Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/50306751-11fe-35d4-a81d-4a58fc0ec16c.roa
File:                     50306751-11fe-35d4-a81d-4a58fc0ec16c.roa (raw, json)
Hash identifier:          eZHcyZkabW9I8bYaXpORUUpgKpzSE7IOE7g0c30dT0M=
Subject key identifier:   81:74:BE:CA:4D:FA:D8:09:62:A7:A7:CD:28:E5:D1:AA:B7:C0:98:28
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F43285849B14A09A5819B77A4908FD108
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/50306751-11fe-35d4-a81d-4a58fc0ec16c.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     23428
IP address blocks:        23.147.72.0/24 maxlen: 24
                          2602:fb68:140::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:09:a5:81:9b:77:a4:90:8f:d1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=0ace898b-b72c-4a41-af4a-e9c18af3e27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:68:db:d1:f9:14:cb:07:7f:3b:e8:5e:56:56:
                    11:f0:47:3b:96:0e:ff:3e:b4:40:5f:96:4c:32:14:
                    ce:d6:8c:c8:ab:5e:2d:a9:4e:d9:ed:24:d0:bd:73:
                    3a:cb:9c:77:c0:4b:00:16:a2:a3:04:28:8b:97:74:
                    e4:10:b2:a3:50:72:b7:7a:c6:d8:37:36:9e:5e:50:
                    43:24:a1:91:08:96:e2:9e:0d:c2:4a:11:45:8e:2b:
                    e9:87:6c:09:77:07:16:71:e1:62:7d:bf:ff:09:58:
                    d6:5e:24:c2:df:6e:91:65:2f:a1:0d:f5:a9:76:fd:
                    97:56:ef:0a:1d:57:67:57:3b:d9:50:fd:7c:46:83:
                    6b:9d:59:e0:a8:16:08:b7:a7:3f:16:2f:57:84:3c:
                    e3:a0:12:1f:40:4b:2f:8d:87:c0:04:92:bb:38:2b:
                    d1:2e:58:bf:48:c7:c2:34:f3:c9:25:94:df:6b:f9:
                    67:fb:d7:55:89:f2:da:37:f1:83:33:a4:a9:f3:1c:
                    7e:a1:9c:e2:f2:0d:fa:f5:02:c8:8c:c5:51:b3:54:
                    dc:f5:29:1c:03:f9:ab:c3:f3:2f:4e:4f:af:13:ad:
                    84:53:bb:5e:15:f6:b4:e3:76:09:b9:ea:2f:6b:e7:
                    ec:5f:60:7e:69:ee:ca:6b:35:16:3d:96:df:c6:f3:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:74:BE:CA:4D:FA:D8:09:62:A7:A7:CD:28:E5:D1:AA:B7:C0:98:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/50306751-11fe-35d4-a81d-4a58fc0ec16c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.72.0/24
                IPv6:
                  2602:fb68:140::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ab:18:3f:39:91:d9:61:1d:ed:a4:64:a8:c4:ec:6e:be:1f:
         c8:1a:c0:43:52:fa:2d:81:17:7e:32:46:fc:41:3f:6e:44:e8:
         0b:8d:93:f9:45:5f:e7:aa:e4:b7:2a:b0:d8:a9:0a:34:00:39:
         cc:8b:49:f4:aa:22:9b:d7:de:be:d9:cb:77:0a:82:ff:0e:b9:
         33:59:95:5e:db:95:65:63:93:f9:1e:f5:fe:20:96:28:3f:44:
         c4:1e:f4:4a:12:f6:09:98:2d:2a:9c:7c:f2:4c:7c:a6:ef:47:
         9b:fd:5e:10:3f:87:b3:76:2e:6d:e3:76:cd:d6:9a:8e:18:47:
         bf:b9:8c:f7:60:1b:4e:f5:4d:da:01:dc:d6:f9:23:c2:c2:7e:
         6f:b4:91:13:78:ef:66:68:d3:d9:b6:e9:9a:81:12:1e:fe:ff:
         dc:33:c9:9e:69:9a:13:3c:42:ba:f9:cd:a3:21:f7:22:5f:47:
         50:c1:0b:09:d9:db:36:fb:97:dc:86:0e:3e:7a:39:8a:0e:e2:
         e9:be:85:48:57:f2:df:11:64:21:5c:25:a2:0f:cb:b5:6b:ac:
         19:e9:2c:a3:6d:b2:1f:d4:92:76:3b:c6:94:42:ca:9d:b5:95:
         f4:a7:5b:63:d4:b9:1a:f9:bb:d8:48:08:4d:d9:90:2a:f9:86:
         24:76:89:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:00:42 2025 by rpki-client