Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/1d03ded5-67ad-3adf-8fac-21785cf59a34.roa
File:                     1d03ded5-67ad-3adf-8fac-21785cf59a34.roa (raw, json)
Hash identifier:          7ywv+NFzVHFcOJfeHIXf5eA9m9YukIHXmOA72cudfZk=
Subject key identifier:   75:14:AD:F9:AD:A1:F7:56:33:1A:FD:75:5E:4A:8E:C8:79:29:AB:25
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F43285849955F19AC464CBD91749D630C
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/1d03ded5-67ad-3adf-8fac-21785cf59a34.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     22773
IP address blocks:        23.234.160.0/22 maxlen: 22
                          23.234.164.0/22 maxlen: 22
                          23.234.168.0/22 maxlen: 22
                          23.234.172.0/22 maxlen: 22
                          23.234.176.0/22 maxlen: 22
                          23.234.180.0/22 maxlen: 22
                          23.234.184.0/22 maxlen: 22
                          23.234.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:19:ac:46:4c:bd:91:74:9d:63:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=6d604ae6-32af-4bf8-9f01-ef8b87794bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0e:4c:ff:97:9b:d7:0d:37:2b:07:de:da:c9:
                    ba:b9:f7:25:c9:95:13:f2:04:e2:49:13:72:9a:8e:
                    69:00:6b:ed:59:13:52:8c:70:2b:b3:ed:ed:f6:9e:
                    10:70:3e:24:f6:a4:41:3f:c5:0f:98:03:29:01:cd:
                    01:be:9f:c9:71:9f:bc:81:62:49:8b:90:48:b0:cd:
                    73:00:9f:b4:99:ae:51:6b:b5:e1:f8:9f:b5:ec:ab:
                    8a:f4:18:bb:bc:2d:f8:3f:c1:df:2c:e8:3f:f1:9a:
                    78:e7:2b:25:ac:8b:23:5c:67:79:67:f1:34:e4:45:
                    36:fb:52:2c:c4:a0:02:e4:51:bd:b6:ca:e4:58:8d:
                    f2:dc:7e:9d:e5:f8:f6:03:10:42:46:24:4c:16:d9:
                    50:0a:9e:0f:fc:62:2d:28:63:fe:1d:30:5b:0d:51:
                    dc:66:13:49:6c:fc:cb:82:43:e3:81:30:c1:75:34:
                    7f:07:02:02:bd:2b:8a:dc:fc:26:02:d8:4b:94:cf:
                    f9:3d:11:67:2f:33:e1:50:eb:f3:cb:3a:d5:ab:c3:
                    c0:8d:7c:e5:82:fe:3f:8f:71:b7:ed:77:5e:03:7a:
                    4f:64:54:ca:22:47:20:2e:cb:ad:e5:11:5f:48:22:
                    5a:36:39:1b:77:06:08:20:4d:ae:d3:0c:18:8c:0e:
                    9d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:14:AD:F9:AD:A1:F7:56:33:1A:FD:75:5E:4A:8E:C8:79:29:AB:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/1d03ded5-67ad-3adf-8fac-21785cf59a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:06:97:d7:c3:7a:87:90:8a:63:09:fb:35:87:41:65:47:1f:
         2d:04:79:97:d3:22:73:96:a0:44:7f:5d:47:18:fa:7b:2a:08:
         fa:3d:25:3c:a2:81:7f:36:08:bb:3d:5b:b0:64:48:b7:9b:e8:
         cc:0a:2c:35:27:e1:54:ba:6a:0d:5b:8d:76:5b:74:14:48:aa:
         bb:45:56:3e:7a:fb:79:ff:b6:89:98:94:e6:0b:e3:d7:39:07:
         a1:6e:f2:0c:5c:ae:37:07:6a:d4:37:f8:1b:95:72:1d:ad:cf:
         3c:81:b6:bf:ba:d2:9e:d9:35:a5:f3:94:45:d9:f0:44:a9:00:
         7d:18:71:a5:8a:9c:6b:e4:d8:bb:67:4d:41:f0:ec:46:0b:9c:
         87:fd:67:15:d6:e7:e3:b6:95:50:33:9d:7f:3e:86:bb:9c:e0:
         83:64:bd:a8:46:cd:f1:82:51:9d:bd:e7:05:a4:29:32:6a:aa:
         f1:99:a2:70:49:8d:e2:99:b2:ca:5b:e5:94:c1:9f:89:97:d7:
         75:5a:1c:d0:42:a4:68:ad:13:c4:66:d6:8b:0c:c9:a8:76:75:
         1a:8a:00:26:5c:fc:7b:ba:79:fb:39:14:f5:27:ad:a8:6e:4e:
         47:3d:26:b5:10:96:36:2e:7c:36:0d:ab:46:f7:83:05:5d:2c:
         58:ba:61:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:30:53 2025 by rpki-client