Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/84bb876e-c47d-33f4-8cd7-1f3bb4b82001.roa
File:                     84bb876e-c47d-33f4-8cd7-1f3bb4b82001.roa (raw, json)
Hash identifier:          jHxVRrVAoEy7uNcMZJSI4ebDah2nNfWJFuup8FphAS0=
Subject key identifier:   C4:68:65:47:9F:A4:CD:51:6E:59:60:0C:02:FC:52:3A:A1:2C:AB:43
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285849D594EF9AC89DB62ADA653B00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/84bb876e-c47d-33f4-8cd7-1f3bb4b82001.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     7203
IP address blocks:        23.19.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ef:9a:c8:9d:b6:2a:da:65:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=6d7c563d-611f-4e96-b976-00c3ebb9e692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a8:3c:fe:30:9c:49:dd:93:be:3b:75:c1:6a:
                    ae:76:49:87:96:ae:f4:56:ab:0d:a9:4e:5e:74:14:
                    27:67:92:fe:aa:29:d5:83:d8:3f:be:61:2a:00:ed:
                    1d:3f:b9:6d:e1:18:42:a2:b2:5e:3d:36:26:6d:e9:
                    1c:58:4d:51:c5:ed:1e:e7:6c:39:85:91:4c:91:35:
                    05:d5:b5:36:2d:96:1a:80:89:cc:fb:42:b7:76:f2:
                    37:02:08:29:6a:00:e6:c0:fb:b6:1c:d0:35:49:98:
                    80:b8:b1:57:f0:ca:b3:39:c5:21:13:62:18:03:93:
                    cb:b4:ab:92:4b:2e:23:5e:c8:3d:39:a6:7b:7b:78:
                    3f:d5:b7:ce:ab:ec:80:b3:65:66:5f:8e:76:50:38:
                    de:31:65:32:57:51:37:88:4d:6e:37:f4:18:f2:1a:
                    ca:f4:68:2f:71:7b:86:8a:bb:97:dd:d6:9d:a4:87:
                    d6:85:ba:ff:a7:f6:96:e2:2b:4c:9f:73:57:03:be:
                    80:4d:1b:93:fc:ad:c2:73:ea:da:e1:94:70:2c:55:
                    a7:92:6c:fe:b4:97:60:61:84:0c:9e:c3:dc:6f:c0:
                    8c:3a:99:3c:4e:15:97:b9:1e:50:ba:29:d1:8d:d2:
                    2e:ea:c8:ba:cc:c6:a2:5e:d8:9f:47:40:88:e0:b7:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:68:65:47:9F:A4:CD:51:6E:59:60:0C:02:FC:52:3A:A1:2C:AB:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/84bb876e-c47d-33f4-8cd7-1f3bb4b82001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:a2:32:b0:12:51:bf:18:c7:3e:6b:ef:45:d2:b9:b2:70:93:
         36:3b:9d:4c:57:a2:b9:dd:8f:8b:72:37:62:86:33:f9:c0:01:
         e8:5f:a8:3e:4e:b3:49:6e:8a:1e:db:a9:e2:df:00:2c:86:05:
         6a:78:96:02:44:fe:10:68:0a:86:3d:33:5e:92:ff:d4:a8:f5:
         7f:d7:cf:6d:96:1b:3c:ac:2f:08:a7:3c:12:e4:13:be:8f:c4:
         07:97:d5:9d:20:8b:bf:c9:e7:2a:db:df:3e:bc:15:0b:e3:ac:
         da:6d:23:cb:55:9d:c6:7b:d6:52:34:95:f5:b0:62:20:3d:0c:
         c3:1b:c2:ed:d1:38:99:98:fd:86:1d:b3:da:2e:68:3a:f3:f8:
         ae:ab:b6:81:12:7d:d9:93:e0:66:82:ec:8b:ed:04:08:2f:9f:
         ed:92:3e:e6:ea:38:1c:b5:a1:7a:d7:17:d4:20:a5:80:8c:e7:
         3c:b9:c1:af:bb:db:1b:1d:45:72:25:5c:71:f0:41:da:09:8c:
         e6:a9:fc:5f:3f:90:7e:bc:29:ad:33:a4:1e:1b:90:e0:f4:0f:
         a5:00:2e:39:41:79:c1:3a:5e:cf:2a:93:e6:6f:6a:50:6c:06:
         6f:07:ce:93:b0:1a:24:a5:9d:27:05:9b:39:8e:d2:47:44:ac:
         7a:7c:06:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlO+ayJ22KtplOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk
NmQ3YzU2M2QtNjExZi00ZTk2LWI5NzYtMDBjM2ViYjllNjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6g8/jCcSd2Tvjt1wWqudkmHlq70VqsNqU5e
dBQnZ5L+qinVg9g/vmEqAO0dP7lt4RhCorJePTYmbekcWE1Rxe0e52w5hZFMkTUF
1bU2LZYagInM+0K3dvI3AggpagDmwPu2HNA1SZiAuLFX8MqzOcUhE2IYA5PLtKuS
Sy4jXsg9OaZ7e3g/1bfOq+yAs2VmX452UDjeMWUyV1E3iE1uN/QY8hrK9GgvcXuG
iruX3dadpIfWhbr/p/aW4itMn3NXA76ATRuT/K3Cc+ra4ZRwLFWnkmz+tJdgYYQM
nsPcb8CMOpk8ThWXuR5QuinRjdIu6si6zMaiXtifR0CI4LejGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMRoZUefpM1RbllgDAL8UjqhLKtDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODRiYjg3NmUtYzQ3ZC0z
M2Y0LThjZDctMWYzYmI0YjgyMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACiMrASUb8Yxz5r70XSubJwkzY7nUxXorndj4tyN2KGM/nAAehfqD5O
s0luih7bqeLfACyGBWp4lgJE/hBoCoY9M16S/9So9X/Xz22WGzysLwinPBLkE76P
xAeX1Z0gi7/J5yrb3z68FQvjrNptI8tVncZ71lI0lfWwYiA9DMMbwu3ROJmY/YYd
s9ouaDrz+K6rtoESfdmT4GaC7IvtBAgvn+2SPubqOBy1oXrXF9QgpYCM5zy5wa+7
2xsdRXIlXHHwQdoJjOap/F8/kH68Ka0zpB4bkOD0D6UALjlBecE6Xs8qk+ZvalBs
Bm8HzpOwGiSlnScFmzmO0kdErHp8Bi4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:53:08 2025 by rpki-client