Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/f0203cd0-7206-39c9-a409-58f9413893f3.roa
File:                     f0203cd0-7206-39c9-a409-58f9413893f3.roa (raw, json)
Hash identifier:          qcAP/Q0gy1x+OdWZ1JHqPheUoRY+1Cx7vu5RrXUDNHU=
Subject key identifier:   ED:49:E4:C0:F1:89:D7:F6:AB:54:02:50:8E:97:9A:66:8F:83:DD:DA
Certificate issuer:       /CN=7da5f50d-c4e5-46cc-ad95-7464c9f481c1
Certificate serial:       010D0C9F43285848FA8BE7254700506AAA15B700
Authority key identifier: 08:03:CC:E5:0B:8F:FB:4D:38:99:1F:C1:B4:E5:FB:E2:FD:19:36:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/f0203cd0-7206-39c9-a409-58f9413893f3.roa
Signing time:             Sun 23 Feb 2025 14:00:51 +0000
ROA not before:           Sun 23 Feb 2025 14:00:51 +0000
ROA not after:            Sat 24 May 2025 13:00:51 +0000
asID:                     401534
IP address blocks:        23.130.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fa:8b:e7:25:47:00:50:6a:aa:15:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5f50d-c4e5-46cc-ad95-7464c9f481c1
        Validity
            Not Before: Feb 23 14:00:51 2025 GMT
            Not After : May 24 13:00:51 2025 GMT
        Subject: CN=b74c541e-86bf-4689-9e10-87e3ba9e2b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:d7:fd:58:be:45:ca:d6:de:9d:c5:a2:2f:
                    f3:53:64:25:96:36:cc:0f:20:8d:94:32:1f:22:92:
                    b1:43:c7:7c:1a:16:8b:21:78:28:8a:27:e9:66:38:
                    9d:ba:dc:9a:ab:02:5e:d7:1a:58:2b:3c:a9:91:7a:
                    47:57:75:de:48:ae:a3:2b:6f:0a:da:cc:60:9f:eb:
                    a9:48:9a:69:08:03:69:8b:ed:d9:76:4f:09:8b:36:
                    7e:ba:95:66:fa:06:04:45:e5:4c:ec:9e:2b:c9:79:
                    13:ee:5e:3f:61:14:08:ad:35:de:ba:bd:6f:75:74:
                    0c:bf:09:5b:ed:b2:b2:46:f1:84:c7:ac:57:36:4b:
                    3f:5b:22:97:52:a6:dc:82:df:34:48:c1:a0:19:d9:
                    e8:a1:48:e2:a7:e2:f1:1b:3d:71:68:02:ea:23:6a:
                    48:73:e2:70:a0:b3:69:72:d3:55:c6:5f:78:70:d3:
                    84:bf:4c:ca:6b:a2:d5:f1:5a:08:91:3b:08:b0:eb:
                    0a:c1:96:3f:68:4d:14:70:b0:83:de:ea:ad:8a:92:
                    63:c0:89:2c:70:7f:ab:b7:b4:20:b8:31:90:6f:f8:
                    0a:1b:d4:54:95:c6:91:6e:56:dc:c6:63:3d:91:93:
                    ca:f6:f2:90:04:f7:91:39:46:46:ed:7f:02:2b:c2:
                    bf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:49:E4:C0:F1:89:D7:F6:AB:54:02:50:8E:97:9A:66:8F:83:DD:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/f0203cd0-7206-39c9-a409-58f9413893f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.crl

            X509v3 Authority Key Identifier:
                keyid:08:03:CC:E5:0B:8F:FB:4D:38:99:1F:C1:B4:E5:FB:E2:FD:19:36:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:40:92:33:42:3c:77:fd:6d:fb:eb:43:ec:0d:b4:74:cc:b7:
         09:0e:45:ce:17:bf:91:cb:89:ed:87:9a:36:32:81:9d:d4:ef:
         a7:9a:85:49:68:35:57:e5:5b:b3:05:d7:e3:85:42:0e:ef:74:
         4b:93:a3:24:65:b0:76:32:06:29:48:26:0c:93:23:7c:d4:74:
         46:aa:34:bc:85:a8:64:67:ac:9f:fa:0c:c6:3e:4a:1b:a2:c1:
         15:3a:0f:fa:2b:2e:a8:4b:d0:ff:72:68:59:71:25:25:8e:03:
         a3:e1:7e:89:b6:ac:55:cd:a0:cb:90:26:b4:be:bb:80:aa:a4:
         f1:47:10:07:bb:ea:95:59:d5:a9:54:86:76:17:0a:cd:ee:53:
         7a:38:fd:17:08:7a:34:30:9f:33:47:c9:82:70:5a:be:55:a7:
         c7:e4:18:a1:4d:21:24:23:70:00:62:74:71:d0:1a:f1:8d:88:
         d0:ce:3c:13:d6:28:78:8a:5d:7e:8c:ad:e6:d0:7b:3c:2e:c0:
         5f:bd:ce:03:4f:c6:c3:ef:f6:e9:1a:fa:c3:dd:12:ca:fc:53:
         d9:03:67:8f:0d:ff:d6:84:c6:1a:58:34:3a:a9:92:3a:9b:40:
         7d:98:14:8e:00:07:9f:79:9e:23:ab:68:16:42:80:2e:56:94:
         d1:88:49:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:13:30 2025 by rpki-client