Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8e117f76-b87c-37a0-a202-b1ce407bf7a8.roa
File:                     8e117f76-b87c-37a0-a202-b1ce407bf7a8.roa (raw, json)
Hash identifier:          6z0zWZX+2afheap30wwdEa3q6AxaZSBsomc05JB9GXo=
Subject key identifier:   55:16:BB:54:33:80:B8:53:B2:20:21:7B:82:00:BB:40:9E:C2:2F:C0
Certificate issuer:       /CN=0c061d8c-3838-415d-8bbc-20962c789d81
Certificate serial:       010D0C9F432858498CFF19D9B746078B4DCF2380
Authority key identifier: 65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8e117f76-b87c-37a0-a202-b1ce407bf7a8.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     61228
IP address blocks:        23.141.88.0/24 maxlen: 24
                          2602:fb0d::/44 maxlen: 48
                          2602:fb0d:99::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:19:d9:b7:46:07:8b:4d:cf:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c061d8c-3838-415d-8bbc-20962c789d81
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=c095de54-b8b8-4e33-936c-ee24eb0f4791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e7:7e:67:47:8e:11:a3:0d:e2:4d:97:34:7a:
                    48:33:2c:5f:01:a2:4e:3d:62:a5:71:a0:00:d8:d3:
                    df:7f:0d:4a:2c:02:79:bc:c9:c9:95:ef:89:d1:0c:
                    41:b1:5e:5b:49:66:54:8a:8a:48:4d:71:11:43:0d:
                    e3:55:70:15:1b:87:c6:23:5c:9b:6b:27:9e:58:14:
                    e3:25:ea:33:fb:80:96:12:41:2a:bf:d5:85:5a:f5:
                    38:3c:5c:f4:70:a3:62:35:98:c3:51:2c:5a:62:d5:
                    5c:1f:8c:f5:29:0d:16:72:50:0d:f3:40:be:11:c5:
                    9b:1d:19:24:b5:36:2f:50:50:2c:36:50:36:ae:73:
                    06:18:c5:9a:f9:4a:85:aa:b0:ad:c9:e8:ef:c8:5d:
                    8a:32:3b:fd:0e:b3:04:c8:e0:34:af:dd:78:b3:25:
                    f5:d0:21:99:87:c7:16:f6:9d:c8:8d:50:c7:3e:c1:
                    8f:74:6a:9a:9a:35:a1:4d:a8:9c:3a:e8:fe:48:4a:
                    fa:32:07:6c:de:b7:aa:20:19:bf:ed:75:2f:9b:bd:
                    2e:fc:b0:c1:28:bd:ed:48:a3:12:7b:fd:a5:fb:df:
                    16:fb:3c:7b:25:55:60:b6:ce:88:7c:56:81:06:6e:
                    63:df:b6:27:63:bf:ca:64:33:1c:dc:85:03:39:49:
                    5e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:16:BB:54:33:80:B8:53:B2:20:21:7B:82:00:BB:40:9E:C2:2F:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8e117f76-b87c-37a0-a202-b1ce407bf7a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl

            X509v3 Authority Key Identifier:
                keyid:65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.88.0/24
                IPv6:
                  2602:fb0d::/44
                  2602:fb0d:99::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:41:73:04:6e:3f:67:d6:ab:9c:30:84:e9:51:e0:0d:ef:cf:
         0f:b3:15:8d:91:ab:27:c1:41:b1:d7:d8:a1:0a:d6:fd:d4:23:
         c1:a5:db:a4:bf:de:04:a0:f2:6a:3d:57:c9:9c:9e:f3:11:c0:
         82:8a:67:2f:20:43:4a:23:e4:00:9f:e4:ab:8b:44:1f:5b:2a:
         56:59:7c:d2:f1:d0:49:c0:b5:c0:9c:ba:6e:5a:45:46:d9:37:
         28:f7:7b:06:48:c5:df:1c:24:8a:2b:c1:70:e7:1d:f5:31:b8:
         df:30:56:80:43:4f:b5:3f:b8:92:c0:52:c7:f9:78:65:0d:5f:
         7f:98:e0:ae:31:88:af:2c:ae:15:f1:0c:94:99:2b:a9:c4:40:
         65:8b:d8:78:82:9c:5b:22:50:a4:8c:f5:cd:5c:66:f6:36:5e:
         f1:fe:dd:17:55:0e:ce:67:fe:1e:6e:b7:46:83:19:5c:9e:80:
         d0:cb:fb:d4:c2:67:4b:38:d0:2c:f6:0d:3d:4d:34:eb:28:52:
         31:e2:54:e9:06:60:69:ef:0f:80:48:b5:ef:ae:b6:d7:61:81:
         f2:3e:c5:fd:bc:28:a3:35:b6:09:94:a1:88:c3:cc:97:3f:e4:
         8a:5f:99:df:dd:72:53:7c:aa:81:5f:91:ea:34:ee:23:ed:e7:
         5a:34:f2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:54:20 2025 by rpki-client