Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/e8011f7f-c9a1-3a14-b66b-0168bfb8d647.roa
File:                     e8011f7f-c9a1-3a14-b66b-0168bfb8d647.roa (raw, json)
Hash identifier:          YylsV6T1c4dJf1I0dzE1vLJR1+wmWQ8ebMvBHoDIljc=
Subject key identifier:   DC:63:E3:6A:D4:03:95:61:F1:16:E2:C1:7A:E2:28:45:5F:86:8C:FA
Certificate issuer:       /CN=5aa08268-5ec4-4fb1-b2a8-05d6a90ac091
Certificate serial:       010D0C9F4328584991A82CAAA1ED49224DBA4E80
Authority key identifier: F3:CD:BC:7F:03:30:AF:B8:46:96:69:54:22:1D:93:81:31:B0:3C:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/e8011f7f-c9a1-3a14-b66b-0168bfb8d647.roa
Signing time:             Fri 18 Apr 2025 17:04:53 +0000
ROA not before:           Fri 18 Apr 2025 17:04:53 +0000
ROA not after:            Thu 17 Jul 2025 17:04:53 +0000
asID:                     395898
IP address blocks:        23.137.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:a8:2c:aa:a1:ed:49:22:4d:ba:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aa08268-5ec4-4fb1-b2a8-05d6a90ac091
        Validity
            Not Before: Apr 18 17:04:53 2025 GMT
            Not After : Jul 17 17:04:53 2025 GMT
        Subject: CN=03a1a771-7686-4abf-9b35-52e5516850c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:a1:a0:3c:8d:78:20:2a:1c:ee:81:66:1d:
                    86:3a:69:50:4f:39:1e:7d:9b:b7:9c:9d:7b:c6:44:
                    79:6e:88:42:93:d0:c7:b2:cd:e3:14:ae:df:73:89:
                    81:e7:a0:db:89:b0:de:28:3f:d0:69:bf:31:ec:46:
                    47:8e:14:f3:45:19:23:c8:5d:80:05:16:af:5a:50:
                    3e:bc:b2:4c:11:c3:2a:74:24:21:85:97:d2:b5:0a:
                    9a:7d:67:14:e0:53:95:c7:10:81:e0:96:65:a4:63:
                    fd:d3:fd:1c:58:38:d3:e3:24:ea:97:fa:70:a2:e4:
                    53:ce:6d:af:87:4c:ab:a0:ea:81:a6:4a:6d:c7:a0:
                    ea:54:43:5e:4d:0f:87:90:09:e0:c1:96:c0:a0:4c:
                    62:da:f1:83:1b:d2:e3:d6:de:a8:47:dd:1c:8d:5c:
                    05:4e:b4:44:5a:df:d4:96:27:52:ab:e9:69:71:01:
                    0a:cc:fc:69:e7:6f:ea:63:a9:d5:fd:4f:b5:b1:04:
                    eb:15:f7:aa:89:ec:ac:de:f8:46:6b:fc:ec:e7:d6:
                    23:e7:d9:f4:e5:38:63:65:4e:6b:88:f6:e8:bb:b2:
                    7d:3c:e1:e1:de:3d:9b:58:44:e4:c9:fb:9e:d0:83:
                    f9:bc:71:17:f7:1a:a2:03:5e:e2:6a:e4:64:72:b7:
                    b9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:63:E3:6A:D4:03:95:61:F1:16:E2:C1:7A:E2:28:45:5F:86:8C:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/e8011f7f-c9a1-3a14-b66b-0168bfb8d647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.crl

            X509v3 Authority Key Identifier:
                keyid:F3:CD:BC:7F:03:30:AF:B8:46:96:69:54:22:1D:93:81:31:B0:3C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:8e:11:98:a6:80:b1:0e:1f:e9:e9:a4:48:6d:56:52:e7:58:
         b3:17:35:4d:77:41:fd:84:6e:d8:d4:80:58:7f:69:29:84:ce:
         82:3e:02:60:13:42:96:0a:a0:6a:95:ca:22:de:9d:f0:b6:ee:
         c0:bd:8d:0b:b4:41:72:ff:db:de:2e:fc:0a:2c:b4:3a:1e:c2:
         67:11:ec:e3:22:5c:d2:65:f6:fe:dd:75:85:57:84:fc:fe:c9:
         be:c7:b7:50:62:86:0e:64:7b:cd:3d:a2:f6:77:97:30:67:22:
         cb:37:16:0d:ca:11:f1:ce:76:2d:54:39:55:4e:77:df:a7:e4:
         0e:cc:f5:1c:00:11:63:28:94:1c:b0:b2:ac:ad:db:60:7a:70:
         9c:10:55:a3:53:3b:5a:5a:ec:65:43:c4:d9:67:e8:e6:84:96:
         a6:eb:d3:6f:b0:28:e9:ec:cd:ab:91:75:96:e2:91:67:50:c6:
         22:c9:c7:0c:1a:c5:fb:80:f5:c3:e3:6c:9a:cd:33:bd:3f:c0:
         26:4c:4f:9a:5f:e2:d9:62:6c:c9:c2:b4:e4:8e:39:69:8c:26:
         a9:ec:96:ff:6b:23:3b:6d:86:e6:8e:64:e7:45:e0:dd:95:dc:
         ec:c7:68:4c:8d:fb:f7:d2:20:f2:e0:e2:f3:a1:da:4e:67:23:
         af:43:2f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:20:04 2025 by rpki-client