Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/0955c812-9743-3c42-a60b-5b297ff160cd.roa
File:                     0955c812-9743-3c42-a60b-5b297ff160cd.roa (raw, json)
Hash identifier:          kYaXuGW1H10/xEMxwJNmrYE6r3Sa/LnBKIxu482MoNs=
Subject key identifier:   FA:D0:A3:15:11:5C:E8:84:11:54:72:5A:00:30:C8:65:7A:9B:19:C5
Certificate issuer:       /CN=371ab6b7-8872-4856-a33d-61dbefb13d34
Certificate serial:       010D0C9F43285849AE7F3764119752162DD25980
Authority key identifier: 79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/0955c812-9743-3c42-a60b-5b297ff160cd.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     11064
IP address blocks:        23.189.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:37:64:11:97:52:16:2d:d2:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371ab6b7-8872-4856-a33d-61dbefb13d34
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=15557a55-deb1-44c4-a0e7-5b8db4cec6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:0d:c9:3f:c2:6f:46:64:ce:0c:1d:e9:3e:
                    4c:9a:76:6c:3b:9a:8b:39:8a:9f:bc:50:d9:62:6b:
                    3a:e3:94:c9:ba:c3:d5:58:14:e0:dc:10:89:e4:81:
                    ad:fa:db:d8:6e:fd:59:50:43:dd:76:d9:e9:81:e4:
                    d6:0c:4f:04:64:46:18:f9:7e:4e:43:81:52:c2:18:
                    2d:d4:4e:51:08:7e:7d:36:4a:64:72:a0:79:14:df:
                    99:05:49:6d:1b:46:7a:7c:73:90:0d:f7:a4:2a:8c:
                    33:06:b1:3c:6e:d4:b2:c7:27:23:6b:35:75:e6:0c:
                    99:86:af:e7:09:fa:e6:37:c3:bd:40:59:01:b3:6e:
                    6c:f8:2c:2c:f6:b3:25:dc:64:08:48:a5:92:a1:6d:
                    a5:28:24:34:4a:14:45:d6:1e:e8:88:51:2a:c2:41:
                    d9:e4:4e:e3:5d:b8:12:b2:94:b0:b1:df:9b:de:99:
                    f2:f8:ae:43:45:c8:16:85:e8:8b:0a:e7:05:a0:5b:
                    22:85:cc:da:8b:a9:22:ad:43:f3:a8:79:4f:82:1b:
                    ef:41:9c:6e:00:e4:ce:46:5e:86:5e:c3:0c:8a:f9:
                    0a:17:b3:6a:28:a2:8c:9a:29:26:d2:ba:2c:3f:39:
                    95:0a:22:18:d7:39:d7:10:ce:6e:19:17:93:10:82:
                    1f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D0:A3:15:11:5C:E8:84:11:54:72:5A:00:30:C8:65:7A:9B:19:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/0955c812-9743-3c42-a60b-5b297ff160cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl

            X509v3 Authority Key Identifier:
                keyid:79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8f:79:6d:6a:27:0b:68:26:bf:7f:f9:db:37:b7:33:8d:27:
         39:3e:f3:2b:b3:ef:bf:93:5b:02:fd:4d:8e:e1:d9:50:88:d9:
         00:50:44:85:e1:70:2f:14:f9:61:40:f8:e1:79:ec:51:17:7f:
         eb:f7:de:45:44:8a:c5:f3:a7:8e:62:2b:dd:3a:0e:ea:bb:1b:
         de:fb:be:09:70:54:ec:d4:35:5b:f2:21:4c:63:a0:b1:16:40:
         23:16:b4:88:9e:ab:76:bc:b3:03:33:23:5b:28:c6:69:42:62:
         30:73:d2:c3:0f:a4:b4:d2:32:5d:b1:20:de:b2:9a:81:1c:af:
         f8:a4:7d:cc:03:ec:09:3a:86:4c:1e:41:7e:20:49:2d:00:d8:
         fe:e6:f1:48:ad:1a:d8:68:4d:e4:29:fc:3f:19:02:65:c9:4d:
         c1:4f:80:11:b2:34:c2:84:ae:ca:11:f8:36:56:d1:a0:02:08:
         9f:40:2d:c5:79:49:c2:8e:a9:4d:e1:8e:fb:c5:f0:90:3a:56:
         95:3f:a9:c6:b5:3c:12:a5:30:8d:cb:38:b1:c7:8b:19:3b:ea:
         93:da:5a:01:81:a1:5a:0a:e5:56:05:eb:f5:41:0b:02:b8:0a:
         04:bf:cb:92:51:1b:5d:71:60:e4:b0:45:d7:4c:e3:43:b7:98:
         02:02:3b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:29:44 2025 by rpki-client