Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3/f53d0c81-e82b-340f-a546-f50267c95523.roa
File:                     f53d0c81-e82b-340f-a546-f50267c95523.roa (raw, json)
Hash identifier:          HhWjOxyTFJy7apa9kZyD0KVPCyktX3ex1HLgZtYy7sk=
Subject key identifier:   A6:44:76:33:16:2D:52:F0:7E:E5:4C:54:EF:06:00:1D:58:26:5B:26
Certificate issuer:       /CN=16bb215c-96eb-4982-9077-0401af63d3b3
Certificate serial:       010D0C9F43285849CE9A5627A145D7FC64C72200
Authority key identifier: 45:49:47:52:7F:39:75:2C:F3:69:51:88:56:E8:A1:9D:24:EA:9C:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3/f53d0c81-e82b-340f-a546-f50267c95523.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     15326
IP address blocks:        23.128.32.0/24 maxlen: 24
                          2602:fe72::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3/16bb215c-96eb-4982-9077-0401af63d3b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3/16bb215c-96eb-4982-9077-0401af63d3b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:56:27:a1:45:d7:fc:64:c7:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bb215c-96eb-4982-9077-0401af63d3b3
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=045f56ce-60df-49a2-b5e6-5d25ace8e261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a0:4c:bd:a3:58:d7:be:d9:c6:ae:84:69:be:
                    cb:5f:ca:bd:00:05:89:a5:6e:9c:97:83:e3:0c:32:
                    ed:d6:61:c4:50:34:dc:c0:32:a6:74:66:a6:8c:aa:
                    2f:7b:8b:07:40:31:df:6d:eb:cf:4c:6b:39:10:36:
                    fa:d3:53:ab:29:21:8d:b4:64:98:9b:58:28:77:cf:
                    be:93:29:94:44:55:36:43:35:aa:0b:ec:f1:39:47:
                    69:fb:df:1d:26:a0:03:db:bb:2f:4a:6a:5e:6c:56:
                    fe:63:66:2e:5c:78:9a:a4:a5:12:e7:95:6f:b4:2f:
                    77:42:fb:e6:7e:74:a5:d3:bb:b4:3e:ad:23:c8:ff:
                    f1:70:da:e8:65:be:73:39:5e:37:c6:82:73:a4:41:
                    fb:07:b7:47:10:eb:cc:5b:15:aa:61:bf:99:c1:16:
                    82:4c:84:5c:a1:61:cb:66:ab:76:ff:cb:65:15:dd:
                    66:da:37:70:84:74:47:ff:a6:25:a8:c6:fa:31:7f:
                    8b:db:9b:ff:f0:b9:00:13:d0:40:e0:3f:77:49:0c:
                    a9:4f:fe:f6:73:80:c9:36:0a:fc:38:68:2d:bf:60:
                    7e:1e:73:3e:c9:60:84:22:0a:bf:9f:83:31:df:a9:
                    a0:13:c4:e1:7d:66:dc:dc:40:07:bf:26:21:8f:00:
                    cc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:44:76:33:16:2D:52:F0:7E:E5:4C:54:EF:06:00:1D:58:26:5B:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3/f53d0c81-e82b-340f-a546-f50267c95523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3/16bb215c-96eb-4982-9077-0401af63d3b3.crl

            X509v3 Authority Key Identifier:
                keyid:45:49:47:52:7F:39:75:2C:F3:69:51:88:56:E8:A1:9D:24:EA:9C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16bb215c-96eb-4982-9077-0401af63d3b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.32.0/24
