Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/98674deb-9ae9-3698-b3b1-a3d22f06d2f5.roa
File:                     98674deb-9ae9-3698-b3b1-a3d22f06d2f5.roa (raw, json)
Hash identifier:          I4JHMj5Tv3H1kGJGdJSRiYu5ZEPGJp3X6J3/ZqLdCaA=
Subject key identifier:   32:B0:57:C0:EE:31:C5:55:2D:3F:C8:62:85:35:03:6B:93:5D:58:19
Certificate issuer:       /CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d
Certificate serial:       010D0C9F43285849D1650CF65D0895D877198AB0
Authority key identifier: CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/98674deb-9ae9-3698-b3b1-a3d22f06d2f5.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     394532
IP address blocks:        23.146.96.0/24 maxlen: 24
                          2602:fe4d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:0c:f6:5d:08:95:d8:77:19:8a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=b57bebde-ebb9-40de-a5bc-8d828161d5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:c0:66:a9:3d:c5:98:87:19:65:13:37:c0:
                    85:e5:92:97:d8:32:95:4b:50:1f:74:00:65:d7:f5:
                    0c:f9:b7:c6:41:9c:ce:0d:e2:5a:0b:e6:90:aa:37:
                    0e:68:14:f9:25:08:21:41:e3:95:42:bd:df:0f:a4:
                    97:64:8b:7c:66:cb:1b:95:47:12:34:08:d1:87:44:
                    97:a4:54:5f:d4:3a:2c:41:d8:91:5c:89:e5:b3:df:
                    91:80:1a:66:9e:5b:79:a4:2e:ed:70:f7:19:ff:5b:
                    6a:ad:d1:00:b6:3b:7f:4e:00:aa:56:cb:ad:d0:fb:
                    1e:0a:d9:cd:24:8d:6a:c3:7c:65:ef:04:6b:3a:c7:
                    32:8d:f9:c9:d4:f6:51:50:1e:55:58:ca:5b:a3:67:
                    56:49:c7:fa:82:81:ee:7b:dd:79:32:25:11:f5:b7:
                    46:fa:0f:d8:cc:6f:a9:fe:57:a3:17:c0:08:37:1e:
                    92:cf:10:42:7e:75:be:2b:bf:6b:b2:7b:42:8c:b7:
                    3c:22:fe:3c:fb:e7:e5:c1:d9:68:c6:dc:61:1b:4a:
                    e6:3c:9a:6d:47:f7:1c:d4:1a:aa:1e:ae:85:01:dd:
                    dc:39:18:6d:1c:97:1d:7b:73:c3:18:cb:09:2d:73:
                    02:1f:45:51:53:d1:0e:3a:0f:39:46:a5:7d:94:4b:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B0:57:C0:EE:31:C5:55:2D:3F:C8:62:85:35:03:6B:93:5D:58:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/98674deb-9ae9-3698-b3b1-a3d22f06d2f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl

            X509v3 Authority Key Identifier:
                keyid:CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.96.0/24
                IPv6:
                  2602:fe4d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:47:3d:34:ab:93:1b:e1:b5:82:27:1a:ce:bb:d9:ae:44:b8:
         97:9b:eb:7c:67:c4:60:db:d7:22:46:27:89:42:f7:aa:2a:d8:
         05:2e:aa:50:8e:e0:d9:ff:4d:66:51:26:5c:74:28:57:e4:a4:
         bb:ef:b3:d6:d0:e2:6f:41:16:a0:5a:f4:68:3b:73:3f:ff:87:
         a8:9f:e4:b1:51:5a:96:f2:31:e1:18:bb:3c:3b:3a:16:f5:d4:
         2d:74:dc:92:0f:d2:91:aa:46:1c:66:9e:3b:b9:d4:8e:de:a2:
         0b:09:c5:aa:ba:79:2b:62:9d:c3:f0:bf:d7:de:67:ad:9f:7d:
         a5:e3:0c:71:b3:b0:ec:02:85:7a:ae:00:2f:4d:65:8c:36:28:
         bd:4f:c3:d3:1c:f4:80:76:e6:05:cd:29:60:41:0f:84:01:13:
         fd:1a:24:05:8e:33:78:c6:99:a0:f7:02:dd:20:42:94:4a:d7:
         80:13:e0:1c:3b:0e:cb:9d:e3:d2:8f:b2:41:89:9a:12:e1:c3:
         56:83:08:89:f1:13:b1:9a:54:08:73:22:aa:cc:9c:73:18:53:
         4f:14:b2:96:89:60:bd:44:9b:30:3c:e3:55:c4:0e:1f:17:c1:
         aa:ed:06:7d:de:9d:22:fa:bd:ab:94:60:19:c8:65:f4:54:7f:
         ad:e4:80:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:05:19 2025 by rpki-client