Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8/aaa78d9f-91e4-3028-b943-562c3b17769c.roa
File:                     aaa78d9f-91e4-3028-b943-562c3b17769c.roa (raw, json)
Hash identifier:          5FdTaSVO8MIXnXS7uJJ/kOiAkH1A3Iy3alLcrxhPfg0=
Subject key identifier:   54:51:71:18:B8:09:E3:6B:25:3D:AD:88:52:80:F1:F4:CF:68:D5:07
Certificate issuer:       /CN=391e9aeb-641f-4719-b971-6fbcfdfddbf8
Certificate serial:       010D0C9F43285849D5008D9E3762EED6E7C08700
Authority key identifier: BC:AB:48:1F:73:0F:08:1A:19:D6:28:94:5E:C2:5A:7D:69:EC:E2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8/aaa78d9f-91e4-3028-b943-562c3b17769c.roa
Signing time:             Mon 12 May 2025 20:02:07 +0000
ROA not before:           Mon 12 May 2025 20:02:07 +0000
ROA not after:            Sun 10 Aug 2025 20:02:07 +0000
asID:                     27207
IP address blocks:        23.135.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8/391e9aeb-641f-4719-b971-6fbcfdfddbf8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8/391e9aeb-641f-4719-b971-6fbcfdfddbf8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:00:8d:9e:37:62:ee:d6:e7:c0:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391e9aeb-641f-4719-b971-6fbcfdfddbf8
        Validity
            Not Before: May 12 20:02:07 2025 GMT
            Not After : Aug 10 20:02:07 2025 GMT
        Subject: CN=6c0f169b-b56f-425f-b24e-b4ae47959b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6b:a2:bc:3c:2e:a1:96:66:61:49:31:62:62:
                    5c:38:ce:c7:d4:67:e7:50:0a:64:08:d3:dd:ee:ae:
                    38:88:d1:79:8e:ad:e5:58:57:90:c2:23:e5:6b:de:
                    80:a1:a4:a5:fa:aa:07:ef:00:4d:91:ce:00:da:c3:
                    fd:0d:df:94:13:6b:ff:c4:05:85:de:a6:9f:e3:2b:
                    f0:b1:3f:19:f4:af:83:69:00:f0:53:a1:63:46:15:
                    9a:56:94:b9:6b:1d:1d:67:65:4f:51:01:1a:6a:9b:
                    92:e4:a1:aa:ad:0d:71:62:4a:7d:6a:0f:bd:c0:d7:
                    d7:4f:21:46:dc:53:bf:cb:c9:4f:43:85:73:3b:b2:
                    3b:61:a5:cd:2b:bc:fe:da:89:bd:6e:63:a2:d0:4e:
                    e9:e9:17:50:96:17:8d:cd:44:20:71:ff:58:a5:de:
                    53:b8:e2:37:8f:5d:d3:82:9e:99:bf:af:05:07:bf:
                    91:e3:90:5c:a7:8f:73:d9:3d:98:64:21:73:3f:11:
                    88:f8:45:13:10:71:d4:13:55:dc:c3:82:6e:1d:1e:
                    52:ca:3e:25:61:a3:fb:40:12:05:b5:b8:d8:af:ac:
                    04:c8:60:84:ad:08:c6:08:4b:e1:b7:0f:79:2a:29:
                    b0:a5:ea:56:7e:1e:04:98:9b:83:64:2d:53:00:26:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:51:71:18:B8:09:E3:6B:25:3D:AD:88:52:80:F1:F4:CF:68:D5:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8/aaa78d9f-91e4-3028-b943-562c3b17769c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8/391e9aeb-641f-4719-b971-6fbcfdfddbf8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:AB:48:1F:73:0F:08:1A:19:D6:28:94:5E:C2:5A:7D:69:EC:E2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:bd:b1:b6:e7:a7:2e:c3:e6:66:68:90:a0:35:1f:9a:22:45:
         80:19:27:1f:fd:6c:47:81:65:6b:9d:10:df:41:4e:73:2d:88:
         09:a1:84:dd:fe:23:6b:2e:32:32:c0:dc:35:8c:6d:e5:10:5a:
         49:0f:82:68:c5:c8:b5:2b:e6:83:be:ae:c1:6b:58:08:44:16:
         c0:fe:57:05:bb:01:85:c4:21:2a:b1:b0:09:dc:f0:cf:c4:81:
         21:b4:fb:88:8b:95:fa:94:50:03:9d:73:a4:02:02:fc:76:07:
         82:2f:73:96:c0:5d:4c:74:e4:fd:ae:98:b0:1a:91:4b:fd:8f:
         eb:70:e8:99:81:5f:c8:c7:30:be:a1:e0:b8:3a:a1:ac:32:96:
         d4:54:aa:c9:6b:49:39:ac:5d:d1:60:8b:14:78:af:9d:f1:87:
         af:ab:68:11:66:16:31:87:c9:6b:7c:23:6d:23:22:39:5b:72:
         28:5d:3f:5f:57:7b:11:a0:06:7e:65:12:74:59:55:7e:ef:17:
         f4:b5:4d:29:c1:de:49:f1:b3:1f:af:2b:70:96:32:45:e9:48:
         05:b3:a0:3c:60:c6:17:49:73:ed:5a:8c:6d:af:60:c6:03:d9:
         9b:88:d7:f6:05:27:05:c5:dd:6f:1c:e2:eb:e8:26:ab:f3:b4:
         2a:6b:0d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:33:25 2025 by rpki-client