Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/ac7f10c1-158d-39f2-bc54-d256515d1677.roa
File:                     ac7f10c1-158d-39f2-bc54-d256515d1677.roa (raw, json)
Hash identifier:          tXsMqzH6uAzsVccaAEH2kAs7/q9yNTv43Hmye9J8TDY=
Subject key identifier:   88:FD:62:3C:E6:DF:82:3B:1C:36:C0:DA:50:7E:B2:BB:1F:87:FD:AD
Certificate issuer:       /CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8
Certificate serial:       010D0C9F4328584A2E56015A3E8439FBC9062F40
Authority key identifier: D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/ac7f10c1-158d-39f2-bc54-d256515d1677.roa
Signing time:             Fri 13 Jun 2025 20:01:14 +0000
ROA not before:           Fri 13 Jun 2025 20:01:14 +0000
ROA not after:            Thu 11 Sep 2025 20:01:14 +0000
asID:                     401720
IP address blocks:        23.191.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:56:01:5a:3e:84:39:fb:c9:06:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8
        Validity
            Not Before: Jun 13 20:01:14 2025 GMT
            Not After : Sep 11 20:01:14 2025 GMT
        Subject: CN=d1ed9d99-eb39-463a-9922-382542c552c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:af:f8:ea:17:2f:d5:8c:9a:75:12:15:ad:
                    10:49:d6:3c:96:d6:a5:a5:01:3c:85:fb:36:df:ec:
                    4d:cb:5d:38:3c:7b:0b:6d:e9:8f:fd:4d:a2:42:07:
                    5b:76:de:8e:fc:1c:ee:52:aa:9b:ef:85:dc:9a:a3:
                    87:b7:2e:72:d7:c5:02:20:be:7f:6e:ad:88:81:db:
                    f4:39:ee:7c:28:27:0b:ae:79:73:97:fa:cd:62:51:
                    f4:ff:a2:1f:21:c7:ef:dc:d0:8f:10:b9:c2:cb:21:
                    89:79:b3:60:93:3d:62:d3:a1:e3:3a:be:5a:d5:31:
                    89:44:e7:74:59:03:24:41:6b:ee:ac:c7:40:5f:5c:
                    a2:cb:56:55:9b:58:7c:af:1d:14:f3:b3:b9:66:35:
                    4e:8a:64:3c:cb:80:be:a9:ff:ca:bd:a2:21:00:bb:
                    94:60:a5:ef:86:2d:f9:de:69:34:ff:da:09:c3:80:
                    be:0e:89:eb:78:f1:27:f5:a4:6f:f2:39:f7:81:47:
                    a0:3e:32:42:2e:e8:27:4b:14:2c:de:0f:f6:54:95:
                    2d:8f:0a:54:a1:96:85:4b:98:e3:85:80:52:f1:02:
                    b6:ef:ae:f5:95:b5:10:b3:16:61:cb:be:dc:ef:42:
                    28:74:27:c4:ec:8d:51:a0:92:22:ac:ab:c0:55:22:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FD:62:3C:E6:DF:82:3B:1C:36:C0:DA:50:7E:B2:BB:1F:87:FD:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/ac7f10c1-158d-39f2-bc54-d256515d1677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e8:02:76:cd:54:fb:0c:29:2d:c0:67:0c:c8:ff:d9:62:5f:
