Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ed3dafb9-fe19-377d-80aa-0e2a9b479a36.roa
File:                     ed3dafb9-fe19-377d-80aa-0e2a9b479a36.roa (raw, json)
Hash identifier:          hPriVoLeVhSCv1BSusNzTaVzx1CAFRdycVa+hNmv2Po=
Subject key identifier:   09:E7:72:2D:48:27:6E:F6:74:D5:C6:E2:92:86:98:2F:EA:F1:A5:28
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584A331AEA189653FE2C87A72340
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ed3dafb9-fe19-377d-80aa-0e2a9b479a36.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     17045
IP address blocks:        23.153.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:ea:18:96:53:fe:2c:87:a7:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=9165ee90-5f17-44fd-9a44-1c7b834da470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:83:2c:8d:73:8c:14:fd:16:be:7a:27:e8:16:
                    bc:61:31:a3:59:39:8d:9b:38:6d:c4:43:c9:18:9b:
                    b7:7d:b3:7e:53:14:07:34:ff:55:2c:c3:f8:00:b6:
                    13:fb:ec:68:15:db:1b:66:27:4e:b7:08:83:8f:2e:
                    1d:50:db:cf:61:54:dc:9a:c5:95:58:51:18:39:d0:
                    b2:61:11:4e:b9:3c:d3:c5:24:a5:8b:d0:4a:a4:60:
                    6f:6e:ff:38:a2:49:7a:17:59:0a:84:c1:cb:50:b5:
                    74:7a:f4:0a:ba:19:82:0d:17:ec:e7:2c:b3:3b:1f:
                    18:27:85:c9:b1:db:5b:ce:fb:a0:18:9d:36:c9:84:
                    1b:78:71:f6:0a:1c:34:90:8b:ce:4b:51:64:d4:b0:
                    95:98:a6:27:56:cf:52:9a:9a:d3:bd:91:24:13:2a:
                    cd:5c:ae:25:2d:a5:99:5e:cf:43:43:ef:5e:22:d0:
                    e1:3f:28:ee:63:1c:1a:7f:34:5c:48:98:d9:17:74:
                    1f:46:a6:00:82:e8:6b:84:7d:76:1d:96:04:09:bb:
                    b7:c5:d8:4f:a5:82:5a:98:cc:4f:12:62:48:36:36:
                    11:e0:8d:99:2a:8c:df:81:b9:0c:ed:bd:69:44:34:
                    9f:15:47:47:a1:46:a2:16:63:8a:16:62:00:12:3f:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E7:72:2D:48:27:6E:F6:74:D5:C6:E2:92:86:98:2F:EA:F1:A5:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ed3dafb9-fe19-377d-80aa-0e2a9b479a36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:1b:c4:e2:97:8f:0f:28:2d:34:29:af:b0:c9:6f:02:41:e8:
         ae:ac:03:34:86:ad:3b:70:e7:9f:be:c7:bd:f6:66:c4:27:f0:
         fa:ce:41:e1:00:3b:56:dc:d3:b8:47:ec:60:1d:15:0b:41:61:
         e3:05:85:e6:1c:5a:e6:21:74:a8:ba:8c:f7:42:58:a5:5b:0c:
         62:07:4e:84:83:21:d3:ae:15:f0:51:0e:f9:7a:13:80:54:7d:
         91:19:a8:b0:f1:26:0c:57:0f:92:9a:df:9b:23:d5:84:90:6a:
         11:60:c8:55:95:d7:a4:7e:0a:fb:76:3d:0f:4d:8f:e2:c6:f2:
         e4:73:b3:7b:b8:e8:c5:55:56:83:6f:f8:df:92:e1:cd:66:e1:
         1a:84:3b:ff:5f:cd:6b:38:db:97:a0:27:55:9f:5c:72:da:6c:
         ec:a3:ea:93:81:e6:ce:70:a5:fc:92:e3:a6:a1:43:69:cd:f4:
         af:ca:6c:33:fe:19:cf:00:22:df:a9:9b:ac:92:47:cf:f7:b3:
         5f:68:da:dd:e8:cb:e8:29:bd:00:67:0f:c5:5a:f7:ad:34:e6:
         65:ae:33:0b:76:2c:18:40:97:c2:a1:fa:28:73:6c:ca:d4:ac:
         8e:c2:32:ac:7f:81:45:81:6e:85:61:82:1f:f2:eb:1d:e2:f5:
         db:14:83:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:45:09 2025 by rpki-client