Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa
File:                     c00ef155-85c4-36fa-98b1-e12fe962553e.roa (raw, json)
Hash identifier:          sYiA6ZHkZXKSPBebAOm0JIG34XfrmjxmbH66KJjY1xE=
Subject key identifier:   E9:EF:F8:60:3D:5F:47:8B:30:DB:DE:D3:26:C9:E9:9E:CF:82:D3:A7
Certificate issuer:       /CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569
Certificate serial:       010D0C9F43285849849EF4EA31F5B8AD2DD685C0
Authority key identifier: D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     11611
IP address blocks:        23.158.112.0/24 maxlen: 24
                          2602:fd61::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:f4:ea:31:f5:b8:ad:2d:d6:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=ace3b2da-bd95-4dd3-9704-4e43ca5bf3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f3:f6:2b:da:9c:84:6d:26:50:1c:e0:1e:e0:
                    48:4f:64:13:ee:cd:f2:5d:98:d2:ad:f3:0d:86:0a:
                    28:c2:05:d6:c3:2f:d8:c7:20:4c:63:88:2e:82:3f:
                    77:a3:3e:a6:ea:33:b3:bd:f0:d1:46:05:ae:eb:f1:
                    a1:2b:91:22:03:08:7b:58:b0:92:51:1e:c8:f6:af:
                    60:ff:6f:10:64:8e:6e:5a:f3:9c:ac:73:09:b4:66:
                    81:5a:c8:1f:42:0d:ea:7a:76:46:51:4b:ae:23:b6:
                    2a:d3:b0:fe:04:25:ec:19:c9:3d:7f:67:9a:5f:b3:
                    5d:8b:13:15:e2:a7:c1:83:0b:b9:3e:ad:64:17:81:
                    ba:f5:25:ca:38:0c:9e:4c:05:3a:28:b2:18:cd:9a:
                    25:ba:42:82:c5:b9:be:b5:8f:15:10:13:bc:e3:8a:
                    74:ab:43:68:ed:39:02:0d:6b:cd:b9:7b:bf:7b:be:
                    56:7a:ce:c2:7c:6c:8e:d4:e7:7e:de:4a:54:c9:ec:
                    b7:65:2f:6f:77:43:c7:c5:91:80:8f:f3:e1:2c:40:
                    03:55:22:32:71:e3:8a:9f:34:a3:42:c4:6f:9e:97:
                    0d:a2:1f:01:6b:aa:d5:3b:2e:5c:fb:8c:d4:0a:78:
                    63:e3:aa:32:cc:10:ea:fa:dd:af:5f:35:64:78:70:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EF:F8:60:3D:5F:47:8B:30:DB:DE:D3:26:C9:E9:9E:CF:82:D3:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl

            X509v3 Authority Key Identifier:
                keyid:D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.112.0/24
                IPv6:
                  2602:fd61::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a0:eb:de:64:9c:e8:62:65:52:22:6a:49:3d:e5:1b:ed:35:
         08:3c:1c:e0:08:2a:9f:0e:90:4f:ad:19:3a:1b:c6:b7:11:4c:
         3e:8f:f0:27:d9:8a:4f:26:35:c5:cf:e8:e1:4a:33:8a:a4:9d:
         dc:e3:2d:03:da:4c:78:48:1c:15:84:fd:97:f8:92:f4:63:f9:
         e8:51:e0:e7:e6:48:fd:04:fe:e2:10:c0:af:81:fd:6e:36:4a:
         ae:6d:08:0e:89:22:05:24:1f:be:e0:de:db:ae:21:1c:27:f0:
         64:e6:f5:79:7d:1c:56:66:77:71:5a:db:27:e5:ec:d6:ef:ca:
         d6:67:3b:83:1a:a7:63:e7:1d:ad:18:c0:a8:fd:24:99:7b:4e:
         b9:72:29:5b:d3:cc:14:1e:3d:a4:23:e9:e5:6d:ee:0e:0b:dd:
         63:7b:d8:3d:61:68:c1:87:47:18:d3:40:1c:9d:01:65:48:68:
         00:3d:52:9c:38:ff:c0:f1:10:a0:57:0c:b0:67:9b:93:db:91:
         04:c5:32:cf:3e:b6:67:48:a0:1d:f5:86:2a:71:1c:c5:74:e0:
         c8:7e:00:33:bb:89:1f:5c:32:61:1f:de:19:29:f5:83:f6:14:
         06:57:78:c7:10:8f:10:2e:8c:c9:26:3e:8f:cf:5d:e6:86:ed:
         36:51:fb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:24:56 2025 by rpki-client