Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/23a1fdb7-56d6-3ce0-bcb9-02592f49ec9b.roa
File:                     23a1fdb7-56d6-3ce0-bcb9-02592f49ec9b.roa (raw, json)
Hash identifier:          HITO1pAt8TO0q6pOBtU9DZX2hu7m/Zrl8e07KOsB15E=
Subject key identifier:   ED:51:A5:B5:8B:14:8C:B0:85:12:FD:92:2B:99:6E:DD:EA:9B:E3:AB
Certificate issuer:       /CN=027c3693-f63b-4f3e-b9ec-ab08979ee1de
Certificate serial:       010D0C9F43285849CCE4B147455F73EBEA0A9F00
Authority key identifier: B4:7B:5B:C6:E5:ED:28:DC:E6:69:95:3D:60:A7:3C:4E:36:BC:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/23a1fdb7-56d6-3ce0-bcb9-02592f49ec9b.roa
Signing time:             Fri 09 May 2025 22:19:31 +0000
ROA not before:           Fri 09 May 2025 22:19:31 +0000
ROA not after:            Thu 07 Aug 2025 22:19:31 +0000
asID:                     55285
IP address blocks:        115.42.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/027c3693-f63b-4f3e-b9ec-ab08979ee1de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/027c3693-f63b-4f3e-b9ec-ab08979ee1de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cc:e4:b1:47:45:5f:73:eb:ea:0a:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027c3693-f63b-4f3e-b9ec-ab08979ee1de
        Validity
            Not Before: May  9 22:19:31 2025 GMT
            Not After : Aug  7 22:19:31 2025 GMT
        Subject: CN=9278f41d-e6e6-4122-b330-b6924259726f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:aa:40:b3:c5:c1:b6:76:c0:de:9c:c5:98:0f:
                    68:21:2a:ce:8f:79:ba:43:bb:5f:b4:63:a3:c9:b6:
                    59:94:7f:5f:ce:24:d1:27:4e:98:b4:e0:28:1b:cb:
                    66:bc:8d:47:fd:d5:d5:c8:c2:f5:0c:71:20:ad:96:
                    39:27:82:4d:16:fe:b2:40:69:c3:f4:8b:3d:18:f8:
                    5f:97:b6:92:f0:57:b6:25:8e:98:eb:03:2f:f4:1a:
                    09:bc:d0:ba:09:a5:d4:0f:81:88:1a:8c:f4:c3:a2:
                    70:b8:2f:1e:0a:6c:be:b8:9c:dd:56:a6:ee:eb:7b:
                    fd:4f:d2:2c:28:aa:1a:a0:4b:7f:1d:69:e4:f5:ac:
                    55:39:83:9c:0c:cf:88:0c:2d:14:1e:f8:31:c9:46:
                    df:56:8f:93:e5:c3:20:7b:ec:e0:84:53:b7:99:ef:
                    dc:93:ca:10:e8:d3:99:ea:6e:0c:bc:4f:70:e6:8b:
                    5c:9a:8a:21:50:ad:44:59:c3:ff:c3:c3:29:1d:65:
                    37:75:c7:37:25:1f:cc:25:c4:20:67:99:c1:9d:8b:
                    dc:84:4e:50:62:e4:e0:b2:35:cb:d0:46:8c:a6:b5:
                    67:e8:b0:c7:5e:4e:99:ad:f8:7b:07:33:be:45:b5:
                    73:9b:4d:e7:c8:2e:ba:b0:d5:14:68:b4:28:4c:37:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:51:A5:B5:8B:14:8C:B0:85:12:FD:92:2B:99:6E:DD:EA:9B:E3:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/23a1fdb7-56d6-3ce0-bcb9-02592f49ec9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/027c3693-f63b-4f3e-b9ec-ab08979ee1de.crl

            X509v3 Authority Key Identifier:
                keyid:B4:7B:5B:C6:E5:ED:28:DC:E6:69:95:3D:60:A7:3C:4E:36:BC:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.42.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c6:ba:1e:38:05:c8:29:00:2a:48:45:ae:af:40:47:32:78:
         9f:d5:35:00:0a:e3:6e:b1:f5:7e:f9:01:15:60:17:22:d4:b0:
         57:2e:00:fa:38:1c:c1:dc:c9:bc:e8:7c:be:93:dd:7d:25:ea:
         ca:b1:b4:90:64:9a:71:d4:aa:a6:60:79:31:5a:dc:7e:57:5c:
         45:5b:81:7f:5e:95:29:be:e5:33:3f:f8:4a:05:62:2f:1a:c4:
         ba:4e:3e:57:b9:1c:59:d6:8a:9d:f8:2c:92:99:35:a7:36:5e:
         ce:e9:1f:14:ec:cc:0f:6c:65:68:0e:d2:e0:0e:83:97:df:a0:
         6e:bb:cc:77:37:c7:78:4f:28:8a:61:2e:23:76:e7:91:42:b1:
         a1:84:46:3a:13:33:2f:9e:c4:5d:6f:b6:24:a9:15:0a:d7:d6:
         8c:6a:98:6c:7e:74:89:ae:1e:ce:bc:36:c3:f6:17:5d:3f:19:
         eb:58:17:4c:22:d1:5a:52:c6:e9:08:f6:01:6e:10:79:5b:5d:
         f6:2b:aa:02:f3:2a:af:00:68:21:4b:cf:7a:bf:58:c8:5d:3e:
         90:6a:f1:be:82:aa:2d:5d:7d:6a:60:45:1c:35:ea:0a:99:af:
         11:e4:a6:eb:ce:36:dd:f3:e7:42:28:f9:8a:77:5b:24:bb:6e:
         4d:2b:77:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:44:34 2025 by rpki-client