Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/d4c47704-52f2-3a15-b7a4-f4675a4668ed.roa
File:                     d4c47704-52f2-3a15-b7a4-f4675a4668ed.roa (raw, json)
Hash identifier:          VjGBLwBtovp/HU2ZbeHyazf8d0x/USr0FI9b1es3KgU=
Subject key identifier:   A7:7D:F7:AD:7C:0E:AA:EE:A9:7A:0C:BA:1C:4A:75:23:7B:FA:EB:6E
Certificate issuer:       /CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8
Certificate serial:       010D0C9F4328584A0CB8BC53423C7D70A861A7C0
Authority key identifier: 84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/d4c47704-52f2-3a15-b7a4-f4675a4668ed.roa
Signing time:             Sun 01 Jun 2025 19:02:41 +0000
ROA not before:           Sun 01 Jun 2025 19:02:41 +0000
ROA not after:            Sat 30 Aug 2025 19:02:41 +0000
asID:                     23061
IP address blocks:        23.163.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:b8:bc:53:42:3c:7d:70:a8:61:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8
        Validity
            Not Before: Jun  1 19:02:41 2025 GMT
            Not After : Aug 30 19:02:41 2025 GMT
        Subject: CN=3b88f5d9-3bf8-4083-91c9-2236340e45a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:67:58:3e:8f:b9:6a:a0:d3:67:ed:57:6f:
                    bd:71:fb:d8:b4:c4:4f:7e:6d:43:01:e9:ff:ec:bb:
                    12:25:08:07:74:1f:00:4f:b7:b9:51:20:51:21:8b:
                    31:65:55:c7:e5:67:5b:00:36:6a:45:68:26:51:f0:
                    3f:ae:f5:30:96:3e:3b:b8:46:47:39:91:b2:08:9e:
                    fc:0e:52:7a:3a:31:64:a7:2d:20:1e:10:a6:76:58:
                    07:3e:00:9b:67:36:4f:4c:f0:b3:d3:4a:59:14:09:
                    d0:c4:d7:bd:36:9e:95:1a:52:ef:d1:da:4b:28:f4:
                    09:cf:8f:9b:4f:9e:ca:c2:c3:12:6a:53:6a:b5:91:
                    a5:52:ce:1c:d4:09:f9:cd:e7:f6:af:8a:4b:aa:16:
                    7c:d7:74:d3:c7:e9:2b:88:94:73:8c:e7:de:8c:5f:
                    41:6d:f6:5c:8d:7d:32:d8:e1:58:62:d7:1c:3d:30:
                    e1:38:88:3a:1f:55:b4:91:7f:1c:d5:e1:79:bf:7d:
                    70:77:83:9f:d5:8d:e8:35:cc:6d:e4:cb:83:f4:32:
                    10:38:c6:cc:cb:9a:e3:58:64:b2:0a:d9:b2:3f:cf:
                    7e:40:9b:70:6f:e4:2b:df:fb:31:54:7b:44:71:d5:
                    6e:b3:8c:e4:e6:97:bc:22:85:b2:5a:93:69:4e:39:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7D:F7:AD:7C:0E:AA:EE:A9:7A:0C:BA:1C:4A:75:23:7B:FA:EB:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/d4c47704-52f2-3a15-b7a4-f4675a4668ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl

            X509v3 Authority Key Identifier:
                keyid:84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a4:7e:35:96:87:86:c0:ff:c3:9f:a7:b6:1a:68:2d:ee:51:
         41:c7:d1:8e:2f:97:76:2f:25:47:e1:e6:57:ca:0c:3d:4c:c9:
         df:11:35:29:f0:46:cf:14:c4:ca:d8:fa:a1:aa:1c:dd:ce:3a:
         4e:a9:51:60:47:21:17:8e:14:8f:f2:f7:8e:f7:b5:97:cb:4e:
         bf:ff:7a:ac:be:04:d8:2c:d5:49:51:c8:db:fb:7e:07:87:f6:
         b5:2e:15:95:14:77:03:be:25:cb:91:1f:9b:f2:91:a2:42:43:
         25:a4:53:05:a8:52:d2:93:73:b6:a6:10:8e:97:d7:ab:f3:a5:
         57:96:e0:8b:4c:41:44:b0:c1:86:c8:4c:0a:f3:2c:a3:4d:b8:
         00:0f:8d:da:82:a2:db:02:ab:13:8d:62:af:37:09:71:0d:f4:
         f0:96:fb:2a:1a:f6:fa:78:33:f3:18:ba:4e:3d:02:f9:bd:af:
         a8:75:ec:2c:37:93:c2:ad:c3:7d:8f:66:9b:56:08:19:23:1c:
         c7:5a:46:f6:85:9b:2a:62:ec:8a:e3:c1:14:ab:75:f4:6e:10:
         94:fe:41:be:56:d2:a4:dd:ed:cb:55:38:68:e5:ec:0c:af:08:
         c8:65:2b:3a:46:94:f5:6c:78:1a:c9:39:bb:90:34:b0:62:93:
         53:9b:08:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMuLxTQjx9cKhhp8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWU1YjEzYjAtYTk5NC00ODVmLWFkY2EtYTJlYTI3ZmM5
ZGU4MB4XDTI1MDYwMTE5MDI0MVoXDTI1MDgzMDE5MDI0MVowLzEtMCsGA1UEAxMk
M2I4OGY1ZDktM2JmOC00MDgzLTkxYzktMjIzNjM0MGU0NWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2JnWD6PuWqg02ftV2+9cfvYtMRPfm1DAen/
7LsSJQgHdB8AT7e5USBRIYsxZVXH5WdbADZqRWgmUfA/rvUwlj47uEZHOZGyCJ78
DlJ6OjFkpy0gHhCmdlgHPgCbZzZPTPCz00pZFAnQxNe9Np6VGlLv0dpLKPQJz4+b
T57KwsMSalNqtZGlUs4c1An5zef2r4pLqhZ813TTx+kriJRzjOfejF9BbfZcjX0y
2OFYYtccPTDhOIg6H1W0kX8c1eF5v31wd4Of1Y3oNcxt5MuD9DIQOMbMy5rjWGSy
CtmyP89+QJtwb+Qr3/sxVHtEcdVus4zk5pe8IoWyWpNpTjmstwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKd99618DqruqXoMuhxKdSN7+utuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZTVi
MTNiMC1hOTk0LTQ4NWYtYWRjYS1hMmVhMjdmYzlkZTgvZDRjNDc3MDQtNTJmMi0z
YTE1LWI3YTQtZjQ2NzVhNDY2OGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWU1YjEzYjAtYTk5NC00ODVmLWFk
Y2EtYTJlYTI3ZmM5ZGU4LzllNWIxM2IwLWE5OTQtNDg1Zi1hZGNhLWEyZWEyN2Zj
OWRlOC5jcmwwHwYDVR0jBBgwFoAUhDSp8l1Fz4TB6iFuF+Mg2Er7APswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85ZTViMTNiMC1hOTk0LTQ4NWYtYWRjYS1hMmVh
MjdmYzlkZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6NoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqkfjWWh4bA/8Ofp7YaaC3uUUHH0Y4vl3YvJUfh5lfKDD1Myd8RNSnw
Rs8UxMrY+qGqHN3OOk6pUWBHIReOFI/y9473tZfLTr//eqy+BNgs1UlRyNv7fgeH
9rUuFZUUdwO+JcuRH5vykaJCQyWkUwWoUtKTc7amEI6X16vzpVeW4ItMQUSwwYbI
TArzLKNNuAAPjdqCotsCqxONYq83CXEN9PCW+yoa9vp4M/MYuk49Avm9r6h17Cw3
k8Ktw32PZptWCBkjHMdaRvaFmypi7IrjwRSrdfRuEJT+Qb5W0qTd7ctVOGjl7Ayv
CMhlKzpGlPVseBrJObuQNLBik1ObCHw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:13:47 2025 by rpki-client