Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93753507-8452-4ab9-aff2-37428e87a308/3b2f1cc4-dcf5-3c11-bf1d-e9cee2a9ddb2.roa
File:                     3b2f1cc4-dcf5-3c11-bf1d-e9cee2a9ddb2.roa (raw, json)
Hash identifier:          T19xu+f5mBCnUcaByNAOUc/p3MUBmLCLq2SP1hU1Q18=
Subject key identifier:   98:89:D7:51:EC:0B:DF:26:4A:26:B8:1C:0F:30:80:41:2F:F5:70:3F
Certificate issuer:       /CN=93753507-8452-4ab9-aff2-37428e87a308
Certificate serial:       010D0C9F43285849E38A369312EEA8315F7FCCB8
Authority key identifier: FB:07:9A:FD:8B:79:5F:27:DD:F4:27:28:DA:26:CC:EE:66:D3:02:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93753507-8452-4ab9-aff2-37428e87a308.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93753507-8452-4ab9-aff2-37428e87a308/3b2f1cc4-dcf5-3c11-bf1d-e9cee2a9ddb2.roa
Signing time:             Sun 18 May 2025 01:00:47 +0000
ROA not before:           Sun 18 May 2025 01:00:47 +0000
ROA not after:            Sat 16 Aug 2025 01:00:47 +0000
asID:                     2914
IP address blocks:        23.133.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93753507-8452-4ab9-aff2-37428e87a308/93753507-8452-4ab9-aff2-37428e87a308.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93753507-8452-4ab9-aff2-37428e87a308/93753507-8452-4ab9-aff2-37428e87a308.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93753507-8452-4ab9-aff2-37428e87a308.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e3:8a:36:93:12:ee:a8:31:5f:7f:cc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93753507-8452-4ab9-aff2-37428e87a308
        Validity
            Not Before: May 18 01:00:47 2025 GMT
            Not After : Aug 16 01:00:47 2025 GMT
        Subject: CN=d341410f-fdbf-46a0-a5c6-c3cd52de1e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:48:0b:59:e6:8a:3d:ba:84:25:28:96:2e:1e:
                    94:ad:e5:b9:67:fd:cf:b7:3b:ce:e5:b6:f2:7f:b7:
                    a3:a1:e8:a5:f2:0b:58:5b:72:c9:04:a6:ce:2d:1a:
                    88:3d:93:e2:5a:04:9d:a5:9d:e8:00:3e:a4:79:65:
                    1f:a0:e8:5e:61:17:6d:5e:bb:f5:ad:eb:24:b6:fa:
                    79:39:2f:4e:e2:05:45:85:1b:cc:ba:5b:10:95:3e:
                    15:07:ef:de:06:2c:65:a1:1c:ab:9a:fd:3c:cd:92:
                    fe:55:2c:65:a8:58:e2:90:0d:73:08:4e:a9:56:92:
                    bb:47:91:79:a4:6c:73:8b:a5:54:82:b7:bb:a3:7b:
                    0f:e1:33:f2:76:60:64:93:22:65:b3:21:eb:d4:a8:
                    57:6c:ef:eb:9b:2a:37:84:3b:50:9a:16:df:1e:7f:
                    8d:ba:c3:cc:0b:44:7c:bc:d2:55:41:2f:65:60:ee:
                    45:72:92:5c:88:0d:6f:7f:08:b8:cb:ab:32:75:26:
                    11:b6:c2:84:37:56:a8:d9:2b:4c:dc:2d:67:a4:8e:
                    29:e2:dd:4b:f6:ce:b1:fe:7b:1c:c6:63:f0:e3:a7:
                    27:c3:a6:88:43:2b:fa:3f:1c:39:16:31:62:d9:48:
                    45:61:bc:32:0e:e4:da:20:21:f1:be:9d:0c:c1:77:
                    63:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:89:D7:51:EC:0B:DF:26:4A:26:B8:1C:0F:30:80:41:2F:F5:70:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93753507-8452-4ab9-aff2-37428e87a308/3b2f1cc4-dcf5-3c11-bf1d-e9cee2a9ddb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93753507-8452-4ab9-aff2-37428e87a308/93753507-8452-4ab9-aff2-37428e87a308.crl

            X509v3 Authority Key Identifier:
                keyid:FB:07:9A:FD:8B:79:5F:27:DD:F4:27:28:DA:26:CC:EE:66:D3:02:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/93753507-8452-4ab9-aff2-37428e87a308.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:16:06:d0:9b:a4:2c:05:5c:06:88:26:91:a7:42:b5:73:bc:
         c2:75:8f:11:4e:b5:77:7b:6a:1a:ab:0a:4c:4b:3d:14:bd:47:
         fe:47:27:14:60:9b:48:e0:af:8b:66:b4:51:cf:75:37:fe:2b:
         e5:11:e2:40:cc:fd:2c:47:85:23:d3:33:7f:31:f6:3f:0c:d4:
         d0:f9:45:25:84:0b:9c:c0:6c:ec:be:2c:1f:e1:4a:9e:e7:81:
         19:03:30:3e:80:2c:5a:9b:c7:1f:a4:34:af:3f:c2:62:80:20:
         f6:b6:7c:84:d2:e8:b9:53:85:f2:6e:f6:87:66:81:f0:ef:68:
         37:ef:bf:14:46:c5:f8:17:1c:6b:e6:6d:35:08:7f:65:68:e0:
         f0:5d:9c:50:87:06:92:47:95:1f:53:1a:cf:23:c8:b0:f1:b0:
         c3:d8:9e:df:f5:bb:ef:67:6c:ee:a2:ce:e5:1b:08:04:18:a2:
         6d:19:d0:68:1a:c0:15:38:35:ea:2c:9e:e3:79:39:2b:02:2c:
         1f:01:c7:ce:b5:15:33:61:df:bd:81:42:f2:91:ec:de:43:68:
         a1:8b:44:3d:6d:68:cf:b4:0e:e3:54:f0:d4:99:ed:d2:b2:c3:
         f4:53:8f:9e:df:bc:e7:0e:ff:89:6c:4f:cc:50:8c:91:4d:0f:
         c6:a6:a4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:35:31 2025 by rpki-client