Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/e7592285-1d81-39f4-b9ef-2e69e22050f1.roa
File:                     e7592285-1d81-39f4-b9ef-2e69e22050f1.roa (raw, json)
Hash identifier:          gSqpZHZsQS81j5STMfmcvHW+AB7TcTAVTpojYcxIq9U=
Subject key identifier:   41:CB:A7:B7:55:CA:96:41:A0:FB:5C:2F:2C:FE:43:50:97:70:F0:34
Certificate issuer:       /CN=512e2f2f-c031-4aa3-b0d4-5400aa5a4325
Certificate serial:       010D0C9F432858499F20C6CEEBDBA1BDDE4EB940
Authority key identifier: 09:88:76:B1:1B:15:B4:FA:55:0C:E8:5E:DE:05:21:F0:25:75:92:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/e7592285-1d81-39f4-b9ef-2e69e22050f1.roa
Signing time:             Wed 23 Apr 2025 12:53:24 +0000
ROA not before:           Wed 23 Apr 2025 12:53:24 +0000
ROA not after:            Tue 22 Jul 2025 12:53:24 +0000
asID:                     19710
IP address blocks:        23.138.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:20:c6:ce:eb:db:a1:bd:de:4e:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512e2f2f-c031-4aa3-b0d4-5400aa5a4325
        Validity
            Not Before: Apr 23 12:53:24 2025 GMT
            Not After : Jul 22 12:53:24 2025 GMT
        Subject: CN=4e791f16-6770-483e-a1b8-c0ccbef0c13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8a:31:ee:2e:cd:de:1a:62:26:e2:2e:03:50:
                    e0:4a:e9:f2:c2:13:95:95:57:37:59:2b:e5:38:24:
                    62:b2:b1:fe:1d:c5:91:13:63:22:a5:df:86:b3:52:
                    d5:f5:05:07:4c:a9:c3:38:70:63:b0:01:d8:f6:06:
                    c1:f1:52:fb:1b:c1:b6:01:05:79:bb:a7:cd:4c:ad:
                    5b:02:f2:28:4e:e9:8f:b8:99:01:06:70:9d:67:be:
                    d4:a8:51:99:77:03:a2:14:c5:a7:21:4b:36:12:27:
                    84:86:70:1f:c8:59:78:2c:53:13:cb:88:7d:95:fb:
                    2a:42:bd:28:cb:34:20:c1:81:1f:29:89:7f:55:ca:
                    88:26:2c:f8:58:a3:08:eb:6e:4a:3c:6d:58:3d:bb:
                    31:f4:9b:8f:7b:0e:6a:a3:94:61:57:32:c2:33:35:
                    8f:43:c0:1b:35:1a:2e:e0:b0:22:29:d0:2b:f1:dd:
                    88:7c:a2:e1:40:33:11:8c:10:4b:61:c2:69:07:e0:
                    e4:ef:1a:d0:a2:2b:c7:4b:ff:da:25:d8:64:d6:74:
                    29:ad:79:a3:a8:65:43:96:c9:f3:7a:f4:4a:02:ff:
                    50:69:16:2e:8a:48:95:41:2d:32:a3:0d:8f:93:2c:
                    2e:1b:84:c5:c6:fe:1a:ea:08:6c:a6:07:09:38:62:
                    2b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CB:A7:B7:55:CA:96:41:A0:FB:5C:2F:2C:FE:43:50:97:70:F0:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/e7592285-1d81-39f4-b9ef-2e69e22050f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.crl

            X509v3 Authority Key Identifier:
