Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/9e55505e-fa19-3b06-96c9-8080da376ec7.roa
File:                     9e55505e-fa19-3b06-96c9-8080da376ec7.roa (raw, json)
Hash identifier:          iDsSk7tiJb12OHlYHYHjpXWnxFDEN3lSuAycmwu9GoE=
Subject key identifier:   20:F9:AA:37:B4:0B:F1:C2:44:67:DC:06:2C:5C:5D:6D:7B:05:7E:66
Certificate issuer:       /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial:       010D0C9F432858499C59E6D4FEA2B2B8994B4CC0
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/9e55505e-fa19-3b06-96c9-8080da376ec7.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     152705
IP address blocks:        23.247.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:e6:d4:fe:a2:b2:b8:99:4b:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=5c50eac2-9aa5-4c20-b27e-759b327d2772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c7:00:45:55:14:ff:5e:81:7f:4f:f7:57:26:
                    88:67:65:5e:51:e3:bf:2f:d2:39:a0:ef:dc:2c:e9:
                    72:a7:87:02:f1:ef:1b:37:59:8b:43:87:96:b9:f7:
                    c0:61:bf:89:2a:c6:fc:18:19:21:84:6b:dd:5e:b1:
                    52:81:e9:eb:3f:5b:2d:ce:4f:4f:d5:8f:9c:95:50:
                    8a:ac:bb:ff:f9:02:db:c0:19:2c:f4:26:7b:b5:6e:
                    11:a6:75:0e:01:6b:a5:e0:e2:c4:ea:60:b4:94:d7:
                    f6:ad:ea:eb:61:b7:83:4e:db:68:a0:56:11:42:76:
                    f0:29:96:6f:43:bd:73:08:51:5e:d5:4d:c8:63:a9:
                    b6:ed:fa:e2:43:5d:c0:1d:b9:b5:d6:a8:9a:ae:7c:
                    d9:5e:63:ea:d5:59:f7:c2:bd:b4:bf:58:54:3e:fc:
                    65:7a:c2:f6:8b:63:e0:4d:3e:71:f0:9a:15:2f:0a:
                    3f:42:8f:4e:e0:8f:6e:82:3f:47:d1:4d:39:70:58:
                    66:d6:92:23:18:68:0b:7f:6c:7a:1a:ce:ad:3e:ec:
                    ab:e2:89:f9:ea:4c:50:32:a9:c9:ea:42:c6:9f:6a:
                    c5:67:bf:41:c6:c8:b2:e5:20:2a:34:7f:a6:74:34:
                    ef:cc:d9:d9:88:f8:90:68:dc:0a:49:17:08:52:63:
                    74:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F9:AA:37:B4:0B:F1:C2:44:67:DC:06:2C:5C:5D:6D:7B:05:7E:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/9e55505e-fa19-3b06-96c9-8080da376ec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl

            X509v3 Authority Key Identifier:
                keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:ab:5b:5d:be:84:e2:a7:a4:b2:95:f7:50:5e:9d:84:5d:bc:
         d8:69:a5:f6:f0:d9:8f:e3:4f:47:57:18:20:32:1b:7d:27:82:
         b1:48:37:fb:7f:97:8b:36:a9:4f:50:eb:00:54:eb:9e:43:dd:
         be:6c:9f:27:0d:20:85:00:85:28:de:54:d0:90:5c:e8:09:e2:
         62:3c:29:f9:65:94:6d:de:09:8d:b6:ab:18:9e:ce:44:87:ac:
         65:f8:83:5d:cb:56:46:1e:cd:31:ba:08:48:2c:04:d6:1a:6e:
         e5:60:82:87:8b:ae:91:4f:7d:ae:9d:38:58:20:b3:1d:f9:83:
         51:4e:d0:f7:c2:dd:99:ef:e9:4e:da:42:24:5b:f4:d1:81:37:
         42:0b:a6:3b:52:73:13:ba:82:90:ac:6a:a7:6e:f1:0b:49:c9:
         45:43:82:94:ac:df:dc:95:5e:32:98:e5:bf:4f:4c:7f:f1:cd:
         7a:8f:71:3d:e8:f9:1d:cf:d9:f4:e8:42:f2:7e:a1:8d:cd:63:
         b8:06:9b:8b:a9:78:c7:5a:b3:e8:09:48:4f:ae:06:78:6f:b5:
         7f:2e:fc:3a:68:bd:42:09:a6:a3:61:7c:f5:e6:24:0c:c7:ca:
         32:e4:7c:e0:cf:70:5d:71:c2:2a:be:7a:2e:94:ab:5c:8a:2b:
         16:31:21:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWebU/qKyuJlLTMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2EzYzc0MGMtNjdkMy00N2VkLWI0M2QtOWJkOTFiMzFj
ZGIxMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk
NWM1MGVhYzItOWFhNS00YzIwLWIyN2UtNzU5YjMyN2QyNzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8cARVUU/16Bf0/3VyaIZ2VeUeO/L9I5oO/c
LOlyp4cC8e8bN1mLQ4eWuffAYb+JKsb8GBkhhGvdXrFSgenrP1stzk9P1Y+clVCK
rLv/+QLbwBks9CZ7tW4RpnUOAWul4OLE6mC0lNf2rerrYbeDTttooFYRQnbwKZZv
Q71zCFFe1U3IY6m27friQ13AHbm11qiarnzZXmPq1Vn3wr20v1hUPvxlesL2i2Pg
TT5x8JoVLwo/Qo9O4I9ugj9H0U05cFhm1pIjGGgLf2x6Gs6tPuyr4on56kxQMqnJ
6kLGn2rFZ79Bxsiy5SAqNH+mdDTvzNnZiPiQaNwKSRcIUmN0GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCD5qje0C/HCRGfcBixcXW17BX5mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYTNj
NzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5MWIzMWNkYjEvOWU1NTUwNWUtZmExOS0z
YjA2LTk2YzktODA4MGRhMzc2ZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2EzYzc0MGMtNjdkMy00N2VkLWI0
M2QtOWJkOTFiMzFjZGIxL2NhM2M3NDBjLTY3ZDMtNDdlZC1iNDNkLTliZDkxYjMx
Y2RiMS5jcmwwHwYDVR0jBBgwFoAUV6JH2vWEg5cMTVWgBYJOPoytPCgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jYTNjNzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5
MWIzMWNkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJyrW12+hOKnpLKV91BenYRdvNhppfbw2Y/jT0dXGCAyG30ngrFIN/t/
l4s2qU9Q6wBU655D3b5snycNIIUAhSjeVNCQXOgJ4mI8KflllG3eCY22qxiezkSH
rGX4g13LVkYezTG6CEgsBNYabuVggoeLrpFPfa6dOFggsx35g1FO0PfC3Znv6U7a
QiRb9NGBN0ILpjtScxO6gpCsaqdu8QtJyUVDgpSs39yVXjKY5b9PTH/xzXqPcT3o
+R3P2fToQvJ+oY3NY7gGm4upeMdas+gJSE+uBnhvtX8u/DpovUIJpqNhfPXmJAzH
yjLkfODPcF1xwiq+ei6Uq1yKKxYxIds=
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:13:32 2025 by rpki-client