Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/c9e260a3-4f16-354d-b555-1ee5c6db8fec.roa
File:                     c9e260a3-4f16-354d-b555-1ee5c6db8fec.roa (raw, json)
Hash identifier:          sylX2S/oE2zIydGMDDXcZ+MJwNMvuDs2r+ZMiIfyTlI=
Subject key identifier:   07:11:69:5C:8E:0E:01:74:28:26:B0:C1:70:83:07:99:61:1C:0A:6B
Certificate issuer:       /CN=344c647c-2bcf-4b84-a292-fe7e96b86354
Certificate serial:       010D0C9F43285849998F34EDBFFD4021B006FFC0
Authority key identifier: B6:11:09:F6:41:4B:57:A8:D7:2F:88:E1:72:4E:FE:DC:8A:AA:6B:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/c9e260a3-4f16-354d-b555-1ee5c6db8fec.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     23470
IP address blocks:        23.187.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:34:ed:bf:fd:40:21:b0:06:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344c647c-2bcf-4b84-a292-fe7e96b86354
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=a47df6f3-fad2-450d-9d67-0196cdbd6975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:24:18:f3:81:dc:a6:87:7a:56:59:36:59:
                    5e:da:db:eb:01:24:41:55:a9:d8:41:9e:4a:2f:b1:
                    8c:cc:48:67:1d:32:e1:cf:39:4e:0b:75:56:23:ea:
                    5e:05:d1:21:67:1c:51:42:87:92:97:83:70:41:71:
                    73:38:ae:b5:ad:09:35:a5:c4:ec:a9:bb:86:44:cf:
                    76:c8:27:db:d4:9c:b9:7a:a5:f4:3d:ec:3e:d7:ff:
                    3c:de:3d:90:72:21:21:18:2a:a4:98:82:27:25:b3:
                    a2:4a:10:43:07:c6:b9:8a:e1:05:82:f6:33:85:8f:
                    e5:b0:77:7a:a9:4a:e5:cc:83:f5:6d:2f:49:f3:96:
                    6d:c9:c9:d3:62:ea:c3:41:ba:f9:24:55:aa:6c:f1:
                    82:98:d3:d6:78:93:ae:11:01:59:a3:f0:04:51:d5:
                    d1:fe:81:96:64:4c:ed:71:31:b2:b2:71:01:66:bd:
                    4c:b6:c9:59:63:65:23:eb:27:15:b3:05:04:e9:44:
                    ae:ec:6c:e0:1c:a2:2f:bc:a9:49:17:e6:f0:e2:7e:
                    0c:04:2d:8c:cc:8f:f9:96:ca:8c:1e:6c:c3:2f:38:
                    3b:02:78:83:13:da:e2:d1:ec:a6:e9:43:8e:e2:c3:
                    90:31:7a:cf:9e:50:b6:bb:ed:0e:51:ef:e3:53:80:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:11:69:5C:8E:0E:01:74:28:26:B0:C1:70:83:07:99:61:1C:0A:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/c9e260a3-4f16-354d-b555-1ee5c6db8fec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.crl

            X509v3 Authority Key Identifier:
                keyid:B6:11:09:F6:41:4B:57:A8:D7:2F:88:E1:72:4E:FE:DC:8A:AA:6B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:62:e4:b5:e2:8c:bd:e6:17:cf:d0:16:94:ea:c8:27:cf:0a:
         9a:28:fe:3d:63:a3:b7:e3:8f:26:b8:44:c7:bc:3a:5c:fe:e3:
         2d:47:8d:88:35:48:78:23:66:dd:dc:da:c8:ea:5b:9b:b3:4c:
         4e:0c:02:4a:e6:36:66:ce:35:36:38:de:5f:2a:f8:dc:02:66:
         05:45:50:f2:ba:db:e4:f8:b2:c5:50:d9:e9:08:6b:1a:86:19:
         c7:53:74:8f:87:10:24:f8:c2:50:fd:e1:39:10:9c:d5:71:79:
         6c:a6:6e:87:94:42:11:f0:ab:a2:3b:3e:3f:3d:42:8a:dc:6e:
         25:79:fe:d4:7f:04:75:0d:ad:44:8c:f0:27:23:38:11:af:79:
         9f:8a:6a:f6:54:f3:d8:d9:ac:0d:c5:0e:7e:06:c7:95:fb:bf:
         45:0a:98:8c:d5:13:a0:07:78:d7:f0:a1:c2:70:7d:ea:b3:f1:
         3d:d1:90:1d:b0:d2:e9:31:6f:61:8f:9e:68:e1:a3:f1:50:85:
         df:9f:d4:5b:4b:b9:fe:c6:00:40:52:0f:df:02:25:42:fb:d4:
         e0:bf:34:56:4f:81:93:61:c5:9a:17:32:92:2a:a9:c1:a7:35:
         d1:5b:9f:f7:64:cc:97:8d:21:ac:d4:fc:7a:c2:d8:8c:52:36:
         e2:06:aa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:39:04 2025 by rpki-client