Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47e2b908-2b38-305c-b2ec-f40e154a0d96.roa
File:                     47e2b908-2b38-305c-b2ec-f40e154a0d96.roa (raw, json)
Hash identifier:          K9aQN+zTgt9E1NApmB6S02ne8Y7/+SoJSizwAKnChWs=
Subject key identifier:   C6:08:68:98:CF:B3:92:87:B1:6D:D8:DF:16:11:F6:5F:B0:49:EC:9B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1CD2919109D27869C3A7580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47e2b908-2b38-305c-b2ec-f40e154a0d96.roa
Signing time:             Thu 24 Apr 2025 11:52:21 +0000
ROA not before:           Thu 24 Apr 2025 11:52:21 +0000
ROA not after:            Wed 23 Jul 2025 11:52:21 +0000
asID:                     19905
IP address blocks:        173.23.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:cd:29:19:10:9d:27:86:9c:3a:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 11:52:21 2025 GMT
            Not After : Jul 23 11:52:21 2025 GMT
        Subject: CN=89ddf147-1840-4198-997e-fdfda919ac67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f0:da:5f:3b:65:13:31:93:17:9b:c3:3c:ee:
                    e6:4d:80:ab:c0:e7:b5:ec:ea:1a:16:57:61:34:26:
                    22:8f:92:ff:2a:86:ad:16:ac:c6:db:af:e7:7d:fa:
                    39:8b:ca:f4:00:5d:bf:5a:ea:30:b5:17:00:64:31:
                    14:10:26:94:e1:1b:45:e4:f5:db:45:64:01:05:68:
                    24:8e:a5:99:fc:05:9d:a5:37:4b:88:89:99:65:73:
                    a6:04:95:8f:0f:e2:3e:37:26:46:e8:a9:96:e6:2e:
                    63:6d:4a:11:2d:ba:ab:a8:c2:a4:1c:6f:0d:77:01:
                    15:8f:a5:20:e2:b1:e7:d0:c7:a5:86:b6:e2:25:2d:
                    a4:b1:ee:4c:11:a0:49:5e:01:75:fd:65:08:86:ab:
                    37:1a:c4:91:dd:b8:5e:88:c6:89:1c:ff:b2:8e:bd:
                    3e:a1:ca:77:c1:24:82:45:4b:95:6b:51:7d:c3:55:
                    28:d0:fd:62:d3:a9:98:72:5a:85:59:6d:10:6b:58:
                    4b:45:3d:08:48:eb:ef:ca:ce:d4:94:ac:d8:8c:66:
                    a7:76:50:68:bd:05:41:00:4a:7f:f2:53:f5:05:7e:
                    00:81:9a:c1:24:a2:3b:fa:db:1b:b4:af:51:be:f5:
                    24:2d:06:a0:38:49:fa:21:7c:9b:68:e3:4b:d8:96:
                    9a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:08:68:98:CF:B3:92:87:B1:6D:D8:DF:16:11:F6:5F:B0:49:EC:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47e2b908-2b38-305c-b2ec-f40e154a0d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:53:22:c1:7b:d9:fa:00:44:99:fe:17:84:7e:47:98:a8:01:
         c6:32:67:da:5e:49:df:ad:18:68:60:e9:47:09:a7:40:cc:d3:
         92:9f:ae:de:fe:47:89:77:ba:ca:e5:ce:fc:60:35:80:b8:ad:
         2e:31:2b:a6:f1:10:e7:40:fa:3e:20:dd:e6:75:60:4d:c7:15:
         be:2e:f4:89:1f:cb:ab:f3:f0:9f:05:e2:27:ff:c9:7b:b1:32:
         dc:96:0e:f6:57:69:af:af:e4:74:e6:83:b3:15:ae:22:62:b3:
         23:ba:f1:ad:20:cf:6c:18:c9:b0:3b:e0:8b:d0:71:60:a2:eb:
         d3:32:3d:2b:04:f9:7a:ee:be:98:00:95:50:8a:33:9a:4c:9a:
         7c:33:8c:6c:74:b2:70:81:65:b4:64:ab:f4:c2:87:9c:9b:3d:
         4e:7c:96:c5:df:9b:bb:77:69:db:cf:68:aa:7c:48:9e:b2:64:
         86:ce:fb:55:00:6f:34:87:88:55:e3:31:a8:d6:7a:ba:90:1a:
         62:68:cd:6f:08:10:e5:54:29:e9:f1:4b:cd:b1:63:b0:7f:3d:
         94:ad:39:3c:1d:7d:c0:f0:e7:05:f1:9d:54:09:dc:e6:fe:83:
         ab:27:02:3c:e0:1f:ea:d3:c6:b5:0b:42:8b:da:b2:b2:05:5e:
         84:74:b8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:18:27 2025 by rpki-client