Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/62b536ca-5af6-33de-ad0f-feed03dd7261.roa
File:                     62b536ca-5af6-33de-ad0f-feed03dd7261.roa (raw, json)
Hash identifier:          kJmxodBTyBGm6u9zGTehgd8U9fJhirb+Kqf0RMbXIFI=
Subject key identifier:   42:92:99:55:D4:5F:21:2A:44:E9:E8:7F:9D:DC:C3:F1:EA:72:AC:2C
Certificate issuer:       /CN=ebba3357-d18c-4593-b6d3-ba177a37e8d8
Certificate serial:       010D0C9F4328584960541845B155F050EEDDC300
Authority key identifier: 87:0C:7F:E1:A3:2E:F0:64:BF:84:3A:66:18:82:4E:BA:69:9A:33:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/62b536ca-5af6-33de-ad0f-feed03dd7261.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     395719
IP address blocks:        23.177.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/ebba3357-d18c-4593-b6d3-ba177a37e8d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/ebba3357-d18c-4593-b6d3-ba177a37e8d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:18:45:b1:55:f0:50:ee:dd:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebba3357-d18c-4593-b6d3-ba177a37e8d8
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=2f7d8fec-5975-4124-9868-08eed5b00d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:34:54:bf:ea:35:2e:17:ef:ba:08:89:bd:
                    83:a0:de:2a:96:31:22:3e:7f:4b:f6:2b:00:88:55:
                    69:4f:80:2e:32:e9:dc:29:3a:79:75:f7:dc:35:ad:
                    e5:74:86:2b:86:83:d3:20:31:38:75:19:8d:d5:96:
                    ab:ce:2a:1a:61:fe:55:6b:78:08:00:94:6c:6d:85:
                    c5:21:08:6c:b7:5e:e6:78:fa:db:01:85:2a:ca:5e:
                    ee:07:e7:95:7f:f9:74:3c:07:ed:11:a8:e9:4c:41:
                    44:a3:bc:e6:92:ef:23:e2:3d:61:64:43:e4:16:a9:
                    26:ee:30:ad:4b:46:cc:05:40:26:18:26:42:c8:84:
                    3d:52:b8:23:4e:0c:5b:ba:84:f7:32:ad:28:d0:73:
                    a8:cf:66:8c:3f:06:1a:98:59:03:59:08:4a:ec:3a:
                    ea:bd:1b:86:54:26:ec:49:0c:44:93:0c:ba:2f:57:
                    f8:bc:db:c7:f9:d6:c0:4a:8c:1d:d8:47:15:69:24:
                    b7:1d:0c:f9:88:27:e7:3e:9f:43:77:d2:df:c2:9b:
                    d8:5b:a5:91:06:8a:f2:f1:8e:5c:9d:04:b7:7d:25:
                    93:d3:42:ef:5a:3a:d3:66:99:f0:94:05:fd:c1:44:
                    a6:e4:da:b5:5d:d1:57:94:5f:bf:12:15:67:fd:d0:
                    32:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:92:99:55:D4:5F:21:2A:44:E9:E8:7F:9D:DC:C3:F1:EA:72:AC:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/62b536ca-5af6-33de-ad0f-feed03dd7261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/ebba3357-d18c-4593-b6d3-ba177a37e8d8.crl

            X509v3 Authority Key Identifier:
                keyid:87:0C:7F:E1:A3:2E:F0:64:BF:84:3A:66:18:82:4E:BA:69:9A:33:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:41:6f:6c:e9:2d:f4:b9:13:98:87:1b:50:7b:14:f2:21:9a:
         34:3d:89:c0:49:e6:b0:01:84:d2:a9:fa:53:7b:ea:db:80:23:
         8d:4d:1a:a0:30:1f:d2:66:9b:d2:4e:cd:cc:4e:ef:33:4e:74:
         6c:e6:d8:42:e9:44:31:79:2b:28:59:23:b2:b6:b5:9c:1c:f6:
         91:90:c7:63:d9:ba:92:56:45:87:06:48:19:48:86:20:e2:c7:
         99:ab:42:7f:c1:70:65:5e:3d:91:64:50:35:79:7c:a3:16:49:
         3b:b3:8b:9d:78:be:18:33:c1:cc:b6:d9:3b:9b:f6:90:a8:5c:
         30:67:3f:b5:be:cd:16:52:fc:e7:26:96:cf:f2:2e:55:c5:45:
         5b:ad:85:e0:c1:9e:ca:06:f5:12:8a:de:d2:4d:50:af:d9:8d:
         21:20:92:71:11:34:5e:99:c4:5a:26:b6:69:e6:d4:9a:f4:f6:
         92:81:19:47:48:3a:e1:e6:d9:02:eb:e6:01:51:b1:fc:0b:2a:
         1f:58:1c:85:b1:25:e1:27:ea:91:61:3c:99:c5:da:a9:e9:9f:
         3f:9c:ec:eb:95:45:83:7a:66:75:40:cd:e3:5b:14:ce:95:8e:
         30:57:bf:b4:16:6f:03:89:8f:26:a7:c7:38:ea:54:62:bb:f6:
         07:aa:10:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:36:35 2025 by rpki-client