Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/f44b5d5f-4b16-3738-9696-16d29065549a.roa
File:                     f44b5d5f-4b16-3738-9696-16d29065549a.roa (raw, json)
Hash identifier:          nEsV3velpk2saSQc05BgBLVaej4C2Qo6OLd6/J0DOyA=
Subject key identifier:   20:33:F9:3F:17:4A:38:01:AC:D3:15:33:C6:0E:81:0F:F3:2B:EE:1F
Certificate issuer:       /CN=e9650b1c-fc44-4fff-a4a4-cecd13f234e9
Certificate serial:       010D0C9F43285849E225283B4B3DB0392317D1F0
Authority key identifier: 42:96:05:27:D8:D6:7A:0C:12:45:C3:4E:0C:7F:CF:97:85:2D:F4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/f44b5d5f-4b16-3738-9696-16d29065549a.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     399466
IP address blocks:        23.177.48.0/24 maxlen: 24
                          2602:fca6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:28:3b:4b:3d:b0:39:23:17:d1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9650b1c-fc44-4fff-a4a4-cecd13f234e9
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=98ca52cd-2bac-41c5-b873-b1d7eaca78ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:98:ac:6f:3c:f9:cf:39:4d:19:85:22:dd:
                    d4:db:c2:1d:4b:cf:78:46:8d:dd:c7:9d:cd:e0:6f:
                    01:ac:dc:6b:5e:be:1e:af:37:ca:80:7f:d3:e6:e7:
                    ea:5d:dd:fd:a1:53:f3:8a:83:05:d6:ff:6f:b8:02:
                    6a:c0:bd:8a:33:7a:57:11:db:b9:b4:40:81:4c:5f:
                    1e:2c:50:ff:e9:81:66:4b:31:cb:4c:fe:90:c0:89:
                    7f:31:3c:a2:19:6b:bc:24:e8:80:08:88:e2:51:dc:
                    ed:53:c1:fc:b0:89:da:41:05:d5:6b:2d:bc:1c:9d:
                    7e:d0:bb:a4:94:4e:87:b7:6d:2a:8e:36:30:ad:ff:
                    7f:cd:5d:ce:ba:cc:c5:bc:80:52:51:12:7f:bf:80:
                    28:4e:65:a4:c7:fe:6e:c6:a1:7e:3c:1d:01:1a:7d:
                    91:37:41:20:68:3b:f7:8e:24:73:56:f6:e6:3b:b8:
                    7c:94:6b:5b:0f:9c:7b:dc:1a:38:83:e5:8e:2e:f8:
                    3a:b4:fd:d7:1c:c5:19:e8:8f:8d:85:7e:7b:7e:8e:
                    77:1e:b4:32:fc:5a:e3:ab:58:c8:a9:02:b6:5e:99:
                    c9:57:3c:1a:21:3d:6e:53:53:29:d8:cf:cc:9c:34:
                    77:8d:bf:f3:a3:7e:b2:71:8e:de:5b:09:e7:85:4e:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:33:F9:3F:17:4A:38:01:AC:D3:15:33:C6:0E:81:0F:F3:2B:EE:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/f44b5d5f-4b16-3738-9696-16d29065549a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.crl

            X509v3 Authority Key Identifier:
                keyid:42:96:05:27:D8:D6:7A:0C:12:45:C3:4E:0C:7F:CF:97:85:2D:F4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.48.0/24
                IPv6:
                  2602:fca6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:40:8f:64:d8:d4:1d:b3:cd:e6:3f:0c:b2:33:8e:0a:0b:35:
         6b:c6:e3:1f:d6:33:6d:09:e1:cd:73:23:a7:9b:e7:54:3b:d4:
         f2:1c:b2:93:50:92:ff:47:06:1b:a7:38:1b:93:85:b3:f3:8f:
         b9:c1:9d:f8:63:bc:c4:56:1d:76:07:7c:90:0c:f0:e1:f7:34:
         f6:2b:ed:f0:ea:01:85:7e:6c:42:ef:02:b1:d2:c6:ab:5d:dd:
         20:b5:fe:57:74:b1:62:5d:d3:ad:08:99:b2:b7:30:68:61:ff:
         a5:ae:97:7b:45:ae:f3:5a:2f:1d:f4:59:04:1c:82:f2:67:85:
         5b:bc:a3:22:6c:c5:3b:1f:11:ae:6b:38:f1:08:ec:18:f4:25:
         c8:8b:8e:93:2a:87:ad:45:4b:da:ef:7d:71:3c:2f:70:8e:bd:
         53:c1:da:8e:7d:72:c0:9e:7f:1e:47:6d:13:bb:f7:b8:6f:a0:
         56:00:07:a8:76:ab:a1:07:b7:e0:b2:e9:8b:4d:ac:8a:7c:23:
         0a:7f:ce:64:b0:2a:5e:c5:db:0c:0b:56:44:7e:a0:03:bc:79:
         4e:57:54:71:e3:b4:73:36:c6:c8:95:df:08:e7:3b:82:a0:82:
         54:6f:0a:d7:07:b2:a3:ec:c3:dd:74:bd:7e:ca:62:c1:ae:8d:
         9c:57:a7:63
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEniJSg7Sz2wOSMX0fAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk2NTBiMWMtZmM0NC00ZmZmLWE0YTQtY2VjZDEzZjIz
NGU5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
OThjYTUyY2QtMmJhYy00MWM1LWI4NzMtYjFkN2VhY2E3OGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro6YrG88+c85TRmFIt3U28IdS894Ro3dx53N
4G8BrNxrXr4erzfKgH/T5ufqXd39oVPzioMF1v9vuAJqwL2KM3pXEdu5tECBTF8e
LFD/6YFmSzHLTP6QwIl/MTyiGWu8JOiACIjiUdztU8H8sInaQQXVay28HJ1+0Luk
lE6Ht20qjjYwrf9/zV3OuszFvIBSURJ/v4AoTmWkx/5uxqF+PB0BGn2RN0EgaDv3
jiRzVvbmO7h8lGtbD5x73Bo4g+WOLvg6tP3XHMUZ6I+NhX57fo53HrQy/Frjq1jI
qQK2XpnJVzwaIT1uU1Mp2M/MnDR3jb/zo36ycY7eWwnnhU6mdwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFCAz+T8XSjgBrNMVM8YOgQ/zK+4fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTY1
MGIxYy1mYzQ0LTRmZmYtYTRhNC1jZWNkMTNmMjM0ZTkvZjQ0YjVkNWYtNGIxNi0z
NzM4LTk2OTYtMTZkMjkwNjU1NDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTk2NTBiMWMtZmM0NC00ZmZmLWE0
YTQtY2VjZDEzZjIzNGU5L2U5NjUwYjFjLWZjNDQtNGZmZi1hNGE0LWNlY2QxM2Yy
MzRlOS5jcmwwHwYDVR0jBBgwFoAUQpYFJ9jWegwSRcNODH/Pl4Ut9IkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTY1MGIxYy1mYzQ0LTRmZmYtYTRhNC1jZWNk
MTNmMjM0ZTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7EwMA4E
AgACMAgDBgQmAvymADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArQI9k2NQds83mPwyyM44KCzVrxuMf1jNt
CeHNcyOnm+dUO9TyHLKTUJL/RwYbpzgbk4Wz84+5wZ34Y7zEVh12B3yQDPDh9zT2
K+3w6gGFfmxC7wKx0sarXd0gtf5XdLFiXdOtCJmytzBoYf+lrpd7Ra7zWi8d9FkE
HILyZ4VbvKMibMU7HxGuazjxCOwY9CXIi46TKoetRUva731xPC9wjr1TwdqOfXLA
nn8eR20Tu/e4b6BWAAeodquhB7fgsumLTayKfCMKf85ksCpexdsMC1ZEfqADvHlO
V1Rx47RzNsbIld8I5zuCoIJUbwrXB7Kj7MPddL1+ymLBro2cV6dj
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:15 2025 by rpki-client