         12:a2:52:22:cc:3b:83:54:fd:e8:49:ca:36:6b:2e:1b:c8:3e:
         e3:0c:61:58:c8:e4:db:a4:fc:37:38:13:e1:04:89:bb:ce:f4:
         21:b6:b9:cc:db:9b:0d:6c:72:3f:8c:3b:ad:37:3e:d1:c5:34:
         1f:22:12:ce:dc:53:30:cd:4f:ba:87:98:5f:c1:2a:74:e8:a6:
         a8:ab:5e:82:8c:56:77:50:1d:68:50:ea:bb:70:8e:1a:c0:a8:
         52:40:2a:ee:32:45:b7:24:fe:e5:af:e2:3b:a6:5e:a3:92:fc:
         c5:9e:1d:88:19:14:4a:23:9d:77:f7:54:50:3e:f4:20:de:f5:
         45:5f:3c:fe:9c:8c:97:3a:62:87:06:b3:61:88:49:99:08:73:
         d2:2d:1c:8b:33:3c:9e:a2:ac:3d:0d:25:42:33:4d:28:54:a3:
         8d:ac:38:d5:9a:6b:d4:af:8d:4c:a9:21:91:a7:82:db:99:08:
         6c:8f:a3:f7:61:bb:f0:d3:8e:36:2e:1a:9f:eb:63:45:38:b0:
         81:86:44:ea:f5:b1:3b:3e:06:2e:0f:0d:3a:14:d7:6a:a3:a2:
         9d:d1:d4:08:e7:a2:e9:05:51:39:3a:0a:66:b8:8e:29:63:6c:
         42:81:b5:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEouVgFaPoQ5+8kGL0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJhYjI0ZTYtNTlmNy00YzJhLWEzN2ItMGNlOThmYWEz
ZGM4MB4XDTI1MDYxMzIwMDExNFoXDTI1MDkxMTIwMDExNFowLzEtMCsGA1UEAxMk
ZDFlZDlkOTktZWIzOS00NjNhLTk5MjItMzgyNTQyYzU1MmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBev+OoXL9WMmnUSFa0QSdY8ltalpQE8hfs2
3+xNy104PHsLbemP/U2iQgdbdt6O/BzuUqqb74XcmqOHty5y18UCIL5/bq2Igdv0
Oe58KCcLrnlzl/rNYlH0/6IfIcfv3NCPELnCyyGJebNgkz1i06HjOr5a1TGJROd0
WQMkQWvurMdAX1yiy1ZVm1h8rx0U87O5ZjVOimQ8y4C+qf/KvaIhALuUYKXvhi35
3mk0/9oJw4C+DonrePEn9aRv8jn3gUegPjJCLugnSxQs3g/2VJUtjwpUoZaFS5jj
hYBS8QK27671lbUQsxZhy77c70IodCfE7I1RoJIirKvAVSIXHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIj9Yjzm34I7HDbA2lB+srsfh/2tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMmFi
MjRlNi01OWY3LTRjMmEtYTM3Yi0wY2U5OGZhYTNkYzgvYWM3ZjEwYzEtMTU4ZC0z
OWYyLWJjNTQtZDI1NjUxNWQxNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjJhYjI0ZTYtNTlmNy00YzJhLWEz
N2ItMGNlOThmYWEzZGM4LzIyYWIyNGU2LTU5ZjctNGMyYS1hMzdiLTBjZTk4ZmFh
M2RjOC5jcmwwHwYDVR0jBBgwFoAU1rGGLT44xLWpmfCp24J9jeG1G6QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMmFiMjRlNi01OWY3LTRjMmEtYTM3Yi0wY2U5
OGZhYTNkYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7/JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACroAnbNVPsMKS3AZwzI/9liXxKiUiLMO4NU/ehJyjZrLhvIPuMMYVjI
5Nuk/Dc4E+EEibvO9CG2uczbmw1scj+MO603PtHFNB8iEs7cUzDNT7qHmF/BKnTo
pqirXoKMVndQHWhQ6rtwjhrAqFJAKu4yRbck/uWv4jumXqOS/MWeHYgZFEojnXf3
VFA+9CDe9UVfPP6cjJc6YocGs2GISZkIc9ItHIszPJ6irD0NJUIzTShUo42sONWa
a9SvjUypIZGngtuZCGyPo/dhu/DTjjYuGp/rY0U4sIGGROr1sTs+Bi4PDToU12qj
op3R1AjnoukFUTk6Cma4jiljbEKBtYk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 22:45:31 2025 by rpki-client