Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/63087667-3e28-365a-914a-46ffe0575f31.roa
File:                     63087667-3e28-365a-914a-46ffe0575f31.roa (raw, json)
Hash identifier:          XZu42kkuPW14Vzn3r5xa0G40Ro/tAeSWG7KQnbIWo9c=
Subject key identifier:   5E:A0:3F:33:C1:C7:73:0D:7B:79:42:72:F1:AD:EE:E9:20:80:A9:8F
Certificate issuer:       /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial:       010D0C9F432858499C59E69FE7982AA498DC6400
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/63087667-3e28-365a-914a-46ffe0575f31.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     152705
IP address blocks:        23.247.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:e6:9f:e7:98:2a:a4:98:dc:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=8f94ecbb-ef25-486a-a0bd-67a2532feeb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:83:ae:43:79:1f:a2:21:ab:d7:96:69:08:80:
                    46:96:df:14:4e:70:97:58:1a:75:a9:e1:8e:a8:fa:
                    9b:23:de:59:5d:83:60:27:4b:d1:f4:ae:d4:f9:ca:
                    7b:82:7e:84:6c:ce:a0:04:59:7b:74:2b:db:0e:b9:
                    16:bd:bf:d4:a5:2b:bd:b8:c3:7d:33:22:4d:02:76:
                    fe:03:71:26:f6:97:f5:53:d3:5a:5f:e2:cd:0f:85:
                    a1:5c:e5:20:d5:d3:7d:fb:56:ae:82:fc:c2:ae:e5:
                    78:9f:35:7a:fd:90:4d:e9:33:55:ed:22:1e:0f:f5:
                    a8:13:50:06:50:b5:fb:e6:2f:46:33:af:b7:3c:52:
                    c5:9f:55:93:92:20:40:b7:70:a6:02:e4:eb:45:94:
                    51:8c:3f:d9:e3:2e:67:d1:f6:0f:34:6f:df:23:aa:
                    0e:43:60:4d:dd:89:2d:17:38:41:85:1c:6a:42:9c:
                    38:3a:64:c9:8e:aa:37:97:24:98:4f:a3:e0:d7:ab:
                    2a:7a:a6:29:fb:71:88:3e:67:ea:c0:e7:01:18:70:
                    0c:70:c2:0d:a8:4b:dc:01:df:9c:31:64:c4:4d:c8:
                    d0:38:58:a5:82:dc:42:1f:96:6d:5e:82:77:c7:e6:
                    b0:94:9a:3a:58:71:5a:15:91:23:1a:5d:60:b2:de:
                    82:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A0:3F:33:C1:C7:73:0D:7B:79:42:72:F1:AD:EE:E9:20:80:A9:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/63087667-3e28-365a-914a-46ffe0575f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl

            X509v3 Authority Key Identifier:
                keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c8:53:81:0d:35:a4:e9:4b:06:93:35:5c:6f:8b:fa:35:bf:
         0a:58:7e:90:42:37:f8:54:1e:78:55:f5:f7:2f:3f:98:9d:c2:
         32:54:fe:b2:47:dc:57:ca:fe:a9:e1:d5:c8:f3:50:fd:ac:a2:
         d7:3d:f1:b4:07:a5:ce:64:51:55:df:08:1f:27:35:f2:98:fa:
         51:72:ed:78:86:35:c5:c8:19:36:e7:e9:d7:20:db:2f:ad:eb:
         37:69:c2:64:58:e6:7e:2e:89:7b:3f:85:87:77:76:e3:c6:11:
         21:2f:ea:13:b2:2e:a4:56:13:69:d3:90:65:94:09:59:f4:20:
         56:62:cc:09:ab:80:85:7c:ff:f3:b1:9e:b4:d7:f9:cb:a6:5b:
         3a:a2:ca:5d:5c:14:76:91:60:31:f8:18:d6:3c:66:e8:3e:a9:
         1d:c8:86:6e:5c:ea:f8:a8:da:da:74:fd:be:b3:96:27:98:64:
         8e:70:49:28:af:bd:ad:00:84:14:a4:91:5c:4f:ca:8f:60:9c:
         80:90:d8:42:ee:c8:c3:87:31:4b:a1:18:c4:6e:8f:86:6a:3c:
         49:1c:1e:bd:fe:7e:aa:81:d9:4c:45:9e:20:b3:05:5d:b5:7d:
         d8:f8:ef:6d:8b:f6:a3:88:ab:4e:9b:81:67:62:d1:a3:92:40:
         26:0b:30:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:53:05 2025 by rpki-client