Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa
File:                     cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa (raw, json)
Hash identifier:          gg/fO1TAwLZRMrRsGGVWleflNfgyVRZUJpYhCXMYiz4=
Subject key identifier:   64:EE:45:71:20:7C:6B:06:76:8F:33:65:6D:A8:32:95:D6:4D:DC:4B
Certificate issuer:       /CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62
Certificate serial:       010D0C9F432858499AF48B716A7974D531D02F20
Authority key identifier: 46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     12131
IP address blocks:        23.161.34.0/24 maxlen: 24
                          23.187.0.0/24 maxlen: 24
                          23.187.1.0/24 maxlen: 24
                          2620:1df::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:8b:71:6a:79:74:d5:31:d0:2f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=338cd764-2541-4304-8502-4dc213fa2d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e4:cb:15:10:93:b0:ae:31:a5:62:2f:c6:46:
                    b2:82:78:14:92:45:cf:1b:0d:00:45:e1:2f:54:62:
                    3d:83:82:0d:26:11:09:ad:33:d6:50:f1:a6:5a:3a:
                    07:27:bf:20:63:00:1a:75:8c:7e:af:84:6d:49:86:
                    e5:62:1f:db:68:ec:99:c2:d6:3f:69:04:52:a6:7e:
                    d3:9c:cb:c5:60:95:b2:03:97:e3:4d:9c:ec:b0:a9:
                    ca:a0:de:fa:47:90:c2:fd:78:fb:e0:8a:35:57:6e:
                    cf:c4:03:e6:2f:c2:85:b5:ef:a8:8e:ed:92:58:3d:
                    24:1e:6f:10:34:b6:d2:e4:2d:76:14:a3:54:fe:58:
                    71:73:44:7f:08:0d:3e:13:dc:70:88:e6:d7:db:02:
                    02:22:61:19:15:0e:78:ae:fb:1d:00:6c:d9:53:48:
                    99:5b:90:4d:c4:45:22:d7:f5:c9:15:0f:1f:6f:10:
                    39:e8:13:64:07:44:1e:d0:22:14:fe:bf:b8:1d:77:
                    b9:38:46:1f:d5:aa:47:fd:f9:d4:ce:47:0c:46:f7:
                    23:f7:5a:cf:40:b4:45:10:59:e4:15:ec:68:ec:77:
                    2f:a6:f2:d7:b2:9c:88:5c:a2:a5:88:15:2e:f3:e6:
                    5d:d6:94:48:29:c7:37:c4:0b:e4:c5:d4:65:00:02:
                    d3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EE:45:71:20:7C:6B:06:76:8F:33:65:6D:A8:32:95:D6:4D:DC:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl

            X509v3 Authority Key Identifier:
                keyid:46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.34.0/24
                  23.187.0.0/23
                IPv6:
                  2620:1df::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:1d:3a:e5:46:5d:e5:2c:01:6e:49:00:19:6b:9a:e0:6d:
         61:a9:b4:45:28:70:af:fc:c0:2a:d9:2e:cd:b0:b8:aa:50:c6:
         c8:c5:a7:43:b2:90:cf:46:e2:de:fe:40:64:71:7c:a9:7c:cd:
         f9:cb:bc:f2:04:b5:2c:50:09:fd:32:9d:55:07:32:3d:a8:94:
         62:76:ab:1a:e8:31:62:ab:dd:61:a9:c0:a4:a4:4e:8c:90:69:
         91:50:64:84:67:17:5e:c1:c6:d7:9c:11:e7:14:81:d3:e7:c6:
         c4:69:a8:1a:79:77:01:13:82:32:49:f2:21:a6:6a:82:09:51:
         17:9e:69:72:61:5e:73:8b:dc:35:f9:fe:22:5f:f4:5c:77:0e:
         7f:e6:b8:0d:c9:55:f1:15:e7:9c:5e:58:65:9e:1e:58:ca:96:
         ea:fc:c3:63:22:75:34:8a:dc:06:9b:38:06:26:4d:b7:26:18:
         72:3f:86:73:b6:d0:6b:eb:23:0d:e8:af:2b:53:b4:19:85:14:
         ea:18:07:27:ee:07:ed:e4:0a:62:c5:7b:18:c4:9f:16:be:a0:
         a5:43:a6:61:97:66:bb:ae:e0:b9:4e:04:9a:8c:70:3c:12:73:
         ca:45:21:9f:38:13:41:8d:c4:37:55:d2:7d:05:c9:81:de:ed:
         af:c4:66:95
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEma9Itxanl01THQLyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjRmOTEzNTEtYmEyNy00ZDhhLTlkMDYtNTlhZWFhOTcy
YTYyMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk
MzM4Y2Q3NjQtMjU0MS00MzA0LTg1MDItNGRjMjEzZmEyZDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreTLFRCTsK4xpWIvxkaygngUkkXPGw0AReEv
VGI9g4INJhEJrTPWUPGmWjoHJ78gYwAadYx+r4RtSYblYh/baOyZwtY/aQRSpn7T
nMvFYJWyA5fjTZzssKnKoN76R5DC/Xj74Io1V27PxAPmL8KFte+oju2SWD0kHm8Q
NLbS5C12FKNU/lhxc0R/CA0+E9xwiObX2wICImEZFQ54rvsdAGzZU0iZW5BNxEUi
1/XJFQ8fbxA56BNkB0Qe0CIU/r+4HXe5OEYf1apH/fnUzkcMRvcj91rPQLRFEFnk
Fexo7HcvpvLXspyIXKKliBUu8+Zd1pRIKcc3xAvkxdRlAALTjQIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFGTuRXEgfGsGdo8zZW2oMpXWTdxLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5
MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFlYWE5NzJhNjIvY2YxZjU1NDItMzgzMi0z
ZGQ3LWEyYTItMmM2ODU3MWRkMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjRmOTEzNTEtYmEyNy00ZDhhLTlk
MDYtNTlhZWFhOTcyYTYyL2I0ZjkxMzUxLWJhMjctNGQ4YS05ZDA2LTU5YWVhYTk3
MmE2Mi5jcmwwHwYDVR0jBBgwFoAURuImqBfX+N2+K7c2p8i7Vk+K/3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFl
YWE5NzJhNjIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF6EiAwQB
F7sAMA0EAgACMAcDBQAmIAHfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGnUHTrlRl3lLAFuSQAZa5rgbWGp
tEUocK/8wCrZLs2wuKpQxsjFp0OykM9G4t7+QGRxfKl8zfnLvPIEtSxQCf0ynVUH
Mj2olGJ2qxroMWKr3WGpwKSkToyQaZFQZIRnF17BxtecEecUgdPnxsRpqBp5dwET
gjJJ8iGmaoIJUReeaXJhXnOL3DX5/iJf9Fx3Dn/muA3JVfEV55xeWGWeHljKlur8
w2MidTSK3AabOAYmTbcmGHI/hnO20GvrIw3orytTtBmFFOoYByfuB+3kCmLFexjE
nxa+oKVDpmGXZruu4LlOBJqMcDwSc8pFIZ84E0GNxDdV0n0FyYHe7a/EZpU=
-----END CERTIFICATE-----
Generated at Mon May 5 21:36:42 2025 by rpki-client