Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/42f8e1d1-c94e-3b17-892c-0a735d44591a.roa
File:                     42f8e1d1-c94e-3b17-892c-0a735d44591a.roa (raw, json)
Hash identifier:          wFk68p2iMTk9qFK0jfZAHUrox4aJgqxsdjE2RrQ1ngg=
Subject key identifier:   89:46:F7:75:A0:F6:46:B6:75:61:AA:7A:7D:E9:3A:43:CA:97:3E:F5
Certificate issuer:       /CN=e7f2d196-f493-41ef-a906-7b0786815678
Certificate serial:       010D0C9F43285849ABB4A6B0F2D6E39D2432C480
Authority key identifier: 77:73:63:4D:ED:24:E8:B5:C5:4C:EC:19:3E:76:F1:D6:FA:73:FB:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/42f8e1d1-c94e-3b17-892c-0a735d44591a.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     400545
IP address blocks:        23.136.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/e7f2d196-f493-41ef-a906-7b0786815678.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/e7f2d196-f493-41ef-a906-7b0786815678.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:a6:b0:f2:d6:e3:9d:24:32:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f2d196-f493-41ef-a906-7b0786815678
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=6032af37-1e33-40d1-b700-147d8b762732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:99:76:bc:1f:37:94:c4:0b:cf:87:35:5a:4f:
                    9f:1a:2a:9c:8a:55:a6:2c:5f:91:6e:eb:c0:51:f3:
                    8c:86:a4:bc:74:f7:43:19:a7:68:5f:34:22:2d:2c:
                    85:15:a8:5f:fc:fc:f5:43:a9:a5:79:f0:c8:3e:3c:
                    bc:fa:b0:0c:5d:b4:03:b5:18:80:08:1d:0d:8d:e6:
                    ae:fb:7c:c9:19:03:1a:2a:32:da:c3:ac:fd:ab:24:
                    2a:22:81:7f:9a:f8:31:13:b3:2f:14:a7:c6:96:c3:
                    91:56:cd:7f:40:aa:87:20:97:14:54:b9:35:e4:3f:
                    ff:e7:ef:70:e0:41:45:22:3d:29:05:69:69:86:ea:
                    d2:8f:69:4a:f0:f0:00:d9:6c:17:29:43:2e:ca:da:
                    f9:4f:78:76:52:be:3b:0b:3b:b0:c9:b2:d1:60:63:
                    bb:0b:8b:31:a0:d0:9a:c5:20:c7:a2:76:a7:b8:33:
                    d6:fb:67:53:8a:51:e8:22:29:d4:a3:df:0d:bb:af:
                    bd:72:85:8d:19:8e:cd:47:11:ff:66:16:fc:dd:6b:
                    db:f6:b2:d9:cf:ff:09:81:82:3c:f9:d1:92:b6:e8:
                    6f:8b:50:dd:4f:f6:8b:d6:6d:93:60:8f:01:76:02:
                    94:82:54:2a:1f:79:78:9c:28:5a:4c:48:ba:cc:ca:
                    c2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:46:F7:75:A0:F6:46:B6:75:61:AA:7A:7D:E9:3A:43:CA:97:3E:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/42f8e1d1-c94e-3b17-892c-0a735d44591a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/e7f2d196-f493-41ef-a906-7b0786815678.crl

            X509v3 Authority Key Identifier:
                keyid:77:73:63:4D:ED:24:E8:B5:C5:4C:EC:19:3E:76:F1:D6:FA:73:FB:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:78:97:9d:a8:7b:44:39:f9:c8:c2:14:07:32:88:71:39:5b:
         ae:29:58:bb:dd:f7:79:e3:14:71:77:02:a4:b5:63:b5:34:ac:
         96:54:cf:ac:95:ef:4b:63:5d:cf:20:88:d0:fd:b5:b3:ca:d2:
         28:cb:2f:d6:3c:16:0a:cd:d4:af:7e:a0:d4:a5:15:71:01:cf:
         e7:8b:f2:03:c0:46:09:04:c1:ac:2b:75:22:d9:1a:99:98:51:
         4c:c4:13:a9:18:e2:dd:50:d1:99:94:b2:44:0b:ff:9f:99:c6:
         b1:ee:2e:b8:ef:71:70:83:ba:f8:e9:32:58:d5:fa:f4:3d:b0:
         f3:32:6b:f9:56:8c:3e:eb:5c:92:02:28:92:4a:d1:e7:7b:39:
         ab:d9:4d:2c:5e:13:8f:73:e8:39:b2:43:c1:96:f7:23:0f:f1:
         52:f7:9a:44:c1:13:ec:1e:ae:e5:88:be:2f:de:1c:56:03:85:
         63:0e:ed:57:8f:60:ea:28:11:07:23:b4:55:c7:fb:0a:19:70:
         2d:db:8d:c4:a0:16:d3:13:fd:ce:bb:ff:e7:bf:0d:ef:55:87:
         5a:d3:d5:05:fc:93:02:6b:e7:cd:9c:c9:95:51:fa:77:68:78:
         95:e7:8d:98:5b:84:86:29:e6:72:28:3e:ab:c6:96:ef:0d:5c:
         19:96:79:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:53 2025 by rpki-client