Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa
File:                     8e5abe26-35c1-3b16-9b96-323c165f8420.roa (raw, json)
Hash identifier:          yFiws7H1E5IVsrkqi22yOppgD7qRhzb/IUONlJAN+Cs=
Subject key identifier:   15:DE:59:20:11:9A:B5:AD:9F:89:DC:08:02:19:0C:0B:A9:11:B1:7A
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F43285849A4BA4F2D3066C949819EA740
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     11870
IP address blocks:        167.23.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:4f:2d:30:66:c9:49:81:9e:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=6ede531d-9dc0-4f45-b41a-846f5b11f225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:7f:01:97:51:ff:10:d6:f3:0d:67:c4:46:
                    e8:f6:f4:f7:e1:0f:e2:1c:6c:48:97:4a:80:03:3f:
                    59:79:40:39:49:bf:1a:42:43:97:bd:b8:91:fc:0b:
                    80:20:6a:bb:e4:37:ce:00:87:e1:61:ec:2e:6e:9d:
                    43:86:93:bf:32:c9:60:65:3a:a1:10:9b:ab:16:44:
                    b6:45:55:2f:0a:b7:8f:38:7a:37:1d:41:c4:4a:04:
                    d8:68:42:20:44:23:94:5e:80:4d:ab:c8:79:52:6d:
                    52:f2:35:89:10:42:10:38:5c:37:42:2e:e9:6d:a1:
                    00:4f:1c:c1:f2:87:c7:00:1e:69:c5:32:b6:17:89:
                    43:94:db:02:ac:9f:32:71:b9:61:18:f2:9a:6c:c0:
                    f8:9c:d4:b8:a0:73:d3:ca:35:ab:c6:6b:83:5c:ad:
                    1b:4f:cf:de:29:c7:17:90:cf:52:a4:18:3a:53:f9:
                    45:f4:fa:42:e6:b5:5d:6b:3a:a5:25:af:47:aa:5c:
                    88:78:16:bf:c3:71:98:36:81:59:ac:f8:da:df:45:
                    03:04:9c:32:a9:3d:29:23:59:aa:71:5f:84:f7:71:
                    21:bb:29:8a:1f:65:96:7b:03:1a:67:92:37:30:68:
                    a7:84:38:bf:6f:1d:de:1c:8f:e0:a2:35:e4:00:03:
                    86:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DE:59:20:11:9A:B5:AD:9F:89:DC:08:02:19:0C:0B:A9:11:B1:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e3:98:b8:80:df:60:a1:10:c2:57:24:54:c1:43:11:68:2c:
         6c:81:3c:ae:5a:88:27:36:c0:82:45:78:38:da:c7:5d:1f:b3:
         87:a7:a6:25:bc:5a:07:d0:4d:f5:0e:f7:e1:e0:0c:42:b3:49:
         5d:91:43:50:2d:07:48:5d:c5:ec:a2:fe:ad:d0:09:67:94:66:
         ad:72:63:a9:5c:05:cf:6a:e4:27:aa:bc:c3:31:d2:e8:3c:1a:
         84:a2:c9:cd:90:78:27:d3:5b:66:ca:a5:b0:5e:03:6a:27:9e:
         68:95:36:0f:8e:c6:6b:66:2a:05:cb:4e:1f:12:45:ef:58:23:
         d4:18:9b:13:ae:50:28:32:11:dc:e3:3c:bf:43:a2:5c:d0:0f:
         8c:27:af:db:b7:8a:36:59:ba:80:f8:8c:25:3d:27:19:55:7b:
         f5:2f:29:85:5c:1c:84:c7:50:4d:ba:6f:d8:f2:4d:33:7f:79:
         38:86:ba:a6:5f:b9:cb:71:6c:7e:51:41:9a:71:be:4c:cd:9e:
         7c:e3:96:ee:d0:d7:fa:44:ae:a4:e0:04:58:e4:ac:bb:2e:30:
         13:da:a9:47:e8:6c:67:29:1b:67:ea:6d:a9:b8:1e:90:e6:ae:
         fd:ab:51:9f:27:22:37:a3:1c:fd:b6:43:61:30:23:d9:4d:22:
         f0:06:2f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:12:20 2025 by rpki-client