                keyid:09:88:76:B1:1B:15:B4:FA:55:0C:E8:5E:DE:05:21:F0:25:75:92:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:9e:c5:9e:1e:2f:e6:6f:9d:75:29:18:4a:6c:67:f5:1e:9f:
         b8:b5:99:cb:cd:ea:67:8f:70:7d:cb:e6:ae:a0:e7:2e:d0:f7:
         7f:66:01:a9:b3:15:ec:cd:f4:9c:33:d0:7d:2c:a3:5d:2f:d5:
         7f:87:e5:c4:e1:1d:dd:05:df:6e:58:b3:53:82:d1:94:06:a1:
         9e:a8:88:66:63:98:78:bb:0e:be:6f:2e:0e:19:1b:26:10:fd:
         1b:16:68:31:40:97:1e:cf:12:1a:36:60:8b:29:5d:08:e2:b0:
         23:fb:c6:5f:9d:83:c9:2f:9d:4c:45:c9:70:3a:fc:e2:00:4b:
         1c:3e:9e:54:a4:0f:4a:3f:26:9b:18:11:05:49:97:67:f3:d2:
         5c:35:51:be:dd:23:05:da:05:9a:23:8b:f9:d2:cd:1a:2d:c5:
         36:d6:23:66:d2:7e:a5:64:87:87:3f:91:f6:cd:5c:74:ae:0b:
         d7:09:09:91:69:ef:96:9a:b9:82:f4:ce:25:b1:b6:11:23:87:
         45:86:5f:60:8e:48:4e:fa:6c:43:f9:23:b3:88:d2:d8:44:73:
         e1:b6:c0:51:59:d2:bd:52:32:55:7f:b1:87:a2:48:64:a2:36:
         2b:0b:cc:52:d7:ce:2d:29:5e:dc:bc:31:5a:ce:0b:a5:8a:08:
         31:b4:c5:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfIMbO69uhvd5OuUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTEyZTJmMmYtYzAzMS00YWEzLWIwZDQtNTQwMGFhNWE0
MzI1MB4XDTI1MDQyMzEyNTMyNFoXDTI1MDcyMjEyNTMyNFowLzEtMCsGA1UEAxMk
NGU3OTFmMTYtNjc3MC00ODNlLWExYjgtYzBjY2JlZjBjMTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIox7i7N3hpiJuIuA1DgSunywhOVlVc3WSvl
OCRisrH+HcWRE2Mipd+Gs1LV9QUHTKnDOHBjsAHY9gbB8VL7G8G2AQV5u6fNTK1b
AvIoTumPuJkBBnCdZ77UqFGZdwOiFMWnIUs2EieEhnAfyFl4LFMTy4h9lfsqQr0o
yzQgwYEfKYl/VcqIJiz4WKMI625KPG1YPbsx9JuPew5qo5RhVzLCMzWPQ8AbNRou
4LAiKdAr8d2IfKLhQDMRjBBLYcJpB+Dk7xrQoivHS//aJdhk1nQprXmjqGVDlsnz
evRKAv9QaRYuikiVQS0yow2PkywuG4TFxv4a6ghspgcJOGIrawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEHLp7dVypZBoPtcLyz+Q1CXcPA0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81MTJl
MmYyZi1jMDMxLTRhYTMtYjBkNC01NDAwYWE1YTQzMjUvZTc1OTIyODUtMWQ4MS0z
OWY0LWI5ZWYtMmU2OWUyMjA1MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNTEyZTJmMmYtYzAzMS00YWEzLWIw
ZDQtNTQwMGFhNWE0MzI1LzUxMmUyZjJmLWMwMzEtNGFhMy1iMGQ0LTU0MDBhYTVh
NDMyNS5jcmwwHwYDVR0jBBgwFoAUCYh2sRsVtPpVDOhe3gUh8CV1kswwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy81MTJlMmYyZi1jMDMxLTRhYTMtYjBkNC01NDAw
YWE1YTQzMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4o0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMWexZ4eL+ZvnXUpGEpsZ/Uen7i1mcvN6mePcH3L5q6g5y7Q939mAamz
FezN9Jwz0H0so10v1X+H5cThHd0F325Ys1OC0ZQGoZ6oiGZjmHi7Dr5vLg4ZGyYQ
/RsWaDFAlx7PEho2YIspXQjisCP7xl+dg8kvnUxFyXA6/OIASxw+nlSkD0o/JpsY
EQVJl2fz0lw1Ub7dIwXaBZoji/nSzRotxTbWI2bSfqVkh4c/kfbNXHSuC9cJCZFp
75aauYL0ziWxthEjh0WGX2COSE76bEP5I7OI0thEc+G2wFFZ0r1SMlV/sYeiSGSi
NisLzFLXzi0pXty8MVrOC6WKCDG0xQo=
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:15:38 2025 by rpki-client