Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136/547cc64e-9e9f-3ed2-ba03-cc3b4df93856.roa
File:                     547cc64e-9e9f-3ed2-ba03-cc3b4df93856.roa (raw, json)
Hash identifier:          Offv6pzW+Z+N+h6Rmo0Q8gWQznNLCwiq/3fNtvwvZbw=
Subject key identifier:   03:5D:D4:FC:97:B1:8B:1E:A2:57:7F:64:EA:79:4E:BA:44:4D:A3:BF
Certificate issuer:       /CN=8f5b9b3a-f43d-4122-88ea-91f79a3b4136
Certificate serial:       010D0C9F43285849F9DFE00797377DBC6A39E1E0
Authority key identifier: AD:6A:0F:B1:AE:85:F7:6A:D8:21:0C:EB:07:C0:03:79:2B:B6:79:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136/547cc64e-9e9f-3ed2-ba03-cc3b4df93856.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     63023
IP address blocks:        23.190.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:e0:07:97:37:7d:bc:6a:39:e1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f5b9b3a-f43d-4122-88ea-91f79a3b4136
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=c29dcfb2-3aea-4cca-8a6c-bdd8ff916cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8a:34:08:29:39:42:7f:3a:e6:bd:a9:07:b9:
                    c9:ba:87:28:39:09:05:1f:12:9f:24:4a:4c:95:16:
                    b2:2f:52:ad:cc:86:6b:4c:2e:21:b4:5f:ae:c0:ca:
                    78:0f:9e:7c:f7:9e:b1:29:2a:a0:b9:b6:56:ff:7d:
                    77:ff:14:01:d2:a6:12:3d:d2:22:10:00:cd:ea:07:
                    a1:9d:dc:7e:1c:b4:b3:11:e5:05:ed:6e:38:67:cb:
                    82:f5:6d:44:11:68:9c:2d:2a:83:e8:dd:c8:c6:61:
                    97:25:07:9c:3e:64:2e:a2:92:6f:d3:ca:97:46:36:
                    86:86:15:b2:16:a8:ed:bf:06:1b:62:de:c6:1d:0e:
                    b0:59:a8:6b:8e:81:b6:7d:a5:ef:43:cc:a3:2b:99:
                    5a:fc:03:7e:e0:7b:4f:d5:f9:ee:31:fc:eb:a8:28:
                    98:94:3e:08:2d:ad:fb:0d:62:b7:82:88:35:6a:5f:
                    72:85:93:42:47:d8:c6:16:8a:0d:d5:62:d7:4d:f9:
                    63:66:3c:ce:b2:0b:0d:cc:79:8d:01:03:36:f7:c3:
                    2b:c6:37:51:42:8a:b8:5d:66:d9:4c:7f:0b:3e:6d:
                    62:45:43:bd:46:fc:17:b8:32:3f:42:93:23:00:ff:
                    56:92:66:30:51:ef:da:a8:55:61:0c:c3:3b:92:4c:
                    ca:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5D:D4:FC:97:B1:8B:1E:A2:57:7F:64:EA:79:4E:BA:44:4D:A3:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136/547cc64e-9e9f-3ed2-ba03-cc3b4df93856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.crl

            X509v3 Authority Key Identifier:
                keyid:AD:6A:0F:B1:AE:85:F7:6A:D8:21:0C:EB:07:C0:03:79:2B:B6:79:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:08:25:2d:fc:d7:2f:82:73:41:ea:9f:eb:ea:a7:34:12:7c:
         26:39:d1:8d:90:40:3a:03:5f:b6:56:79:23:5c:36:8a:0e:c2:
         17:d2:49:96:17:e8:5b:b3:3c:91:cc:2a:37:48:da:5d:bf:c6:
         d3:b9:ca:ef:cb:ec:e3:18:39:4d:72:43:55:01:86:ee:93:d7:
         85:d7:10:85:98:c4:25:c2:fc:c6:1c:2f:2b:24:63:f3:f3:06:
         37:bd:01:c0:53:9a:37:38:c8:99:63:a3:96:ab:0d:cd:83:e9:
         5c:74:2c:6f:bb:47:21:23:8b:08:17:0b:f4:1b:95:75:3a:8e:
         bb:b0:a4:d7:cf:04:e6:e9:4d:ac:a6:f2:75:aa:16:ad:c2:07:
         04:db:a2:c4:95:77:f4:cd:d8:0e:35:88:4f:d8:42:0b:d6:91:
         0e:b1:8e:28:d0:d0:52:62:b7:58:cb:29:99:26:2b:02:89:c9:
         1d:17:ad:8a:9d:c1:06:2e:63:1f:e9:8f:b6:4f:60:48:96:a9:
         cb:79:ed:16:a1:dd:4c:e4:5b:39:50:4a:5f:48:36:a3:bb:14:
         82:9a:09:1d:fe:cd:c6:be:57:12:88:7d:c8:aa:4d:e4:de:2f:
         d9:52:8a:e2:b0:54:82:74:49:fd:57:63:ec:ac:f6:f3:81:13:
         37:48:1f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:07:02 2025 by rpki-client