Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/1f210877-687d-306a-8cc8-c5056fc5d150.roa
File:                     1f210877-687d-306a-8cc8-c5056fc5d150.roa (raw, json)
Hash identifier:          DwacXGmYiBVorg2glaahu7mGRjSvynyHibFsqMRoSmM=
Subject key identifier:   07:6E:53:A5:02:58:20:FC:04:CE:D7:C7:19:D7:A2:16:68:4A:7E:6D
Certificate issuer:       /CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Certificate serial:       010D0C9F4328584A331AEE9F9FC921597190A580
Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/1f210877-687d-306a-8cc8-c5056fc5d150.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     17024
IP address blocks:        23.154.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:ee:9f:9f:c9:21:59:71:90:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=7264fc99-1b2e-4cbe-91ed-9a67e3013ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:58:b2:92:84:dd:40:df:18:57:eb:a3:02:71:
                    f7:7d:75:e7:4f:9b:37:a4:d6:95:20:2d:13:ca:10:
                    bd:fe:0f:f3:6a:78:ef:b2:61:f2:96:b7:56:64:df:
                    c4:84:3d:2b:f5:b1:3d:a0:f2:57:06:0e:c9:72:09:
                    48:10:1b:35:ed:39:aa:42:ce:b4:28:04:51:4f:03:
                    9e:80:66:36:e6:34:92:22:15:63:78:de:b3:69:44:
                    3a:aa:72:9d:91:64:4e:63:5c:f6:5e:c8:5b:9c:bd:
                    7a:b6:c4:04:34:05:ec:c3:1e:e9:4f:0b:9d:6b:94:
                    8d:48:42:16:04:62:55:80:3f:d5:b1:01:13:b6:2c:
                    05:aa:f5:66:9c:19:e4:94:ad:91:d3:a6:81:83:76:
                    58:48:b7:61:0e:46:7e:3a:6a:50:fd:7e:2b:a8:5c:
                    5b:b2:c2:11:5b:57:e3:d4:db:ff:1a:3b:47:71:bc:
                    68:01:01:8f:c8:06:d7:d4:37:f8:57:f8:0a:fe:97:
                    07:e3:68:79:02:b0:94:28:52:ba:ef:22:2f:e8:ae:
                    61:7b:bd:2f:8b:2f:73:42:15:f3:5f:59:6c:f6:11:
                    24:5e:72:14:2b:c4:46:b6:24:a3:a7:d7:e7:8c:cc:
                    d9:1c:7f:da:f4:9b:ab:9e:1d:7b:c2:fe:54:e1:9a:
                    5e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6E:53:A5:02:58:20:FC:04:CE:D7:C7:19:D7:A2:16:68:4A:7E:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/1f210877-687d-306a-8cc8-c5056fc5d150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl

            X509v3 Authority Key Identifier:
                keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a1:80:30:95:f0:4f:3c:aa:d8:3a:77:19:6c:71:ab:f5:10:
         88:47:e1:50:01:fb:55:db:ec:18:aa:bd:80:07:4a:8b:54:e6:
         5f:80:19:04:12:ea:5a:d4:a3:e0:3f:0e:5f:6f:66:a3:18:01:
         26:e2:b6:07:a6:f5:55:05:fe:df:60:cd:ed:97:b7:21:7f:27:
         cf:25:4f:9d:c1:19:01:3f:e6:6d:a2:ac:b6:b2:37:c0:ec:de:
         01:d8:fe:69:31:41:dc:5d:ab:80:50:b5:53:d3:88:01:77:a2:
         59:1e:e2:59:58:2c:4b:f5:20:c9:8d:59:17:9e:b5:90:df:95:
         53:d0:c9:72:15:61:97:fa:28:fb:09:9d:db:65:83:bf:96:e7:
         ea:22:61:e8:fa:d2:8c:9f:5f:c1:bd:d9:2b:01:96:3c:3a:ea:
         f0:8b:31:63:42:5e:94:67:2f:19:fa:1c:7d:ad:ea:47:2e:a6:
         ba:02:3c:3a:17:3c:09:b8:e4:c2:5a:4a:74:66:d4:c0:6a:6a:
         c1:de:a3:94:5e:1a:8e:52:d3:8e:19:07:51:9d:b8:45:bc:fc:
         72:b3:03:c3:94:38:8b:32:26:b0:ad:33:16:1c:22:ac:1f:2f:
         62:a7:8f:ae:52:6a:ef:a9:93:c6:c0:ff:76:65:65:90:a1:b4:
         74:a6:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:53 2025 by rpki-client