Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/2da0bb9a-044f-34cb-94ed-4847fb509207.roa
File:                     2da0bb9a-044f-34cb-94ed-4847fb509207.roa (raw, json)
Hash identifier:          E79j/tzC/1I06meW1HX8owKM6bjUFCicOdiG8k7TUQE=
Subject key identifier:   5E:DE:F7:CF:08:96:7D:BF:92:D5:29:70:F8:E2:67:7F:D6:BD:D5:09
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F43285849E225228DEE9EDF9A34311FE0
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/2da0bb9a-044f-34cb-94ed-4847fb509207.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     396982
IP address blocks:        23.227.32.0/24 maxlen: 24
                          23.227.33.0/24 maxlen: 24
                          23.227.34.0/24 maxlen: 24
                          23.227.35.0/24 maxlen: 24
                          23.227.36.0/24 maxlen: 24
                          23.227.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:22:8d:ee:9e:df:9a:34:31:1f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=c3011673-4a7b-4e4a-9eba-b3eade7502cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b3:d6:27:e0:dd:86:9a:12:aa:45:de:09:8f:
                    24:81:f1:6d:d7:57:03:58:d0:79:86:09:86:e2:38:
                    65:cd:24:08:be:8c:84:ef:bc:7a:38:19:ec:5c:c0:
                    0b:0d:24:a3:36:a0:30:9d:6f:6c:e9:c3:f5:4b:2b:
                    e1:0b:75:e7:0f:50:41:1b:04:f5:0d:ed:66:1a:06:
                    9c:1e:76:f6:ac:26:2b:41:39:73:99:2b:5d:83:22:
                    be:f2:fd:7a:0d:a2:ad:ed:8b:86:ee:26:eb:36:80:
                    63:76:bb:9a:b0:ab:d7:3d:86:88:69:14:4d:7c:43:
                    5f:27:df:c4:25:46:0a:9c:fb:a1:3a:64:31:c6:4c:
                    2f:98:1d:03:69:0d:e8:6b:2d:d7:8e:5b:ad:1b:ec:
                    1a:be:f7:a4:d4:6c:19:2a:0b:52:5d:62:90:b4:f6:
                    a1:61:83:f9:8c:cb:a5:ef:8b:c8:c5:d2:0e:2f:d1:
                    76:48:d3:6c:6b:2a:f3:71:ce:56:f8:54:d4:34:6f:
                    10:fd:6d:e3:aa:f4:77:50:5d:f4:14:28:0c:df:7a:
                    03:e1:1d:8e:59:51:69:1d:5a:49:5a:65:1f:35:02:
                    2e:1d:53:4c:77:e0:05:2e:6d:fe:11:d2:63:eb:e1:
                    35:9c:a1:1a:e5:2c:85:8d:f5:cd:d8:ea:b3:1c:e2:
                    12:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DE:F7:CF:08:96:7D:BF:92:D5:29:70:F8:E2:67:7F:D6:BD:D5:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/2da0bb9a-044f-34cb-94ed-4847fb509207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.32.0-23.227.37.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b6:7b:39:3c:5b:8f:7f:38:45:8f:70:b1:7b:49:d1:4d:a9:
         e5:c9:11:64:74:9c:2f:10:9b:5b:64:3c:73:e8:96:35:0c:bb:
         97:22:c8:92:70:d3:78:c1:23:fc:4c:fd:15:cf:61:2b:62:a5:
         d6:c1:0f:a0:14:26:37:2d:e1:4f:92:98:dd:34:d6:3a:74:6c:
         4c:3f:81:71:79:c0:c4:6e:ee:89:84:b6:d6:5c:44:b4:73:01:
         5b:a2:38:fb:83:1e:b4:c0:03:78:f2:31:83:93:c2:b8:da:8d:
         53:b0:46:c4:dd:b8:7f:ea:54:19:99:ea:60:b8:9b:0a:79:ee:
         65:af:69:0d:f7:37:48:e0:3a:d3:89:89:5f:50:94:76:58:31:
         ba:29:c9:ff:69:26:30:7c:20:9c:fb:4a:2a:f2:d4:2e:33:e2:
         3b:00:fe:92:c9:3f:42:85:87:33:72:29:65:5d:69:d5:63:51:
         d2:0f:fd:80:4b:28:09:ea:85:3a:e2:c7:f9:b1:97:dc:9c:cb:
         53:df:08:da:a9:74:13:37:21:3c:10:e8:bd:30:bf:21:fb:c5:
         51:c2:cf:33:7a:b6:70:26:a5:67:0f:f8:7c:fe:2d:26:17:91:
         61:55:a9:d1:b5:ef:75:41:9b:26:6b:74:a4:c3:a5:0b:f7:2a:
         4b:9a:5a:48
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEniJSKN7p7fmjQxH+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ1NGIzNmEtYzcyNS00YzE4LTkzZTEtODI1YWZjNjQ1
ZTJjMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
YzMwMTE2NzMtNGE3Yi00ZTRhLTllYmEtYjNlYWRlNzUwMmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7PWJ+DdhpoSqkXeCY8kgfFt11cDWNB5hgmG
4jhlzSQIvoyE77x6OBnsXMALDSSjNqAwnW9s6cP1SyvhC3XnD1BBGwT1De1mGgac
Hnb2rCYrQTlzmStdgyK+8v16DaKt7YuG7ibrNoBjdruasKvXPYaIaRRNfENfJ9/E
JUYKnPuhOmQxxkwvmB0DaQ3oay3XjlutG+wavvek1GwZKgtSXWKQtPahYYP5jMul
74vIxdIOL9F2SNNsayrzcc5W+FTUNG8Q/W3jqvR3UF30FCgM33oD4R2OWVFpHVpJ
WmUfNQIuHVNMd+AFLm3+EdJj6+E1nKEa5SyFjfXN2OqzHOIS7wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFF7e988Iln2/ktUpcPjiZ3/WvdUJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0
YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVhZmM2NDVlMmMvMmRhMGJiOWEtMDQ0Zi0z
NGNiLTk0ZWQtNDg0N2ZiNTA5MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmQ1NGIzNmEtYzcyNS00YzE4LTkz
ZTEtODI1YWZjNjQ1ZTJjLzZkNTRiMzZhLWM3MjUtNGMxOC05M2UxLTgyNWFmYzY0
NWUyYy5jcmwwHwYDVR0jBBgwFoAUOFjVJZUYEHsaUpZxvbiCe8GGfbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVh
ZmM2NDVlMmMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAUX4yAD
BAEX4yQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAgLZ7OTxbj384RY9wsXtJ0U2p5ckRZHScLxCbW2Q8c+iW
NQy7lyLIknDTeMEj/Ez9Fc9hK2Kl1sEPoBQmNy3hT5KY3TTWOnRsTD+BcXnAxG7u
iYS21lxEtHMBW6I4+4MetMADePIxg5PCuNqNU7BGxN24f+pUGZnqYLibCnnuZa9p
Dfc3SOA604mJX1CUdlgxuinJ/2kmMHwgnPtKKvLULjPiOwD+ksk/QoWHM3IpZV1p
1WNR0g/9gEsoCeqFOuLH+bGX3JzLU98I2ql0EzchPBDovTC/IfvFUcLPM3q2cCal
Zw/4fP4tJheRYVWp0bXvdUGbJmt0pMOlC/cqS5paSA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:04:27 2025 by rpki-client