Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa
File:                     210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa (raw, json)
Hash identifier:          vEk5sE1OZpBPjGmS2PpEP7w4AVmAqTojmgRyAX3bEFQ=
Subject key identifier:   54:CC:68:D3:A2:65:CE:B1:75:6F:F7:21:F4:7C:3A:AE:AB:D4:B8:5D
Certificate issuer:       /CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3
Certificate serial:       010D0C9F4328584961B992CAB59AF368B6F58780
Authority key identifier: 66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     400005
IP address blocks:        23.185.240.0/24 maxlen: 24
                          23.185.241.0/24 maxlen: 24
                          2602:fc46::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:92:ca:b5:9a:f3:68:b6:f5:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=dc6b754b-24f1-4ecf-bd02-df36b76e1cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b0:9a:31:2a:4a:ef:be:ec:48:52:04:fb:a5:
                    79:97:63:cf:48:ce:b7:b1:2c:c5:3b:ff:81:73:50:
                    04:65:f1:66:be:20:60:22:76:6b:02:94:9c:5b:20:
                    37:5f:55:b6:da:89:98:f5:28:76:a0:c2:75:ab:d3:
                    0c:33:a2:bd:8b:57:19:74:16:34:08:1f:6f:9b:0b:
                    8d:ed:b3:3c:d3:fc:cc:5b:6e:8d:c7:5a:fa:61:3d:
                    df:27:ba:d3:93:56:63:f3:ec:b4:7b:6e:3f:ea:c5:
                    04:71:6c:57:fb:ae:5c:4e:73:1e:60:06:fd:32:69:
                    f3:69:54:b1:58:ae:e7:ef:51:9d:c0:9e:00:0c:71:
                    e3:27:f8:d5:1d:4d:54:02:4c:4a:ed:51:d2:e7:00:
                    7d:eb:9f:e2:58:85:3e:ec:84:8c:89:29:50:51:bf:
                    21:83:2c:c0:ab:27:4c:9a:33:1b:f0:19:37:ea:ea:
                    13:4e:16:bb:35:bf:e9:c5:8d:44:a1:33:17:d2:b6:
                    38:05:6b:ee:ef:42:d8:da:db:85:a3:a5:6b:bb:47:
                    1d:4b:60:ff:65:06:3f:72:0e:5c:b3:04:ad:9b:95:
                    12:a1:2c:9a:23:b3:0f:47:4b:d2:73:2a:73:41:c5:
                    6d:22:7e:d6:de:30:b0:74:9a:d6:fb:71:7c:c4:68:
                    5f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CC:68:D3:A2:65:CE:B1:75:6F:F7:21:F4:7C:3A:AE:AB:D4:B8:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl

            X509v3 Authority Key Identifier:
                keyid:66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.240.0/23
                IPv6:
                  2602:fc46::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a3:64:8e:e6:37:ed:b3:3b:63:b9:2a:b6:19:2e:f5:24:77:
         41:00:74:c5:2b:36:2b:2a:7e:2b:8c:3c:23:a3:fc:95:92:db:
         9c:71:40:ad:2f:be:9c:dc:41:8c:c5:b3:80:bb:b0:27:03:d7:
         e1:82:ec:d2:e2:e3:17:57:ad:a4:97:e1:c9:46:07:de:c0:3e:
         17:56:f7:8e:57:00:f7:88:f2:6e:6c:f6:2f:95:bf:61:6c:c8:
         b5:46:ff:fb:e8:8a:b9:16:f6:10:e8:8e:3b:3a:d0:25:ba:32:
         68:d8:59:13:cd:fc:d3:1f:d2:1f:40:4a:f4:5a:27:a5:66:ae:
         ea:a6:ac:cf:f4:2f:13:35:c1:d1:f9:26:51:29:c7:5e:2d:67:
         74:eb:90:6c:b3:1c:81:d8:2c:a9:61:22:a1:96:f0:08:bf:7e:
         c0:1c:80:45:2f:c5:6f:c3:3c:f5:e6:0a:14:dc:3d:66:86:ba:
         07:ec:15:29:ef:9c:7b:fb:a2:50:a1:ec:23:61:5c:e7:81:f2:
         a2:e6:47:d3:ad:47:c9:56:9e:09:a0:48:7d:3d:dd:fc:f1:38:
         87:1f:1d:df:fb:3d:ab:ab:30:92:c9:59:c1:8d:05:a6:2d:0e:
         8e:82:39:f0:7d:24:de:ca:29:27:2c:26:69:22:94:ca:16:aa:
         8e:b4:fc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:06:53 2025 by rpki-client