Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/701e424b-8990-359d-863d-f1684f6d8e2a.roa
File:                     701e424b-8990-359d-863d-f1684f6d8e2a.roa (raw, json)
Hash identifier:          J4Z7itTJLTSybq+ABJT2TULOTEl9+VAdxuErX/nMDYc=
Subject key identifier:   BC:D7:86:B5:60:F6:2C:56:EF:A5:16:3A:82:0C:B6:02:54:DA:09:D1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858497C3EE9B6E53E1835AB12CAC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/701e424b-8990-359d-863d-f1684f6d8e2a.roa
Signing time:             Fri 11 Apr 2025 01:00:48 +0000
ROA not before:           Fri 11 Apr 2025 01:00:48 +0000
ROA not after:            Thu 10 Jul 2025 01:00:48 +0000
asID:                     16625
IP address blocks:        23.219.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:3e:e9:b6:e5:3e:18:35:ab:12:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 11 01:00:48 2025 GMT
            Not After : Jul 10 01:00:48 2025 GMT
        Subject: CN=6cf67dfc-0312-4bcd-aabc-99d2ec035772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4e:a8:15:1a:78:61:3e:60:3e:24:b5:a5:6b:
                    37:16:a0:ec:0f:ec:8e:13:0b:cf:57:6d:77:25:1c:
                    79:1f:69:6a:7e:11:eb:42:78:d5:37:d2:40:e0:05:
                    38:6f:55:3c:af:5e:e1:5f:b9:2d:80:d2:4b:72:fe:
                    4b:97:7d:fa:2e:42:74:a6:f3:b1:20:45:a4:e4:a9:
                    32:1d:7b:59:ed:0f:56:8d:55:5d:fb:86:57:87:f4:
                    1d:b7:4e:08:df:10:25:31:5b:c5:07:f8:f5:25:f8:
                    83:06:7f:78:88:ab:bd:21:15:e5:79:b9:db:b4:59:
                    8f:db:10:3e:d6:75:07:db:5d:48:a7:22:7c:23:02:
                    8a:c8:ae:22:4b:25:b1:8d:0b:cd:6b:fd:52:9e:fa:
                    09:9d:61:31:81:2f:0a:17:61:8e:9b:17:07:2f:33:
                    aa:18:a2:85:39:a2:e1:75:7a:26:1c:43:11:c0:7b:
                    ab:a1:47:1a:73:03:92:db:a2:df:c5:ab:c7:75:39:
                    f2:28:52:68:b5:13:8c:ce:a3:53:55:ee:0c:cd:a9:
                    e5:c3:5a:de:f4:67:28:6a:39:72:b4:2a:3b:6e:c6:
                    5f:d4:4b:b5:4d:2d:60:45:a4:ff:62:63:89:a4:32:
                    73:01:87:b7:5e:d8:8f:50:9e:b0:c3:2e:ad:26:00:
                    f5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D7:86:B5:60:F6:2C:56:EF:A5:16:3A:82:0C:B6:02:54:DA:09:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/701e424b-8990-359d-863d-f1684f6d8e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.219.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:52:d2:7b:6b:85:93:bc:f3:2d:37:52:44:d8:85:d7:fc:2c:
         30:3d:68:e9:90:fe:32:48:18:23:f6:37:50:c5:a2:f3:8e:f5:
         98:ca:58:e8:d2:86:45:a0:82:51:b9:1c:38:db:ef:9c:26:80:
         12:b1:b1:68:8b:74:96:29:08:60:2b:17:57:dc:9a:f7:ca:1a:
         0d:1a:b6:dc:2d:8a:44:d4:09:a6:9e:f0:ad:ea:30:7e:84:cb:
         0c:e3:6b:46:5f:37:35:cd:00:b6:e9:a2:6f:84:1d:81:af:37:
         1a:70:04:70:1b:50:48:99:90:7e:98:7f:75:60:14:4f:16:d1:
         48:65:09:41:69:64:b1:c4:b8:35:1e:c6:c5:1a:49:ce:92:59:
         63:5e:e0:17:9b:85:2f:e2:0d:29:46:88:66:24:d1:c0:dd:df:
         c2:da:6b:82:ad:2b:c4:b2:a7:a7:0b:be:8c:be:ca:75:5d:1e:
         57:cd:58:9b:d4:58:51:b5:18:48:a4:e9:cb:db:5f:a8:2e:0d:
         6b:55:07:7b:a1:b0:d4:c1:f3:e9:a3:a2:b1:b0:f4:03:ad:f6:
         9a:95:0a:88:89:15:bf:e2:ee:b2:57:d5:50:07:f8:14:21:56:
         b6:00:c0:10:03:93:9a:a1:1f:0b:43:e5:ae:d6:ca:b9:2c:40:
         3f:96:14:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8Pum25T4YNasSysAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk
NmNmNjdkZmMtMDMxMi00YmNkLWFhYmMtOTlkMmVjMDM1NzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE6oFRp4YT5gPiS1pWs3FqDsD+yOEwvPV213
JRx5H2lqfhHrQnjVN9JA4AU4b1U8r17hX7ktgNJLcv5Ll336LkJ0pvOxIEWk5Kky
HXtZ7Q9WjVVd+4ZXh/Qdt04I3xAlMVvFB/j1JfiDBn94iKu9IRXlebnbtFmP2xA+
1nUH211IpyJ8IwKKyK4iSyWxjQvNa/1SnvoJnWExgS8KF2GOmxcHLzOqGKKFOaLh
dXomHEMRwHuroUcacwOS26LfxavHdTnyKFJotROMzqNTVe4Mzanlw1re9Gcoajly
tCo7bsZf1Eu1TS1gRaT/YmOJpDJzAYe3XtiPUJ6wwy6tJgD19QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLzXhrVg9ixW76UWOoIMtgJU2gnRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzAxZTQyNGItODk5MC0z
NTlkLTg2M2QtZjE2ODRmNmQ4ZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9u6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJS0ntrhZO88y03UkTYhdf8LDA9aOmQ/jJIGCP2N1DFovOO9ZjKWOjS
hkWgglG5HDjb75wmgBKxsWiLdJYpCGArF1fcmvfKGg0attwtikTUCaae8K3qMH6E
ywzja0ZfNzXNALbpom+EHYGvNxpwBHAbUEiZkH6Yf3VgFE8W0UhlCUFpZLHEuDUe
xsUaSc6SWWNe4BebhS/iDSlGiGYk0cDd38Laa4KtK8Syp6cLvoy+ynVdHlfNWJvU
WFG1GEik6cvbX6guDWtVB3uhsNTB8+mjorGw9AOt9pqVCoiJFb/i7rJX1VAH+BQh
VrYAwBADk5qhHwtD5a7WyrksQD+WFEA=
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:25:38 2025 by rpki-client