Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcee2650-0c45-3367-907b-92fd6f8b07cb.roa
File:                     fcee2650-0c45-3367-907b-92fd6f8b07cb.roa (raw, json)
Hash identifier:          XvjYJAT6++mBiynxHQYSp/zPFd2D3NapZsTDonY1aVE=
Subject key identifier:   A9:18:C5:D9:B7:80:62:81:DA:06:B5:A9:1B:8B:5A:D4:00:81:00:64
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858499AF49FFD7216C2B18EADFC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcee2650-0c45-3367-907b-92fd6f8b07cb.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     20940
IP address blocks:        23.213.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:9f:fd:72:16:c2:b1:8e:ad:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=b255a6b4-74d2-46e8-bb0a-0c185833bcf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:96:a7:17:69:79:09:2e:d9:d8:3b:a3:0a:7b:
                    fa:a3:c0:75:ab:c7:a5:34:e6:1f:63:71:fb:a9:57:
                    44:e8:9b:7d:2e:f1:21:a5:28:47:2c:4b:3c:27:78:
                    6a:a1:0b:18:94:27:c0:7e:b7:4d:d2:57:82:32:13:
                    8c:bc:ef:2b:68:c2:2d:7b:b2:fa:52:96:68:4e:a7:
                    4c:63:13:d5:d2:85:5c:c1:0c:b9:1a:15:9a:ae:1e:
                    27:1a:20:f1:e5:cb:79:64:b1:10:bf:29:8f:fb:e4:
                    aa:3b:e3:83:55:35:43:62:d4:4f:bd:6f:7c:73:26:
                    78:f6:55:24:e3:94:d2:2e:56:15:0d:00:22:97:a7:
                    af:a5:ac:ee:04:76:6a:54:19:f8:46:63:60:ca:69:
                    ed:6e:56:0b:2e:40:a0:c5:c5:fb:57:01:5b:fe:ed:
                    48:66:54:f6:57:46:e1:f6:ba:e7:95:7b:63:df:85:
                    2f:2b:8f:92:68:1d:f3:ba:d1:f4:9a:75:f8:dc:27:
                    b8:27:a6:31:da:1b:52:d6:c2:d0:75:ba:09:ab:bc:
                    92:2b:60:f1:f4:ab:de:28:20:3d:2e:99:a5:e5:46:
                    7f:31:31:8e:45:4e:95:a1:ef:2e:bc:6d:d8:85:6b:
                    b9:dc:76:a4:74:00:d7:1c:81:6b:d3:39:4b:d8:71:
                    7c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:18:C5:D9:B7:80:62:81:DA:06:B5:A9:1B:8B:5A:D4:00:81:00:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcee2650-0c45-3367-907b-92fd6f8b07cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:0d:dd:3f:cb:2c:06:30:df:e8:1c:bc:4e:e7:1e:dd:dc:10:
         2e:b7:10:c9:df:66:b9:fd:5e:cb:ad:01:fb:70:d8:c6:6e:38:
         1c:ab:7a:ef:fa:bb:f9:73:0c:39:9f:e5:33:de:30:a3:1c:3b:
         f5:0b:3d:ab:fd:8c:b5:66:f6:7f:9b:a6:5c:f4:19:31:ec:c6:
         64:ba:50:b6:06:d9:65:11:6e:e5:25:6b:77:1f:f6:27:b0:6d:
         72:21:b3:a2:e8:3c:40:d7:c3:c4:55:83:4f:03:b0:be:3b:11:
         2b:13:86:15:3f:00:e2:b0:db:3a:cd:a6:6c:c4:0a:65:23:6b:
         4d:e9:c8:73:62:5e:c4:53:84:57:52:b8:93:28:c0:d7:71:aa:
         98:a1:24:0c:9a:d9:ee:d7:e7:b7:b2:e7:37:b2:4b:71:52:09:
         a8:8b:7f:c2:0d:6b:8a:47:ba:1c:a2:30:cd:f9:67:46:1d:80:
         ab:cb:df:08:ac:72:9d:ef:d3:d4:b0:75:49:3e:3d:e1:7f:fa:
         d2:6b:cc:c7:66:d7:bb:95:b9:34:57:af:6c:b2:25:1c:0d:ce:
         73:44:18:19:63:72:27:ca:34:e1:60:8e:ff:21:78:c4:10:a0:
         e6:7f:52:bc:c4:94:2d:da:ab:55:30:a6:c5:50:c5:b8:b3:65:
         57:3d:3c:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9J/9chbCsY6t/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk
YjI1NWE2YjQtNzRkMi00NmU4LWJiMGEtMGMxODU4MzNiY2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJanF2l5CS7Z2DujCnv6o8B1q8elNOYfY3H7
qVdE6Jt9LvEhpShHLEs8J3hqoQsYlCfAfrdN0leCMhOMvO8raMIte7L6UpZoTqdM
YxPV0oVcwQy5GhWarh4nGiDx5ct5ZLEQvymP++SqO+ODVTVDYtRPvW98cyZ49lUk
45TSLlYVDQAil6evpazuBHZqVBn4RmNgymntblYLLkCgxcX7VwFb/u1IZlT2V0bh
9rrnlXtj34UvK4+SaB3zutH0mnX43Ce4J6Yx2htS1sLQdboJq7ySK2Dx9KveKCA9
Lpml5UZ/MTGORU6Voe8uvG3YhWu53HakdADXHIFr0zlL2HF8HQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKkYxdm3gGKB2ga1qRuLWtQAgQBkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmNlZTI2NTAtMGM0NS0z
MzY3LTkwN2ItOTJmZDZmOGIwN2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9UZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADcN3T/LLAYw3+gcvE7nHt3cEC63EMnfZrn9XsutAftw2MZuOByreu/6
u/lzDDmf5TPeMKMcO/ULPav9jLVm9n+bplz0GTHsxmS6ULYG2WURbuUla3cf9iew
bXIhs6LoPEDXw8RVg08DsL47ESsThhU/AOKw2zrNpmzECmUja03pyHNiXsRThFdS
uJMowNdxqpihJAya2e7X57ey5zeyS3FSCaiLf8INa4pHuhyiMM35Z0YdgKvL3wis
cp3v09SwdUk+PeF/+tJrzMdm17uVuTRXr2yyJRwNznNEGBljcifKNOFgjv8heMQQ
oOZ/UrzElC3aq1UwpsVQxbizZVc9PGI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:40:10 2025 by rpki-client