Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/6f593c08-3653-34e9-8e4d-e176f1d87536.roa
File:                     6f593c08-3653-34e9-8e4d-e176f1d87536.roa (raw, json)
Hash identifier:          n0uDFvVmvz7Ahtn+Wpcg7vrWUzNsARu4ICyPyojN+Zo=
Subject key identifier:   6F:2B:81:CF:E2:DA:05:43:17:8F:CE:A6:07:00:DF:F8:0C:5C:5A:EB
Certificate issuer:       /CN=b673aad8-2248-407c-90e8-0781473d6616
Certificate serial:       010D0C9F4328584991F2AEC17F081365BFF43160
Authority key identifier: F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/6f593c08-3653-34e9-8e4d-e176f1d87536.roa
Signing time:             Fri 18 Apr 2025 19:35:01 +0000
ROA not before:           Fri 18 Apr 2025 19:35:01 +0000
ROA not after:            Thu 17 Jul 2025 19:35:01 +0000
asID:                     16509
IP address blocks:        23.138.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:f2:ae:c1:7f:08:13:65:bf:f4:31:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b673aad8-2248-407c-90e8-0781473d6616
        Validity
            Not Before: Apr 18 19:35:01 2025 GMT
            Not After : Jul 17 19:35:01 2025 GMT
        Subject: CN=a3e044dd-8c34-4296-8a19-d7e7ffdb8c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:38:85:9a:fa:80:0c:a6:7b:c1:26:cf:4c:
                    14:c4:4e:b1:a7:b5:3c:ef:bf:ed:8f:3a:44:d7:f7:
                    47:8c:11:98:5c:94:e9:52:59:71:e9:36:30:55:9b:
                    41:fd:fe:30:7b:ec:52:fc:78:7f:be:91:9d:eb:0b:
                    3f:10:74:40:07:57:20:f1:c0:ab:64:bd:89:07:50:
                    1e:80:b9:5e:27:6c:73:0b:be:d6:08:9b:2e:ca:98:
                    92:fa:94:91:53:1b:ce:94:7e:8b:86:8a:fa:16:7a:
                    22:96:c0:6d:30:66:1a:6b:49:e1:f2:d3:3a:83:11:
                    5a:9e:01:8e:04:05:24:ef:0f:96:2a:66:55:f8:03:
                    a4:49:98:c9:e6:15:18:43:89:25:0c:c2:9d:f7:fb:
                    f9:07:63:56:e9:41:cb:8a:a5:31:cd:5d:1e:b7:d7:
                    95:49:1e:46:7b:b5:cc:40:20:93:79:31:99:b9:01:
                    bb:23:c1:95:b3:b8:66:16:fb:0f:4b:4f:06:d4:3c:
                    a8:c5:03:a3:f8:0a:6c:a5:ac:b3:54:f0:a6:97:7e:
                    62:53:01:da:fd:f2:67:82:bc:1a:61:41:ac:58:3f:
                    a4:04:c2:dc:a3:9c:a1:74:07:c2:ac:99:e9:58:44:
                    b4:0c:fd:4e:b0:ed:f9:70:c2:e3:e6:08:ed:a8:a2:
                    5e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2B:81:CF:E2:DA:05:43:17:8F:CE:A6:07:00:DF:F8:0C:5C:5A:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/6f593c08-3653-34e9-8e4d-e176f1d87536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.crl

            X509v3 Authority Key Identifier:
