Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/9b3bf823-9516-388f-b46f-d9d250001541.roa
File:                     9b3bf823-9516-388f-b46f-d9d250001541.roa (raw, json)
Hash identifier:          T1fyndrkAlfaBpmKRNSI+u82/L992QxfYJfr3Tca4Yw=
Subject key identifier:   40:60:97:57:ED:72:6F:A5:94:6E:96:CD:34:5F:D1:27:19:62:BD:FE
Certificate issuer:       /CN=e8c42b27-ff84-461c-86a9-f001dd639713
Certificate serial:       010D0C9F4328584A0C054C928256B819D5F86900
Authority key identifier: EA:A3:EE:F6:98:43:43:D7:D2:28:CD:D6:27:14:52:6C:A9:42:92:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/9b3bf823-9516-388f-b46f-d9d250001541.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        23.147.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/e8c42b27-ff84-461c-86a9-f001dd639713.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/e8c42b27-ff84-461c-86a9-f001dd639713.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:4c:92:82:56:b8:19:d5:f8:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c42b27-ff84-461c-86a9-f001dd639713
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=2bb17a15-eef2-4f98-bc1d-a475fb449d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:dd:99:48:12:bf:c7:42:ab:7e:12:7a:9a:
                    7f:4b:f7:11:89:b2:1f:46:70:df:ef:a5:84:00:54:
                    eb:fa:7b:98:90:c0:d7:6f:40:3d:3a:c5:ea:5f:25:
                    83:52:ae:d7:6f:c3:8d:61:0e:d1:ed:14:89:5a:13:
                    56:52:78:bb:0f:28:b9:cf:05:4f:15:2a:ac:3b:a5:
                    9e:97:82:c3:8a:92:c7:2c:0f:8f:e1:80:42:6f:a0:
                    e2:4a:19:5a:50:c1:32:3d:f8:a0:ec:a0:52:09:a7:
                    89:bd:3f:78:0b:13:42:d7:67:78:49:8f:82:10:94:
                    22:59:de:0b:e2:4d:ba:51:97:b0:de:d6:92:7c:21:
                    8d:d3:2b:2f:7f:3e:ac:d0:ba:90:51:61:c0:96:30:
                    93:68:14:0a:3e:ee:ab:1d:6f:1a:3f:cf:a1:e7:c2:
                    7e:f5:e0:c6:1b:a2:32:ad:47:52:74:17:0c:ee:50:
                    55:f1:90:13:a4:06:16:03:9f:43:8a:18:60:3a:48:
                    82:3d:d5:15:53:9c:1f:0a:54:a0:7b:4d:14:ec:18:
                    6a:a2:ec:8a:fb:94:3e:27:aa:07:24:6e:e0:b1:57:
                    81:de:20:73:94:93:9c:11:28:8d:58:b6:ce:5e:e7:
                    f4:0b:fd:e4:98:ce:e8:1e:79:23:4e:d5:55:89:ca:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:60:97:57:ED:72:6F:A5:94:6E:96:CD:34:5F:D1:27:19:62:BD:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/9b3bf823-9516-388f-b46f-d9d250001541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/e8c42b27-ff84-461c-86a9-f001dd639713.crl

            X509v3 Authority Key Identifier:
                keyid:EA:A3:EE:F6:98:43:43:D7:D2:28:CD:D6:27:14:52:6C:A9:42:92:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:e6:86:ea:dd:32:68:05:a4:1d:00:94:48:65:0a:dd:36:2b:
         57:a1:ba:a8:25:a1:23:3f:a2:1b:ea:f3:9e:1f:0d:77:a5:13:
         59:6a:86:ad:c9:8d:cc:99:ad:69:7e:02:14:1e:ec:65:bc:bc:
         f9:59:84:64:7e:16:8b:19:20:37:5d:72:ae:5a:ee:78:67:4b:
         a8:52:86:ab:ae:ab:13:fd:83:3a:7f:a9:48:ca:3a:1f:2a:c6:
         6d:68:b9:f5:fc:c7:09:e4:9e:2f:b6:f7:e6:f0:a4:ce:a6:2b:
         63:82:01:a2:e9:74:c3:a1:e6:9b:4d:89:2e:34:6d:2c:6e:1a:
         d0:a0:a0:bc:58:7b:b1:05:37:2c:5e:ae:1c:25:10:7d:e2:4b:
         38:83:8e:32:75:e4:35:4a:5d:c4:e4:9b:30:84:d8:31:7d:39:
         11:a6:1a:ef:43:d7:07:f2:ef:96:46:8b:06:c7:45:47:22:96:
         be:91:31:87:cc:7c:24:af:a2:ab:ce:90:e5:07:04:fd:00:86:
         83:30:66:bc:6a:b7:a4:dc:00:b4:0e:65:af:2d:e7:ef:ab:ed:
         36:32:35:e3:2e:a3:9c:25:92:e6:df:5d:67:79:b0:aa:b2:95:
         35:ae:35:43:8c:40:61:ac:41:f9:77:0a:e6:11:5c:59:b6:d2:
         4c:53:81:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:41:31 2025 by rpki-client