Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa
File:                     b7201278-097e-3b32-a4e1-96b53fb35fb0.roa (raw, json)
Hash identifier:          kHx8Ae5r+fwwGVhFINe7YGTQhP2PbYg3jWhxVS5xb+8=
Subject key identifier:   CF:C7:C0:C9:44:C8:84:52:46:19:48:72:DC:19:EE:2A:66:D9:A5:B9
Certificate issuer:       /CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
Certificate serial:       010D0C9F43285849AD1A02F46C8E6AE0457C6280
Authority key identifier: AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     36222
IP address blocks:        23.138.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:02:f4:6c:8e:6a:e0:45:7c:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=000b9238-cd4f-46ca-adec-ed43778ad7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:21:92:72:34:d7:08:16:a3:b8:df:b3:b1:
                    57:3e:f5:26:f5:18:7d:6d:35:e7:f1:41:72:2a:4c:
                    ff:25:ef:cd:aa:bc:4c:b3:db:3d:fc:dd:df:a3:b5:
                    5e:fd:ec:94:ed:fa:af:c6:84:39:d7:f8:79:69:51:
                    4b:8a:4a:dc:7e:cc:32:3d:f6:39:cd:9b:16:51:6d:
                    69:19:0c:a6:2e:ab:d4:4e:95:2c:27:b1:78:10:b3:
                    1b:74:95:3b:d9:b3:d0:d2:d9:83:cc:e9:eb:39:a9:
                    94:7a:d2:5c:a7:2f:44:b5:25:d8:d4:2a:ad:e0:86:
                    9c:1b:51:bc:f7:39:4f:80:e7:60:7d:94:a4:84:b3:
                    01:80:3d:3a:d5:26:11:0b:5a:2b:a3:89:c0:28:78:
                    ed:67:6d:d9:3c:d6:92:76:d1:d6:e3:6d:33:54:b2:
                    19:93:54:87:2d:82:ec:85:f6:69:52:1c:2b:e9:fc:
                    4f:6d:b3:a6:25:e5:49:a4:f0:0a:d0:f3:49:7d:5b:
                    3b:f6:b2:60:fb:3d:bf:8a:c2:54:97:81:a4:2f:40:
                    e2:0a:a8:2e:f7:3b:d7:a2:77:4e:83:42:79:20:7b:
                    78:68:fe:ec:8a:3a:80:f3:d3:2f:d1:c0:df:0d:16:
                    b9:d0:e6:bc:78:34:05:a9:1a:c4:b9:a2:fe:84:aa:
                    27:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C7:C0:C9:44:C8:84:52:46:19:48:72:DC:19:EE:2A:66:D9:A5:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl

            X509v3 Authority Key Identifier:
                keyid:AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a7:c1:1c:b4:a4:5b:f8:09:f4:a8:5a:3f:bb:06:18:03:1a:
         f9:12:21:e3:93:7e:47:27:0e:1c:06:2f:0c:32:ac:2d:ba:91:
         89:14:8d:bd:bd:5e:33:3f:d9:2e:7d:b6:05:0c:90:a6:1d:7b:
         c6:31:72:1e:ef:77:72:5b:c6:69:4a:87:cf:e3:ae:14:2b:fc:
         5c:36:f5:83:2a:9a:b3:3c:2e:d0:87:c7:31:e2:29:7e:e9:88:
         64:66:ac:4b:01:b9:82:c3:f6:f3:06:31:b0:ad:78:02:fa:dd:
         71:dc:8f:06:15:76:84:75:d9:aa:c4:0f:e2:23:2d:10:1f:2d:
         bd:34:15:6c:22:70:e1:26:01:bc:2f:26:af:2a:a6:33:48:5d:
         ea:a8:ec:5d:08:62:54:c4:96:f7:bf:cf:f7:ed:95:53:b6:ff:
         46:9e:60:be:c8:e4:2a:a6:76:8b:21:55:b9:dd:fb:bd:de:9e:
         7f:10:4e:7d:5f:51:65:87:21:83:01:c2:7b:50:4d:ff:d8:03:
         1d:3b:76:af:11:e8:0a:4d:69:3a:73:a5:be:d7:26:4d:06:3a:
         ca:60:a3:4c:f6:9e:d0:5d:2a:d3:e6:80:be:5a:e1:af:b1:8d:
         84:24:f9:a5:d1:b3:d2:ec:ad:3a:d8:7c:7e:af:1f:ca:68:e4:
         a5:04:d9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:20:52 2025 by rpki-client