Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8299b204-4012-3a46-baa8-ef161ee859d5.roa
File:                     8299b204-4012-3a46-baa8-ef161ee859d5.roa (raw, json)
Hash identifier:          xhaQ8pDnOMoO+DbhHCRqLYShK7jh6jq4Q6a6UEBucpY=
Subject key identifier:   BC:31:16:1C:4B:D4:19:77:18:BC:15:C2:55:24:38:70:62:8A:B8:7A
Certificate issuer:       /CN=8785615b-4ba8-49c9-a63b-755d5560474a
Certificate serial:       010D0C9F4328584964806007046BF6A826ADFD80
Authority key identifier: 9A:0F:7D:C7:4B:73:5D:D6:9A:81:FB:CF:6C:00:C8:D2:C4:28:D9:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8299b204-4012-3a46-baa8-ef161ee859d5.roa
Signing time:             Wed 02 Apr 2025 12:53:19 +0000
ROA not before:           Wed 02 Apr 2025 12:53:19 +0000
ROA not after:            Tue 01 Jul 2025 12:53:19 +0000
asID:                     20473
IP address blocks:        23.136.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8785615b-4ba8-49c9-a63b-755d5560474a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8785615b-4ba8-49c9-a63b-755d5560474a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:80:60:07:04:6b:f6:a8:26:ad:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8785615b-4ba8-49c9-a63b-755d5560474a
        Validity
            Not Before: Apr  2 12:53:19 2025 GMT
            Not After : Jul  1 12:53:19 2025 GMT
        Subject: CN=8268a5f7-eafd-4fba-8b32-46ac8651807e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6c:f7:d2:88:9f:55:28:c0:97:bc:10:ff:1b:
                    54:db:89:86:d8:3a:5f:a7:6f:96:dd:92:cf:ad:4c:
                    ba:39:81:89:26:f0:41:5a:7b:a4:36:1b:bb:24:d0:
                    8d:97:d1:df:38:5d:bf:52:ba:53:7d:fa:f2:bf:26:
                    98:de:9e:d7:5f:28:83:9b:03:4a:7b:13:b3:98:87:
                    fc:cb:ff:15:e0:3e:ae:f6:56:cc:af:60:d0:ae:4e:
                    f5:59:d2:d0:54:42:49:2f:61:d5:fa:90:ad:9c:d5:
                    3d:96:22:c2:a9:9e:84:88:5b:4e:cc:73:00:f0:cf:
                    0d:57:08:4c:8f:53:31:14:7f:e1:51:96:e4:f2:cc:
                    83:48:6a:13:4d:47:8c:38:96:1e:85:ab:b6:2f:2a:
                    6b:1e:df:4b:85:de:7e:d1:f2:00:ec:a8:3d:d5:ca:
                    47:43:44:11:ec:a8:ed:6c:8f:8a:0f:d8:0e:96:36:
                    02:02:c6:68:1c:50:66:b0:bb:e8:f9:1e:5c:a0:a0:
                    96:e8:43:01:f5:28:65:13:a7:7e:d5:50:4d:2f:e5:
                    7b:a7:f5:45:9a:c1:1a:57:78:06:fc:23:f3:34:5f:
                    97:4a:a0:10:13:4f:77:a4:37:d0:96:c9:99:2e:fb:
                    42:57:8c:55:25:80:96:0c:da:6a:05:39:6c:43:f2:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:31:16:1C:4B:D4:19:77:18:BC:15:C2:55:24:38:70:62:8A:B8:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8299b204-4012-3a46-baa8-ef161ee859d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8785615b-4ba8-49c9-a63b-755d5560474a.crl

            X509v3 Authority Key Identifier:
                keyid:9A:0F:7D:C7:4B:73:5D:D6:9A:81:FB:CF:6C:00:C8:D2:C4:28:D9:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:52:f6:01:2f:55:e2:ec:2a:2f:d0:d5:5d:e0:ca:4b:da:34:
         0c:53:ad:e5:00:a6:e8:83:ba:0a:e7:5a:09:02:58:e0:4d:6b:
         3c:fa:e9:58:74:e1:90:0b:1b:da:d4:3b:66:e6:5e:1d:bb:29:
         97:e2:e4:dd:1c:57:ef:b4:0b:89:0a:5e:18:10:dc:9c:7d:40:
         09:7e:2c:45:a2:55:67:de:41:40:09:6f:4d:d7:a4:5b:a5:12:
         92:11:08:c1:85:20:4c:cd:02:cc:29:5d:7b:df:fa:75:8c:10:
         b4:2a:7d:ae:0d:a5:6b:b1:90:6e:23:bf:6f:a4:6e:92:30:16:
         c3:76:29:e8:53:5a:eb:bb:c4:e1:30:7f:04:26:60:86:f8:46:
         4b:53:8e:48:41:77:83:8f:c4:30:a3:55:20:a7:9f:a8:de:9f:
         22:93:c3:49:b3:b6:f7:4d:94:41:d9:fd:88:88:82:96:c6:1f:
         d0:cf:fa:49:79:d7:4f:08:d6:72:9a:15:a4:0e:50:c5:f4:0e:
         9c:42:85:9d:c7:e2:49:96:f6:89:1b:58:f9:97:1d:88:35:e4:
         b5:51:3d:35:30:45:86:19:ec:c1:9d:ad:4d:2e:91:a0:fa:fc:
         6c:dc:63:11:d6:b1:68:09:d2:7f:12:83:3d:9a:0b:66:e6:0c:
         9e:56:e6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:40 2025 by rpki-client