:f2:67:73:2a:12:92:72:
                    0b:27:bf:01:2c:6b:7f:8a:9c:8b:8d:67:96:5a:32:
                    28:13:0a:ea:6d:90:ae:24:56:5a:e5:bf:e2:9d:8b:
                    51:18:82:b8:e7:83:de:6f:04:18:63:fb:9b:f9:b6:
                    0f:e9:08:9b:5f:b5:ec:47:71:6e:2a:9b:ad:64:b1:
                    9f:37:05:95:2f:81:16:cc:fe:fb:36:9d:e4:a5:65:
                    da:11:44:d3:65:ea:d3:6b:dc:0c:f7:4a:55:b8:3f:
                    2a:4e:2f:e7:6f:b2:73:8e:1a:a0:3c:eb:00:55:73:
                    bb:54:8b:8b:74:71:b3:eb:69:45:8e:27:9c:4f:ff:
                    75:29:dd:ba:e8:58:69:48:82:fd:56:51:78:71:db:
                    70:64:4b:2c:92:ac:01:ed:d0:de:8e:a0:1e:8e:c6:
                    2a:e9:14:13:66:03:a2:28:07:13:94:77:55:34:b7:
                    ee:81:43:1c:17:bf:1b:6f:10:e8:b0:7b:1d:4e:d0:
                    c3:84:69:da:f3:fd:ee:08:6b:90:59:9c:ed:1c:82:
                    d7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AF:45:47:C8:EC:6C:9B:EF:EF:C9:AE:50:D3:99:A7:C6:E5:E7:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/2f5c6178-be65-33b2-b1a2-5f0214904d11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/ea152a71-38ff-47de-9174-fc40dc152c36.crl

            X509v3 Authority Key Identifier:
                keyid:E2:10:F0:A4:43:06:CD:E3:2A:AD:0D:9B:4C:CB:4C:4E:B8:24:B0:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ed:41:2e:a9:c3:93:f8:30:69:2f:fc:f4:34:96:1e:19:e8:
         da:50:14:2d:20:e0:b0:1b:45:29:33:bb:4f:46:2e:89:07:92:
         da:e7:d6:f7:f2:d2:80:f1:9e:3f:e0:e2:de:f9:d1:da:d6:bb:
         6f:5d:fc:ac:c7:aa:18:d0:7e:f8:df:8a:75:d5:a6:9f:46:b5:
         3c:d7:1b:8b:40:09:62:68:53:f5:10:5a:1a:0e:0e:63:5a:9f:
         62:f4:5d:8f:4e:43:dd:72:60:37:29:f4:3b:eb:f7:f4:5d:48:
         5d:83:e2:db:f7:94:02:0a:5d:18:f4:ac:5a:92:07:87:1a:38:
         11:bd:eb:3f:e2:3c:25:9b:04:7b:8d:13:8b:1a:aa:6f:e6:8f:
         cc:9a:05:61:87:6f:63:b6:67:f6:e6:c1:ae:ba:84:86:3a:c6:
         52:e0:2f:15:6e:7e:1b:65:c8:87:d0:d5:58:0d:bc:a8:5b:02:
         16:0d:a7:38:81:e6:e9:44:b6:55:c4:c6:ea:ee:cc:93:4e:d7:
         51:43:ef:46:09:b6:71:44:fb:1b:fc:92:93:88:60:51:14:ab:
         fd:43:7c:65:e2:8f:23:34:0d:41:aa:07:5e:88:93:6a:41:e2:
         ea:aa:17:79:a5:69:58:38:df:85:82:c5:94:f9:d8:aa:e6:85:
         11:30:8d:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5HqjWye1rqjuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWExNTJhNzEtMzhmZi00N2RlLTkxNzQtZmM0MGRjMTUy
YzM2MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
MjY3YTFjN2MtNmZjNC00YWM0LTlhYzMtMGE0YzIxZjhiMDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIyINfoXcfVWu8zxKwjivlnBtU+9bVJJszy2
MoKi0HS1avKonFCnqk9vh1xoNfsgi6EAN/JncyoSknILJ78BLGt/ipyLjWeWWjIo
EwrqbZCuJFZa5b/inYtRGIK454PebwQYY/ub+bYP6QibX7XsR3FuKputZLGfNwWV
L4EWzP77Np3kpWXaEUTTZerTa9wM90pVuD8qTi/nb7JzjhqgPOsAVXO7VIuLdHGz
62lFjiecT/91Kd266FhpSIL9VlF4cdtwZEsskqwB7dDejqAejsYq6RQTZgOiKAcT
lHdVNLfugUMcF78bbxDosHsdTtDDhGna8/3uCGuQWZztHILXWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqvRUfI7Gyb7+/JrlDTmafG5ecWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lYTE1
MmE3MS0zOGZmLTQ3ZGUtOTE3NC1mYzQwZGMxNTJjMzYvMmY1YzYxNzgtYmU2NS0z
M2IyLWIxYTItNWYwMjE0OTA0ZDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWExNTJhNzEtMzhmZi00N2RlLTkx
NzQtZmM0MGRjMTUyYzM2L2VhMTUyYTcxLTM4ZmYtNDdkZS05MTc0LWZjNDBkYzE1
MmMzNi5jcmwwHwYDVR0jBBgwFoAU4hDwpEMGzeMqrQ2bTMtMTrgksNQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lYTE1MmE3MS0zOGZmLTQ3ZGUtOTE3NC1mYzQw
ZGMxNTJjMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF494MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFbtQS6pw5P4MGkv/PQ0lh4Z6NpQFC0g4LAbRSkzu09GLokHktrn1vfy
0oDxnj/g4t750drWu29d/KzHqhjQfvjfinXVpp9GtTzXG4tACWJoU/UQWhoODmNa
n2L0XY9OQ91yYDcp9Dvr9/RdSF2D4tv3lAIKXRj0rFqSB4caOBG96z/iPCWbBHuN
E4saqm/mj8yaBWGHb2O2Z/bmwa66hIY6xlLgLxVufhtlyIfQ1VgNvKhbAhYNpziB
5ulEtlXExuruzJNO11FD70YJtnFE+xv8kpOIYFEUq/1DfGXijyM0DUGqB16Ik2pB
4uqqF3mlaVg434WCxZT52KrmhREwjTs=
-----END CERTIFICATE-----
Generated at Tue Jun 17 00:40:25 2025 by rpki-client