Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/3ecb7ff0-3f84-3dc2-92bd-8780201e6814.roa
File:                     3ecb7ff0-3f84-3dc2-92bd-8780201e6814.roa (raw, json)
Hash identifier:          5whuByncQUHguj3IUuWZevlW5Ie79GxmCSufVBWqfqg=
Subject key identifier:   C3:EB:C0:9A:37:5E:A0:87:84:9D:A3:F7:FA:40:F3:F8:61:47:28:1E
Certificate issuer:       /CN=98358f5d-f18a-4598-b78f-1fc0ea91652a
Certificate serial:       010D0C9F4328584AA6F61E1A5F7580BD79359240
Authority key identifier: 01:B7:1F:C1:BF:12:42:00:51:B3:85:A5:DC:26:15:DA:E6:39:C1:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/3ecb7ff0-3f84-3dc2-92bd-8780201e6814.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     57844
IP address blocks:        23.247.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:1e:1a:5f:75:80:bd:79:35:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98358f5d-f18a-4598-b78f-1fc0ea91652a
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=baeedef4-5afc-4c8c-a8f8-82fdc4a1adfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5e:6f:d1:61:9b:2d:92:83:8a:9f:b7:ef:c1:
                    02:90:bc:c3:51:0b:da:09:c4:5b:8f:3d:e5:99:6a:
                    d7:40:f0:55:89:f6:ec:fa:8c:35:00:fb:6e:f3:ef:
                    89:10:46:e9:ef:8d:3e:b9:84:e1:a2:c8:58:54:33:
                    72:18:06:e5:09:22:db:89:62:aa:1f:70:30:c2:f2:
                    93:b4:79:3f:5c:51:d0:0c:f1:ab:36:50:9e:c4:eb:
                    0d:15:3a:52:25:63:ca:14:bc:45:82:a1:f4:0e:d0:
                    4a:3d:a8:5b:f8:0b:08:94:76:c8:e8:0f:83:10:41:
                    2b:b6:58:57:01:71:60:b2:8e:43:41:0d:18:81:ea:
                    84:93:0d:e4:2e:19:c9:d3:bc:be:b3:69:61:bc:96:
                    ec:55:51:8d:5d:c6:fd:56:94:25:fa:a9:2e:33:64:
                    02:99:6e:21:dc:8e:a9:2f:65:1e:ef:1b:e6:1d:01:
                    1e:88:b1:5c:92:7e:2c:c0:bf:3c:63:ec:74:6f:dd:
                    28:01:20:a2:27:37:1c:b6:d5:f9:f4:07:7d:7c:45:
                    a6:66:2f:2c:59:89:e1:d7:4e:f3:db:ee:b2:0e:65:
                    da:1f:45:57:3c:75:d7:89:fe:49:e4:c7:9e:69:de:
                    17:44:39:1b:87:a4:ed:4c:74:6d:e9:48:14:da:f5:
                    12:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EB:C0:9A:37:5E:A0:87:84:9D:A3:F7:FA:40:F3:F8:61:47:28:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/3ecb7ff0-3f84-3dc2-92bd-8780201e6814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.crl

            X509v3 Authority Key Identifier:
                keyid:01:B7:1F:C1:BF:12:42:00:51:B3:85:A5:DC:26:15:DA:E6:39:C1:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:63:05:e7:48:f2:1b:8a:22:36:0e:37:a3:17:56:47:6d:9d:
         3f:d3:b9:8a:a9:82:f1:ce:c0:b2:c2:d8:25:fc:84:73:cc:f4:
         78:6a:cf:ae:d0:b0:6e:da:7f:fd:3a:dc:fc:5f:d6:16:bd:a4:
         b8:fa:cc:c3:14:8a:2b:64:10:a5:03:f0:c6:81:73:76:db:12:
         98:da:d3:94:e7:c0:2f:97:10:23:37:5d:3b:89:4b:49:ae:db:
         e2:b7:64:a3:67:a1:31:89:fd:39:ff:b6:18:5b:90:b2:44:b5:
         6d:1e:75:0d:a3:26:2c:c1:b0:6a:23:b3:08:ee:86:ff:6b:c0:
         cf:71:e0:7e:92:69:76:4f:1b:c8:ed:75:46:f9:cf:be:20:25:
         d9:33:6b:6f:db:8e:c3:a9:28:7d:53:99:17:2c:16:5b:3f:6e:
         7d:0c:75:cb:66:b0:3d:d3:23:fb:03:e6:51:4c:ff:fa:f5:62:
         4f:2a:84:57:88:6c:a3:22:a8:16:a1:21:01:6c:38:58:00:e7:
         6b:cd:a3:84:40:65:0b:3a:cd:2e:cb:1d:53:49:94:1b:8a:d3:
         ff:fd:f0:cb:59:3b:eb:2a:ee:df:a3:4b:b4:9b:7b:b6:c5:37:
         3e:bf:2d:a8:04:25:90:fc:cf:e1:88:23:e5:a0:72:01:18:b0:
         9f:37:c5:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9h4aX3WAvXk1kkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgzNThmNWQtZjE4YS00NTk4LWI3OGYtMWZjMGVhOTE2
NTJhMB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk
YmFlZWRlZjQtNWFmYy00YzhjLWE4ZjgtODJmZGM0YTFhZGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV5v0WGbLZKDip+378ECkLzDUQvaCcRbjz3l
mWrXQPBVifbs+ow1APtu8++JEEbp740+uYThoshYVDNyGAblCSLbiWKqH3AwwvKT
tHk/XFHQDPGrNlCexOsNFTpSJWPKFLxFgqH0DtBKPahb+AsIlHbI6A+DEEErtlhX
AXFgso5DQQ0YgeqEkw3kLhnJ07y+s2lhvJbsVVGNXcb9VpQl+qkuM2QCmW4h3I6p
L2Ue7xvmHQEeiLFckn4swL88Y+x0b90oASCiJzccttX59Ad9fEWmZi8sWYnh107z
2+6yDmXaH0VXPHXXif5J5Meead4XRDkbh6TtTHRt6UgU2vUSAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPrwJo3XqCHhJ2j9/pA8/hhRygeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85ODM1
OGY1ZC1mMThhLTQ1OTgtYjc4Zi0xZmMwZWE5MTY1MmEvM2VjYjdmZjAtM2Y4NC0z
ZGMyLTkyYmQtODc4MDIwMWU2ODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTgzNThmNWQtZjE4YS00NTk4LWI3
OGYtMWZjMGVhOTE2NTJhLzk4MzU4ZjVkLWYxOGEtNDU5OC1iNzhmLTFmYzBlYTkx
NjUyYS5jcmwwHwYDVR0jBBgwFoAUAbcfwb8SQgBRs4Wl3CYV2uY5wdEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy85ODM1OGY1ZC1mMThhLTQ1OTgtYjc4Zi0xZmMw
ZWE5MTY1MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIVjBedI8huKIjYON6MXVkdtnT/TuYqpgvHOwLLC2CX8hHPM9Hhqz67Q
sG7af/063Pxf1ha9pLj6zMMUiitkEKUD8MaBc3bbEpja05TnwC+XECM3XTuJS0mu
2+K3ZKNnoTGJ/Tn/thhbkLJEtW0edQ2jJizBsGojswjuhv9rwM9x4H6SaXZPG8jt
dUb5z74gJdkza2/bjsOpKH1TmRcsFls/bn0MdctmsD3TI/sD5lFM//r1Yk8qhFeI
bKMiqBahIQFsOFgA52vNo4RAZQs6zS7LHVNJlBuK0//98MtZO+sq7t+jS7Sbe7bF
Nz6/LagEJZD8z+GII+WgcgEYsJ83xao=
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:09:12 2025 by rpki-client