Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ca382ae-20b1-367d-bdaf-2d232275981d.roa
File:                     1ca382ae-20b1-367d-bdaf-2d232275981d.roa (raw, json)
Hash identifier:          jLF3LKGlV5PKT+93v8KXzDv4N0yaoQhiALlMfTlvELA=
Subject key identifier:   B4:8F:F4:B6:87:5D:B4:FC:63:55:D6:CA:97:7A:C0:57:24:EE:DA:03
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858499AF4979C544CFF2AD2A1B0E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ca382ae-20b1-367d-bdaf-2d232275981d.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     20940
IP address blocks:        23.213.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:97:9c:54:4c:ff:2a:d2:a1:b0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=c068786a-8cf8-4cc6-a56c-177208181255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a3:a4:51:bf:70:c0:4c:3d:4e:80:f7:48:2f:
                    f7:19:1d:14:d7:2d:d6:58:a2:17:f5:c7:5f:55:d6:
                    65:1e:01:47:06:7a:fc:1d:3a:e4:95:1e:21:22:9f:
                    6e:61:e4:b9:64:cd:43:e8:20:58:61:2e:f9:38:b7:
                    bf:c3:9f:8e:91:0a:fe:1c:d7:1f:a2:98:48:85:dd:
                    08:4b:dd:af:18:4a:7c:fb:a1:5f:7c:9c:d9:63:12:
                    3f:26:af:26:16:42:03:8b:d4:25:b8:8a:c0:62:48:
                    e0:fe:36:37:2d:b7:17:0a:ca:a9:91:45:3a:98:d2:
                    f7:80:52:6d:00:cd:7b:6c:f5:54:8f:aa:df:7a:fc:
                    16:8d:ac:fa:fb:26:c9:06:2c:52:b7:1c:3a:dd:83:
                    ab:cb:3c:9e:76:6a:6e:05:b7:1b:d2:31:02:61:fa:
                    d1:99:35:e4:50:f7:00:b0:84:4d:e7:c3:0a:1f:dc:
                    35:2a:29:83:3f:a2:af:75:e6:a4:13:a0:af:fe:3f:
                    51:e4:24:e8:fb:e2:e5:14:3b:22:32:9d:97:54:e2:
                    9d:64:91:e0:c8:a8:ea:81:6a:d9:45:3a:82:8e:5b:
                    a4:74:09:3c:38:4c:04:82:e2:b4:2d:89:c6:44:20:
                    e2:f5:fb:33:27:88:2c:7f:dc:40:7c:b6:13:2a:66:
                    b3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8F:F4:B6:87:5D:B4:FC:63:55:D6:CA:97:7A:C0:57:24:EE:DA:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ca382ae-20b1-367d-bdaf-2d232275981d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:bb:c1:b0:0d:bf:f9:05:fc:b3:4e:3e:a3:3b:87:7a:62:7d:
         2a:b7:8c:41:82:64:d5:a2:e9:7f:7e:f3:1a:ae:3b:2b:d6:98:
         16:9a:3d:63:b2:6f:31:28:1c:2f:ab:77:ae:dc:52:26:4e:29:
         39:11:7a:39:f2:1d:54:83:d2:5f:78:95:b3:44:7d:f9:79:9e:
         7a:da:8f:8f:5c:60:0b:43:28:c6:73:54:4c:c8:1c:6d:6d:56:
         fc:77:1a:c0:9e:73:38:9e:25:a0:01:c6:9a:d8:51:de:a2:27:
         c3:75:af:0c:0b:0c:d9:e5:13:50:c5:01:f3:c7:fd:74:43:d9:
         eb:ce:88:8b:fd:01:d1:ae:11:63:ba:6a:8c:5c:ed:93:fd:43:
         5b:7d:92:3f:9e:47:27:89:05:7e:26:1e:9b:55:76:65:3c:44:
         f6:7a:f6:9c:c9:ef:44:b7:87:aa:2b:62:a3:e4:1f:0d:aa:b9:
         41:c8:33:23:2e:09:bf:a7:7b:92:4b:d5:ce:1b:d5:2d:da:b7:
         4b:d8:f4:a4:f3:89:e6:7a:08:ba:08:d7:00:e7:2e:ab:50:f9:
         b8:48:58:d0:3c:b3:d7:0e:b8:fd:4d:bd:15:14:fe:24:a8:ff:
         7f:ec:bd:91:ba:56:8f:1c:c8:b1:c6:66:fb:9c:90:68:58:ab:
         97:27:8a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:04:00 2025 by rpki-client