Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/d094c554-69f5-3eed-a828-591b30c926cb.roa
File:                     d094c554-69f5-3eed-a828-591b30c926cb.roa (raw, json)
Hash identifier:          QgcMScR/tnoQPMYaN9/UDR/GyRjMtwLjayldoM5gzlo=
Subject key identifier:   85:50:B5:70:D8:D1:ED:22:04:A5:82:76:82:54:0F:6D:9F:66:FA:47
Certificate issuer:       /CN=45b0b374-863f-468e-a08d-342445e7a940
Certificate serial:       010D0C9F4328584993F9D98DEB079F8813BBF080
Authority key identifier: 59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/d094c554-69f5-3eed-a828-591b30c926cb.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     63270
IP address blocks:        23.155.32.0/24 maxlen: 24
                          98.142.186.0/23 maxlen: 24
                          172.98.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:d9:8d:eb:07:9f:88:13:bb:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45b0b374-863f-468e-a08d-342445e7a940
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=c42e3092-cc33-4b5f-b860-a53c5c1b9319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:89:85:b7:90:ca:4b:8b:9a:98:c6:79:77:
                    3a:2c:23:3f:62:ac:44:04:16:7f:22:eb:6a:3f:1f:
                    74:bf:26:18:29:91:05:c8:41:fd:0c:f7:36:37:4a:
                    26:45:d2:c4:42:f3:73:a7:44:f5:0e:95:32:47:ea:
                    15:64:51:a4:27:8e:99:2d:92:98:06:e1:ff:a2:06:
                    20:8b:a0:9e:f0:bf:e5:bd:4e:09:18:88:03:38:42:
                    d4:c0:59:39:48:4a:94:7c:ff:1d:08:13:0c:29:93:
                    8b:b5:79:c9:3f:05:cf:b9:30:a3:1d:c9:43:be:55:
                    ca:ea:93:97:7e:80:0f:2b:63:c2:39:9a:77:14:42:
                    88:de:57:36:b3:a7:d1:1a:79:24:57:bc:81:8c:5f:
                    15:28:16:d4:13:d3:fe:fb:32:8d:7b:01:3a:0c:a3:
                    43:01:f0:87:99:af:e7:1d:20:fe:23:15:00:52:a5:
                    c7:92:c4:3e:58:4d:a6:50:83:21:4c:e6:70:9d:26:
                    1c:e0:e2:07:93:0b:84:6f:0a:42:c9:9f:dd:b7:70:
                    67:8b:20:e6:3e:d2:b5:83:7a:98:bc:2a:37:f0:2d:
                    0b:ab:a3:40:d9:a3:6d:03:d1:a2:83:21:00:40:7f:
                    b1:83:66:4d:ac:de:09:b7:2b:f7:7e:c6:7a:c3:80:
                    8c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:50:B5:70:D8:D1:ED:22:04:A5:82:76:82:54:0F:6D:9F:66:FA:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/d094c554-69f5-3eed-a828-591b30c926cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.crl

            X509v3 Authority Key Identifier:
                keyid:59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.32.0/24
                  98.142.186.0/23
                  172.98.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ea:6e:c0:8a:de:fc:92:1f:bb:f6:a0:35:4f:7d:e8:da:5c:
         6d:98:5f:26:cb:a6:6d:ef:a8:42:29:82:79:71:ca:26:96:4e:
         15:34:da:8e:b0:85:6a:e2:c5:ff:d8:d4:67:b5:d1:ef:14:ef:
         45:26:93:df:40:78:2c:6c:e2:f8:34:1c:c9:f5:dc:0a:61:6c:
         07:5b:d4:df:0b:6a:22:94:38:61:c3:e7:7b:89:14:ac:e6:f7:
         2f:b6:b4:c7:cd:5a:e8:78:1c:5a:98:09:c1:e7:75:99:fc:cc:
         19:70:42:84:f8:63:b5:f8:93:40:11:17:d4:98:ec:b2:53:e4:
         b9:5b:c2:6b:fb:4b:65:55:53:26:b5:6c:36:15:16:2d:3e:35:
         04:fc:d1:0a:65:80:a8:03:2a:1e:a5:24:e1:e5:90:9e:ac:eb:
         a1:96:80:e6:26:6e:84:b5:d3:2e:3e:b5:64:9c:7f:b0:0c:ba:
         c2:dd:29:48:71:ec:5a:a4:33:8f:f1:cd:51:72:f7:94:6d:46:
         81:69:f6:66:92:77:44:fc:68:56:90:65:f4:dd:2e:ea:90:c8:
         e5:97:da:e5:9c:8c:f8:8e:55:b8:85:f9:d0:93:0f:2a:ba:88:
         06:28:85:b3:9b:ff:cc:43:d7:97:2c:b7:e0:b5:b2:b2:88:16:
         da:cf:a2:a1
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEmT+dmN6wefiBO78IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDViMGIzNzQtODYzZi00NjhlLWEwOGQtMzQyNDQ1ZTdh
OTQwMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk
YzQyZTMwOTItY2MzMy00YjVmLWI4NjAtYTUzYzVjMWI5MzE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vmJhbeQykuLmpjGeXc6LCM/YqxEBBZ/Iutq
Px90vyYYKZEFyEH9DPc2N0omRdLEQvNzp0T1DpUyR+oVZFGkJ46ZLZKYBuH/ogYg
i6Ce8L/lvU4JGIgDOELUwFk5SEqUfP8dCBMMKZOLtXnJPwXPuTCjHclDvlXK6pOX
foAPK2PCOZp3FEKI3lc2s6fRGnkkV7yBjF8VKBbUE9P++zKNewE6DKNDAfCHma/n
HSD+IxUAUqXHksQ+WE2mUIMhTOZwnSYc4OIHkwuEbwpCyZ/dt3BniyDmPtK1g3qY
vCo38C0Lq6NA2aNtA9GigyEAQH+xg2ZNrN4Jtyv3fsZ6w4CMHQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFIVQtXDY0e0iBKWCdoJUD22fZvpHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NWIw
YjM3NC04NjNmLTQ2OGUtYTA4ZC0zNDI0NDVlN2E5NDAvZDA5NGM1NTQtNjlmNS0z
ZWVkLWE4MjgtNTkxYjMwYzkyNmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDViMGIzNzQtODYzZi00NjhlLWEw
OGQtMzQyNDQ1ZTdhOTQwLzQ1YjBiMzc0LTg2M2YtNDY4ZS1hMDhkLTM0MjQ0NWU3
YTk0MC5jcmwwHwYDVR0jBBgwFoAUWfqRqOr7Ky3+V6oj1tTVl2+8au4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80NWIwYjM3NC04NjNmLTQ2OGUtYTA4ZC0zNDI0
NDVlN2E5NDAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF5sgAwQB
Yo66AwQArGIGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAIjqbsCK3vySH7v2oDVPfejaXG2YXybLpm3vqEIp
gnlxyiaWThU02o6whWrixf/Y1Ge10e8U70Umk99AeCxs4vg0HMn13AphbAdb1N8L
aiKUOGHD53uJFKzm9y+2tMfNWuh4HFqYCcHndZn8zBlwQoT4Y7X4k0ARF9SY7LJT
5Llbwmv7S2VVUya1bDYVFi0+NQT80QplgKgDKh6lJOHlkJ6s66GWgOYmboS10y4+
tWScf7AMusLdKUhx7FqkM4/xzVFy95RtRoFp9maSd0T8aFaQZfTdLuqQyOWX2uWc
jPiOVbiF+dCTDyq6iAYohbOb/8xD15cst+C1srKIFtrPoqE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:06:16 2025 by rpki-client