Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/65230665-6876-326b-b45b-705bc994a466.roa
File:                     65230665-6876-326b-b45b-705bc994a466.roa (raw, json)
Hash identifier:          AoEbBv29v69R68kj0RUVwGt+LaboCxFoaojpCmiaPSA=
Subject key identifier:   56:E1:E9:B0:88:9E:79:29:CC:2B:BC:27:B9:48:CD:9D:D8:6F:EA:5B
Certificate issuer:       /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial:       010D0C9F43285849CA6A11C6039C3C558B150740
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/65230665-6876-326b-b45b-705bc994a466.roa
Signing time:             Fri 09 May 2025 01:00:47 +0000
ROA not before:           Fri 09 May 2025 01:00:47 +0000
ROA not after:            Thu 07 Aug 2025 01:00:47 +0000
asID:                     213684
IP address blocks:        128.254.226.0/23 maxlen: 23
                          2602:fbec:226::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ca:6a:11:c6:03:9c:3c:55:8b:15:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
        Validity
            Not Before: May  9 01:00:47 2025 GMT
            Not After : Aug  7 01:00:47 2025 GMT
        Subject: CN=0ab5283a-2d6e-4220-a0cc-8c2a1c6b1e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:12:58:e3:1b:18:bd:18:b0:e2:e3:9a:7c:f6:
                    9a:42:d0:66:e7:da:9c:5a:4c:f8:32:68:ff:69:2d:
                    9c:ad:9f:d1:a9:fe:72:5a:72:81:a8:24:0f:e5:0e:
                    b2:80:15:e5:1c:c4:2e:a0:b5:fd:ee:a0:07:f5:1b:
                    d9:b6:f2:e6:03:97:e8:c3:57:7c:d7:d1:17:e6:36:
                    ae:08:5b:cb:f5:87:b5:84:76:f5:ab:8b:44:6a:d9:
                    45:5b:b8:57:e2:cc:9d:13:6c:86:dd:8e:8d:7b:c2:
                    8a:41:c9:8f:f1:c3:5f:7c:9e:f2:cc:50:11:c1:57:
                    fb:3e:69:fb:90:78:e3:8e:fb:cd:dd:ef:e5:66:53:
                    2d:39:f3:d3:a7:8f:1e:31:1b:4e:bc:05:57:f1:88:
                    54:8d:70:ae:df:1e:5e:4a:df:26:9e:2b:ff:aa:26:
                    74:96:80:83:5d:4e:6d:cd:70:71:9f:78:c2:77:61:
                    e0:c0:a7:a0:87:ce:17:13:d1:df:07:8e:8f:dc:54:
                    fa:68:a3:46:c7:64:62:c1:d3:bd:d9:f2:61:5d:03:
                    b5:b0:26:89:17:38:dc:ea:fc:fb:29:c4:84:01:78:
                    72:29:b1:42:8b:a0:f4:14:32:86:1f:56:24:17:42:
                    7b:a8:0c:72:bb:e2:8c:c7:6d:94:00:11:c5:f8:3a:
                    41:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E1:E9:B0:88:9E:79:29:CC:2B:BC:27:B9:48:CD:9D:D8:6F:EA:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/65230665-6876-326b-b45b-705bc994a466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl

            X509v3 Authority Key Identifier:
                keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.226.0/23
                IPv6:
                  2602:fbec:226::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d2:7e:a9:3f:e9:69:c8:97:03:88:bc:43:52:94:42:3d:f6:
         d2:4f:a6:0b:9a:5d:4a:6c:2e:0d:09:38:ab:a7:e5:60:b7:3b:
         89:0b:0e:32:ad:06:e9:82:ed:dd:5f:d7:d2:48:9a:62:f1:e8:
         5d:5e:89:28:f4:dc:45:d3:78:0b:69:33:c6:76:6d:c1:03:6d:
         ae:ab:47:7e:a9:ff:96:ae:5e:72:95:5e:db:3a:60:9a:8e:fe:
         0f:3a:1a:ef:cb:b3:37:4a:7e:64:9f:54:1e:57:1d:9d:54:ab:
         1c:7d:22:74:ca:b5:d4:0a:2c:7d:c4:42:ea:1e:63:f7:83:80:
         3f:72:f5:d1:8e:69:13:15:9b:48:3c:79:89:de:45:f4:a5:fc:
         1c:9f:1b:fe:4a:b1:d0:aa:24:b1:f9:75:0f:62:47:da:cd:97:
         13:cf:d5:b6:5b:ec:54:0e:d8:b4:56:8f:1d:d7:a3:8c:eb:28:
         c8:f8:ce:9d:24:be:7f:74:2f:b3:fa:9f:a1:c9:0b:fb:40:78:
         4e:77:57:b4:10:d0:4a:3d:c0:db:7a:f1:de:a9:b6:8d:88:ea:
         f9:2c:d3:3e:68:8e:89:94:cd:e2:0f:3f:a9:09:17:9d:85:0a:
         b6:72:2f:63:f5:67:53:db:af:93:e1:ab:2a:6b:42:0c:95:2a:
         3b:ff:f8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:47:30 2025 by rpki-client