Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/ee780dca-bf73-3c37-b943-62c5d11a74f4.roa
File:                     ee780dca-bf73-3c37-b943-62c5d11a74f4.roa (raw, json)
Hash identifier:          iWTeCERsol687NcYQ94d2fZ/0PPXL+yn1DY+rX/0eNc=
Subject key identifier:   84:9F:88:C1:0C:A9:04:40:CF:54:E2:BB:1C:2B:A3:07:0D:C6:C5:04
Certificate issuer:       /CN=50dd3001-8039-47e8-a642-92a97c54da3b
Certificate serial:       010D0C9F432858495EEEE56592FA831D4D071780
Authority key identifier: 1F:8A:BE:1B:4E:A1:BE:5B:17:12:B4:45:04:D0:BF:E4:15:70:3C:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/ee780dca-bf73-3c37-b943-62c5d11a74f4.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     400771
IP address blocks:        23.141.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/50dd3001-8039-47e8-a642-92a97c54da3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/50dd3001-8039-47e8-a642-92a97c54da3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:e5:65:92:fa:83:1d:4d:07:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50dd3001-8039-47e8-a642-92a97c54da3b
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=a6b9343b-87cf-44a0-8cc5-7e55ed756d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:a7:a4:08:c3:e2:65:b6:79:ac:8d:19:aa:
                    4d:50:2a:41:3e:31:a4:bb:a1:c6:87:e0:92:75:e2:
                    70:f6:b1:0d:29:89:f6:8a:b9:25:43:59:1a:8b:ce:
                    ec:d5:dd:a5:f6:32:1c:fc:ef:04:06:6e:99:df:69:
                    05:9e:e7:e4:21:f6:b3:6c:7a:39:e1:b9:98:5b:22:
                    e5:53:78:4f:a8:6d:8c:ad:04:73:ad:d1:c4:52:25:
                    3f:ae:c9:ef:8d:d4:9c:95:15:18:a4:52:fa:c7:f2:
                    bb:55:13:3c:9a:8c:dc:15:05:9e:53:6d:29:7e:29:
                    aa:36:7c:8e:7a:0d:1e:ba:dc:6c:8c:b5:17:ad:ba:
                    6f:77:54:17:ae:a1:ab:63:26:f4:7f:a3:ab:dc:d2:
                    df:c7:5d:93:0b:1b:8b:ba:96:4a:27:3b:5b:c2:45:
                    7a:f5:28:3c:07:18:06:a0:29:ed:a2:46:fd:6d:65:
                    09:3b:52:ba:ba:0f:59:ee:9b:df:a3:a1:3b:30:d5:
                    15:8e:57:ea:dd:bf:75:18:b9:be:27:b1:3f:db:3d:
                    1a:96:c4:97:6d:96:c2:27:89:6f:b2:86:7a:df:19:
                    ea:ed:d2:4a:24:7f:20:5d:0e:44:c1:96:d5:87:07:
                    b1:60:09:5b:28:06:59:e1:a6:e8:2f:8b:a4:54:77:
                    08:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9F:88:C1:0C:A9:04:40:CF:54:E2:BB:1C:2B:A3:07:0D:C6:C5:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/ee780dca-bf73-3c37-b943-62c5d11a74f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/50dd3001-8039-47e8-a642-92a97c54da3b.crl

            X509v3 Authority Key Identifier:
                keyid:1F:8A:BE:1B:4E:A1:BE:5B:17:12:B4:45:04:D0:BF:E4:15:70:3C:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ef:21:ea:aa:ca:5f:fb:fc:06:87:5d:b8:7d:c5:17:68:51:
         9b:22:98:23:62:ea:41:9f:4f:1d:c3:32:6e:fe:d1:1d:bf:95:
         dd:54:e1:62:f3:e5:c7:55:40:b2:a0:ff:5f:c5:47:98:09:b2:
         d7:01:8d:ba:55:31:d1:63:a1:fe:de:48:1e:2c:73:51:ef:67:
         1f:ba:e4:bd:4b:f0:44:7c:29:71:39:5c:c7:e4:14:00:6a:9e:
         e5:cf:bd:5b:03:ff:e2:4b:e0:b8:01:66:65:b9:59:60:e5:9c:
         93:68:53:90:bb:64:dc:14:4e:08:9c:c6:df:8e:2a:16:5f:fc:
         32:78:6a:d7:0e:1e:96:22:ee:d2:aa:59:fc:b8:38:15:e1:6c:
         53:95:f1:1d:13:a3:b3:f2:36:ec:e5:24:b0:38:d9:a3:ce:af:
         5c:26:25:9e:7d:9c:fd:e0:90:79:45:c1:40:66:b4:95:fc:1a:
         a5:21:5b:29:d7:dc:1b:ab:37:2f:6c:8e:ea:d6:e1:87:c7:a2:
         f5:6e:6a:17:8a:bc:1f:61:f1:77:f4:f4:bb:dd:06:7f:e6:2b:
         20:9a:76:c2:d7:b6:bc:c5:54:ef:d6:7e:c2:3f:e3:80:88:70:
         7d:eb:cf:ac:b4:3c:94:d5:2f:4a:af:bb:76:f1:b2:60:47:37:
         f5:c7:95:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:15 2025 by rpki-client