Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f5a37e10-4b3b-3cd4-bc50-665036e83a37.roa
File:                     f5a37e10-4b3b-3cd4-bc50-665036e83a37.roa (raw, json)
Hash identifier:          SiIlWhgR9qQA2YlQRz7wIqSBgnD/76IOOlV9bT3WHgU=
Subject key identifier:   9C:05:F2:D4:F7:5E:A3:FE:80:5C:4D:77:78:29:FB:CB:BC:86:70:87
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F43285849ABB48DD64D6CD0AAC9DA2B40
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f5a37e10-4b3b-3cd4-bc50-665036e83a37.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     396422
IP address blocks:        23.190.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:8d:d6:4d:6c:d0:aa:c9:da:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=42774a73-61e7-47de-86d2-f14e0c3e4727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:42:a4:9b:d5:c7:10:57:b7:f7:88:8a:6a:
                    5b:b8:41:8a:d7:b2:a2:ff:68:bd:95:6f:e6:0a:39:
                    57:46:6b:4d:06:ce:fe:4b:54:79:20:69:05:9e:be:
                    91:84:c2:76:2e:76:b8:9e:08:0b:83:2c:eb:2a:cf:
                    94:3f:4f:c8:34:a6:56:b4:6a:3a:88:16:07:16:85:
                    3e:87:ce:29:5f:33:96:d3:8a:f5:73:f4:11:fd:e1:
                    0e:21:7b:de:2a:8b:b9:ba:6f:46:0c:c9:26:f0:55:
                    0e:c4:76:14:c8:f0:81:e6:b3:df:a3:4a:97:80:69:
                    6a:90:e5:4f:7b:f6:d7:a8:a7:82:33:07:e6:80:53:
                    34:e3:04:ea:8c:85:37:93:f3:ae:06:78:88:53:d2:
                    93:76:e7:78:d5:97:a2:3c:b5:1e:c1:78:40:2c:3a:
                    09:2c:f8:22:29:f8:17:d6:4f:95:8c:fe:9e:88:bf:
                    bd:44:d0:50:f3:23:45:68:f6:38:04:94:95:36:ce:
                    06:1b:47:7d:9b:27:9d:0b:be:ef:f3:09:d0:7c:10:
                    9b:75:fb:a1:6a:e3:d8:d2:9c:48:ba:f6:b5:a0:cf:
                    78:92:04:8b:cc:cc:c2:d1:96:44:97:fa:03:da:79:
                    5d:71:df:87:5a:84:5f:95:cd:99:3c:aa:9c:1e:b3:
                    fa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:05:F2:D4:F7:5E:A3:FE:80:5C:4D:77:78:29:FB:CB:BC:86:70:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f5a37e10-4b3b-3cd4-bc50-665036e83a37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:7e:de:79:b1:60:4e:b1:20:12:d2:7e:6f:95:43:57:ae:f6:
         b4:7c:f3:34:80:71:ba:a3:7a:e3:59:d1:03:44:2b:83:66:04:
         b3:70:ab:d9:8f:00:4f:bc:35:7d:77:f5:ed:47:29:38:fa:ed:
         cf:71:55:01:e3:03:c4:b6:81:ef:76:29:78:bd:51:81:b0:e3:
         6c:69:c0:75:30:cc:1e:77:88:fa:8b:15:d1:6e:00:67:e0:fb:
         29:ce:72:4d:c9:65:0b:02:46:d5:aa:be:b3:0f:7f:a6:86:fe:
         41:38:9f:a5:0f:63:7d:43:4e:46:ad:fb:91:3a:08:8c:b8:f4:
         cf:e1:04:db:b9:cf:7b:92:31:3e:90:50:41:3c:6b:d2:bd:28:
         5d:5f:8c:34:b6:fb:79:d5:0c:17:41:20:b6:a3:ec:ec:44:f5:
         fe:d0:4a:a9:ad:ea:71:3c:a7:69:f2:ec:e6:55:19:c8:e9:95:
         01:34:aa:37:ec:d9:4a:11:f6:85:55:0f:a8:ce:44:87:60:ee:
         3b:aa:dc:5d:0b:a0:8f:72:b8:90:be:f1:b8:f9:dd:8f:64:18:
         10:ef:f4:b7:77:6a:cb:d0:57:71:93:ad:38:d5:7f:1f:08:c3:
         5f:5c:eb:84:03:bb:8b:37:39:5e:78:43:c1:45:a3:66:28:bc:
         a2:5c:43:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:14:10 2025 by rpki-client