                IPv6:
                  2602:fe72::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:08:6d:7b:cf:a0:69:1e:d3:ee:b2:cd:3a:1c:70:78:a8:9d:
         8b:77:e7:7d:6a:d3:2f:e0:64:11:0a:2a:76:df:d2:53:9a:fb:
         8e:26:86:c7:ce:96:47:b2:65:f5:87:b1:7d:c9:37:db:53:0a:
         18:03:3f:d1:1a:30:24:c0:75:8a:90:b2:7b:00:b6:e4:75:54:
         50:9e:d2:3e:83:85:3c:a9:9f:eb:65:45:c8:09:3c:c9:ea:02:
         08:6b:11:07:b9:b1:35:c8:8e:54:ed:02:8b:fe:6b:67:23:6d:
         0e:93:c4:f3:1b:87:59:fa:62:16:85:dc:16:ff:2d:fc:19:60:
         45:30:da:c5:d5:08:74:06:38:c9:46:ec:d6:17:f2:e0:44:08:
         14:cf:bd:26:d5:5b:bd:27:c5:fd:69:a1:e5:1a:56:65:b7:3a:
         05:19:7b:41:c3:67:fb:58:73:80:ca:f1:d9:83:2b:42:b3:38:
         3a:66:9e:e2:55:f7:e2:7d:11:7c:bd:2c:1b:9b:32:43:74:c1:
         8d:0a:b3:6e:98:ce:f4:a2:b6:39:0f:69:4f:14:73:61:1f:38:
         2a:30:ea:54:af:cb:f0:47:6b:7b:28:e9:a4:9f:9e:a4:cb:b5:
         ef:80:dc:42:a8:39:d6:37:45:a0:23:9a:93:78:b2:77:16:cb:
         e0:37:43:63
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEnOmlYnoUXX/GTHIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTZiYjIxNWMtOTZlYi00OTgyLTkwNzctMDQwMWFmNjNk
M2IzMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
MDQ1ZjU2Y2UtNjBkZi00OWEyLWI1ZTYtNWQyNWFjZThlMjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqBMvaNY177Zxq6Eab7LX8q9AAWJpW6cl4Pj
DDLt1mHEUDTcwDKmdGamjKove4sHQDHfbevPTGs5EDb601OrKSGNtGSYm1god8++
kymURFU2QzWqC+zxOUdp+98dJqAD27svSmpebFb+Y2YuXHiapKUS55VvtC93Qvvm
fnSl07u0Pq0jyP/xcNroZb5zOV43xoJzpEH7B7dHEOvMWxWqYb+ZwRaCTIRcoWHL
Zqt2/8tlFd1m2jdwhHRH/6YlqMb6MX+L25v/8LkAE9BA4D93SQypT/72c4DJNgr8
OGgtv2B+HnM+yWCEIgq/n4Mx36mgE8ThfWbc3EAHvyYhjwDMfwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFKZEdjMWLVLwfuVMVO8GAB1YJlsmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xNmJi
MjE1Yy05NmViLTQ5ODItOTA3Ny0wNDAxYWY2M2QzYjMvZjUzZDBjODEtZTgyYi0z
NDBmLWE1NDYtZjUwMjY3Yzk1NTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTZiYjIxNWMtOTZlYi00OTgyLTkw
NzctMDQwMWFmNjNkM2IzLzE2YmIyMTVjLTk2ZWItNDk4Mi05MDc3LTA0MDFhZjYz
ZDNiMy5jcmwwHwYDVR0jBBgwFoAURUlHUn85dSzzaVGIVuihnSTqnAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xNmJiMjE1Yy05NmViLTQ5ODItOTA3Ny0wNDAx
YWY2M2QzYjMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4AgMA4E
AgACMAgDBgQmAv5yADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCtCG17z6BpHtPuss06HHB4qJ2Ld+d9atMv
4GQRCip239JTmvuOJobHzpZHsmX1h7F9yTfbUwoYAz/RGjAkwHWKkLJ7ALbkdVRQ
ntI+g4U8qZ/rZUXICTzJ6gIIaxEHubE1yI5U7QKL/mtnI20Ok8TzG4dZ+mIWhdwW
/y38GWBFMNrF1Qh0BjjJRuzWF/LgRAgUz70m1Vu9J8X9aaHlGlZltzoFGXtBw2f7
WHOAyvHZgytCszg6Zp7iVffifRF8vSwbmzJDdMGNCrNumM70orY5D2lPFHNhHzgq
MOpUr8vwR2t7KOmkn56ky7XvgNxCqDnWN0WgI5qTeLJ3FsvgN0Nj
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:27 2025 by rpki-client