                keyid:F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:96:af:c3:0f:a9:7f:af:80:8d:dd:07:f7:6e:21:28:79:ae:
         55:35:66:34:a3:6b:32:62:6e:91:bd:10:59:a0:20:ae:3a:4e:
         fc:e5:00:b2:2f:0c:bc:ab:98:bc:01:eb:4d:4b:c6:f6:03:63:
         48:4f:af:cb:2b:88:f9:ec:18:81:d6:53:06:e5:9c:25:f5:0f:
         31:f8:09:71:aa:d8:5e:1f:1e:ba:60:64:43:97:b2:03:49:83:
         28:f1:e7:22:a9:98:f9:9b:c2:41:78:64:4b:eb:6c:44:fa:3d:
         43:f9:74:05:55:a7:86:cb:45:75:12:cf:b3:c1:2f:ff:80:e3:
         8e:38:de:fd:74:2c:62:25:6b:43:15:bf:1c:15:ea:81:1c:6d:
         5b:df:c1:81:ad:d6:73:50:c7:c5:bb:cc:98:de:e5:e4:35:77:
         a0:2c:a8:9e:f0:8b:1e:5b:6d:b4:c1:db:5d:e5:b6:12:51:85:
         51:3b:13:4a:a6:dc:56:0f:f6:8d:01:23:52:74:8d:c3:b4:ce:
         84:4f:9b:e7:77:18:cb:49:3b:6f:d0:46:2d:38:d9:49:af:64:
         12:12:7e:72:2b:b3:fe:fd:90:59:b5:e7:dd:f1:49:9f:3e:2f:
         77:b2:97:82:de:18:f4:68:96:f5:16:1f:14:f4:3c:e1:f3:e4:
         8c:a0:02:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmR8q7BfwgTZb/0MWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjY3M2FhZDgtMjI0OC00MDdjLTkwZTgtMDc4MTQ3M2Q2
NjE2MB4XDTI1MDQxODE5MzUwMVoXDTI1MDcxNzE5MzUwMVowLzEtMCsGA1UEAxMk
YTNlMDQ0ZGQtOGMzNC00Mjk2LThhMTktZDdlN2ZmZGI4YzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO44hZr6gAyme8Emz0wUxE6xp7U877/tjzpE
1/dHjBGYXJTpUllx6TYwVZtB/f4we+xS/Hh/vpGd6ws/EHRAB1cg8cCrZL2JB1Ae
gLleJ2xzC77WCJsuypiS+pSRUxvOlH6Lhor6FnoilsBtMGYaa0nh8tM6gxFangGO
BAUk7w+WKmZV+AOkSZjJ5hUYQ4klDMKd9/v5B2NW6UHLiqUxzV0et9eVSR5Ge7XM
QCCTeTGZuQG7I8GVs7hmFvsPS08G1DyoxQOj+ApspayzVPCml35iUwHa/fJngrwa
YUGsWD+kBMLco5yhdAfCrJnpWES0DP1OsO35cMLj5gjtqKJeRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG8rgc/i2gVDF4/OpgcA3/gMXFrrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iNjcz
YWFkOC0yMjQ4LTQwN2MtOTBlOC0wNzgxNDczZDY2MTYvNmY1OTNjMDgtMzY1My0z
NGU5LThlNGQtZTE3NmYxZDg3NTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjY3M2FhZDgtMjI0OC00MDdjLTkw
ZTgtMDc4MTQ3M2Q2NjE2L2I2NzNhYWQ4LTIyNDgtNDA3Yy05MGU4LTA3ODE0NzNk
NjYxNi5jcmwwHwYDVR0jBBgwFoAU+f39vaYd7kfsQ5VBQQC2fQpoVKIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9iNjczYWFkOC0yMjQ4LTQwN2MtOTBlOC0wNzgx
NDczZDY2MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4oEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyWr8MPqX+vgI3dB/duISh5rlU1ZjSjazJibpG9EFmgIK46TvzlALIv
DLyrmLwB601LxvYDY0hPr8sriPnsGIHWUwblnCX1DzH4CXGq2F4fHrpgZEOXsgNJ
gyjx5yKpmPmbwkF4ZEvrbET6PUP5dAVVp4bLRXUSz7PBL/+A44443v10LGIla0MV
vxwV6oEcbVvfwYGt1nNQx8W7zJje5eQ1d6AsqJ7wix5bbbTB213lthJRhVE7E0qm
3FYP9o0BI1J0jcO0zoRPm+d3GMtJO2/QRi042UmvZBISfnIrs/79kFm1593xSZ8+
L3eyl4LeGPRolvUWHxT0POHz5IygAgE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:22 2025 by rpki-client