Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa
File:                     0e8a0d07-db89-35b7-89ab-5b71612a7984.roa (raw, json)
Hash identifier:          rHolJYxpfK6C/ZPhF5XC/x0ZU6zYr5DyUe761Lna3+k=
Subject key identifier:   82:13:A2:4F:78:AB:5E:63:4C:EC:6D:58:00:68:74:FB:50:69:C4:4D
Certificate issuer:       /CN=1d6006cb-f538-4709-8be5-960b57450a76
Certificate serial:       010D0C9F432858498A345DC266A846DB7E923780
Authority key identifier: 5C:8F:06:CB:20:BB:50:44:59:D1:C7:19:B7:CD:71:27:38:DC:B5:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     396422
IP address blocks:        23.151.88.0/24 maxlen: 24
                          2607:3dc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/1d6006cb-f538-4709-8be5-960b57450a76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/1d6006cb-f538-4709-8be5-960b57450a76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:5d:c2:66:a8:46:db:7e:92:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6006cb-f538-4709-8be5-960b57450a76
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=382bd6de-a50b-464d-bbcc-4362ea8f333d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:c2:3e:79:6c:8f:cd:8d:02:31:5f:aa:c0:
                    71:3d:97:25:c8:c6:61:41:cc:f2:4c:64:cb:6a:82:
                    61:b0:1a:33:09:7e:f8:f3:71:29:1e:44:a1:b1:8b:
                    0c:36:c2:ed:51:4d:0d:5f:69:e6:01:a3:2d:f1:f9:
                    37:1a:41:64:7a:d4:56:cd:1a:5b:32:cc:a9:0e:e5:
                    25:df:c2:90:3f:13:07:86:05:81:ef:14:00:62:b9:
                    5d:c5:5e:8e:c8:fd:3e:c8:d5:95:c7:8f:69:da:ec:
                    d0:46:c2:c9:8f:06:4a:5a:1d:38:33:e0:a2:5d:b7:
                    bf:5d:fe:52:a2:08:79:ba:31:0f:47:6d:80:e0:99:
                    a0:27:f4:b5:a8:33:b2:b6:e5:f1:12:97:28:be:8e:
                    00:cf:33:23:5c:f1:1d:a3:0a:d7:71:85:54:19:c5:
                    d1:c3:ed:2f:57:e2:55:23:3a:13:76:cf:71:8a:f3:
                    11:81:61:09:f1:be:06:ba:a5:c8:6f:02:f1:a3:4d:
                    bf:e2:a1:c5:88:f4:ea:86:f3:59:6a:e4:b0:14:b3:
                    77:0e:a0:00:ba:67:99:81:da:42:91:b2:87:f9:46:
                    75:bc:c0:b6:20:bc:3d:ab:33:b9:61:fa:35:7f:37:
                    46:40:b2:cd:11:11:b6:3e:f7:80:27:1a:fe:21:87:
                    ee:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:13:A2:4F:78:AB:5E:63:4C:EC:6D:58:00:68:74:FB:50:69:C4:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/1d6006cb-f538-4709-8be5-960b57450a76.crl

            X509v3 Authority Key Identifier:
                keyid:5C:8F:06:CB:20:BB:50:44:59:D1:C7:19:B7:CD:71:27:38:DC:B5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.88.0/24
                IPv6:
                  2607:3dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ad:04:2e:07:73:ed:a1:19:c3:2d:13:77:a4:b8:dc:85:d9:
         b9:34:a3:17:db:ef:ff:c4:06:08:14:97:dc:41:90:ff:13:2b:
         8c:38:2e:02:fe:fe:04:cb:ff:3f:5b:20:1c:25:b3:fb:73:f6:
         7c:96:c3:2c:14:9d:1a:e1:e1:7d:90:d5:5c:2b:a7:7c:88:1c:
         84:87:a3:f2:08:7f:57:2a:5b:25:1b:85:59:22:b5:26:39:8c:
         3a:c6:80:48:1f:bb:9a:0c:28:81:6c:9c:2c:88:db:81:e5:b5:
         a8:42:47:26:cc:d4:14:89:cb:09:f7:ad:3a:c0:24:f4:5f:c4:
         1a:76:37:d7:ad:71:7e:55:82:68:41:4b:6a:f6:ad:0b:0f:6e:
         42:cb:17:2b:42:15:cf:e7:a7:5a:ed:81:4c:4c:8d:7f:98:4a:
         ca:b3:22:ce:52:a0:ee:2b:11:19:4a:0e:61:b1:bc:9e:0a:3a:
         60:c0:85:7a:83:22:8c:b3:25:6f:c1:4a:d7:c2:63:93:d2:a9:
         23:79:a1:a5:b1:ef:34:d5:ea:2e:26:f6:ff:cd:43:8f:b1:ef:
         2b:8d:eb:3f:50:6d:4e:c8:2b:a9:78:9f:67:7d:ad:8b:bc:b3:
         f9:9e:79:f1:5b:48:60:b2:82:30:15:68:9e:5f:f6:cd:8e:0b:
         af:69:ed:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:11:27 2025 by rpki-client