Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/d9099165-8c7b-3785-b1cb-635dae2ff14d.roa
File:                     d9099165-8c7b-3785-b1cb-635dae2ff14d.roa (raw, json)
Hash identifier:          A86fYUiDCreVEfdnTF60JRcstrsWJHOJRbdAt/tOSZA=
Subject key identifier:   00:02:B2:70:E4:60:EC:96:A1:7B:75:77:A7:BF:BA:65:5C:E3:26:FD
Certificate issuer:       /CN=29c6a19e-a83c-43ad-8d10-68daeb160033
Certificate serial:       010D0C9F43285849FCAA72BB937F5746B3771800
Authority key identifier: 45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/d9099165-8c7b-3785-b1cb-635dae2ff14d.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     3257
IP address blocks:        23.184.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:72:bb:93:7f:57:46:b3:77:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c6a19e-a83c-43ad-8d10-68daeb160033
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=9a750b06-45aa-4a42-9a97-924f3c5964ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:36:fd:a1:62:b2:65:ce:8c:bd:b0:1f:e5:21:
                    85:f6:4e:b0:9f:46:76:3a:c0:8b:8e:8a:c4:48:7e:
                    01:a5:d1:25:8e:3d:88:a1:7b:eb:ab:dd:40:e7:93:
                    1a:43:8a:b9:f0:be:12:ee:f1:0f:c9:9a:20:0f:0c:
                    30:1d:b8:a7:85:49:66:01:1f:24:2b:fc:15:83:61:
                    e8:fd:0e:62:bd:46:d3:b2:ed:bd:7a:bf:8f:34:1e:
                    9e:f8:9e:9d:2f:71:59:c9:19:74:22:c0:30:b3:1d:
                    b4:17:17:75:0b:c4:0a:bd:eb:f6:b1:e9:1f:4b:85:
                    41:8a:b6:0d:23:6d:26:61:49:98:a9:9f:28:2a:ed:
                    a3:7a:d4:94:41:b5:e5:75:d4:f3:21:fb:11:44:d5:
                    37:3f:a7:99:c6:68:48:b0:42:a7:76:35:21:83:67:
                    1d:4c:46:6a:85:0e:2e:62:8f:d5:59:f7:63:7d:f1:
                    13:56:3a:15:ca:a0:f3:fd:7d:10:0a:8c:5a:81:b8:
                    2d:ae:ee:fd:91:22:e1:d9:db:c9:be:4c:d3:b2:93:
                    a2:3c:2f:c2:ba:95:8f:ef:0b:b5:35:be:b6:3c:f3:
                    c5:46:ca:92:f5:b6:46:61:69:98:e2:9d:9e:7d:fd:
                    09:5c:1c:e9:1e:79:42:59:60:1a:63:6d:87:eb:7c:
                    77:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:02:B2:70:E4:60:EC:96:A1:7B:75:77:A7:BF:BA:65:5C:E3:26:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/d9099165-8c7b-3785-b1cb-635dae2ff14d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl

            X509v3 Authority Key Identifier:
                keyid:45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:00:c6:45:0a:08:8a:49:b7:b3:c0:21:84:9d:c2:c8:b7:66:
         66:c2:11:72:0e:f0:32:38:f4:51:00:0f:bf:3b:ae:0d:7f:be:
         10:60:1b:35:25:ab:11:99:17:fc:83:71:e2:7f:35:65:9d:37:
         fb:5a:86:0b:b4:7f:fd:e7:a3:07:77:85:4e:13:32:a2:60:1c:
         22:99:ac:20:70:8b:d4:97:3f:ee:bf:fc:46:e3:7a:eb:32:45:
         c9:13:e2:1a:c4:19:5c:37:ec:68:2a:63:97:8d:35:22:16:13:
         18:a7:79:71:fe:9d:c0:c2:fa:20:42:1b:d7:69:17:a4:e0:c7:
         bc:21:15:b0:dc:00:c1:7b:2d:f7:3e:3d:51:94:42:7c:79:c7:
         d6:2a:07:3e:79:52:a2:05:02:91:e7:80:6b:7b:05:35:63:62:
         4c:cd:73:17:00:55:fe:c5:f2:eb:4a:d8:da:4f:23:57:5b:01:
         33:90:29:95:24:cf:9b:83:2d:84:99:7e:15:5f:7a:5e:0a:63:
         1c:34:fa:4d:2c:8b:94:eb:e4:94:0b:f8:f0:0d:2c:1b:a0:4f:
         71:25:70:07:a1:6c:d8:f0:c9:b4:4f:2c:30:fb:99:4c:a2:de:
         f8:3d:51:fa:21:38:d3:33:62:60:77:47:45:f5:56:82:a3:11:
         73:3a:b6:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnK7k39XRrN3GAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjljNmExOWUtYTgzYy00M2FkLThkMTAtNjhkYWViMTYw
MDMzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk
OWE3NTBiMDYtNDVhYS00YTQyLTlhOTctOTI0ZjNjNTk2NGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzb9oWKyZc6MvbAf5SGF9k6wn0Z2OsCLjorE
SH4BpdEljj2IoXvrq91A55MaQ4q58L4S7vEPyZogDwwwHbinhUlmAR8kK/wVg2Ho
/Q5ivUbTsu29er+PNB6e+J6dL3FZyRl0IsAwsx20Fxd1C8QKvev2sekfS4VBirYN
I20mYUmYqZ8oKu2jetSUQbXlddTzIfsRRNU3P6eZxmhIsEKndjUhg2cdTEZqhQ4u
Yo/VWfdjffETVjoVyqDz/X0QCoxagbgtru79kSLh2dvJvkzTspOiPC/CupWP7wu1
Nb62PPPFRsqS9bZGYWmY4p2eff0JXBzpHnlCWWAaY22H63x3ZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAACsnDkYOyWoXt1d6e/umVc4yb9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yOWM2
YTE5ZS1hODNjLTQzYWQtOGQxMC02OGRhZWIxNjAwMzMvZDkwOTkxNjUtOGM3Yi0z
Nzg1LWIxY2ItNjM1ZGFlMmZmMTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjljNmExOWUtYTgzYy00M2FkLThk
MTAtNjhkYWViMTYwMDMzLzI5YzZhMTllLWE4M2MtNDNhZC04ZDEwLTY4ZGFlYjE2
MDAzMy5jcmwwHwYDVR0jBBgwFoAURYuDipgToB+X1z11nxV01t29atEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yOWM2YTE5ZS1hODNjLTQzYWQtOGQxMC02OGRh
ZWIxNjAwMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7iQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4AxkUKCIpJt7PAIYSdwsi3ZmbCEXIO8DI49FEAD787rg1/vhBgGzUl
qxGZF/yDceJ/NWWdN/tahgu0f/3nowd3hU4TMqJgHCKZrCBwi9SXP+6//Ebjeusy
RckT4hrEGVw37GgqY5eNNSIWExineXH+ncDC+iBCG9dpF6Tgx7whFbDcAMF7Lfc+
PVGUQnx5x9YqBz55UqIFApHngGt7BTVjYkzNcxcAVf7F8utK2NpPI1dbATOQKZUk
z5uDLYSZfhVfel4KYxw0+k0si5Tr5JQL+PANLBugT3ElcAehbNjwybRPLDD7mUyi
3vg9UfohONMzYmB3R0X1VoKjEXM6tns=
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:55:56 2025 by rpki-client