Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4/3bc7e763-1e26-314c-ac7a-edd9ab8e21dd.roa
File:                     3bc7e763-1e26-314c-ac7a-edd9ab8e21dd.roa (raw, json)
Hash identifier:          6zmQLzKcSzvI0nIgh9MuFzb6eixRPQALvZS093XBJQ0=
Subject key identifier:   6A:C6:DE:04:F3:12:FB:64:26:3C:FB:30:2B:10:17:BB:E4:23:78:E9
Certificate issuer:       /CN=5e82123a-01c9-459b-ba48-23e5cdf5e7a4
Certificate serial:       010D0C9F43285849C79F67ACF6DAA00D1082AD00
Authority key identifier: E2:2B:2C:05:67:46:19:AC:9A:DD:7B:23:1A:06:D6:5E:35:BB:8A:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4/3bc7e763-1e26-314c-ac7a-edd9ab8e21dd.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     7029
IP address blocks:        23.188.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4/5e82123a-01c9-459b-ba48-23e5cdf5e7a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4/5e82123a-01c9-459b-ba48-23e5cdf5e7a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:67:ac:f6:da:a0:0d:10:82:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e82123a-01c9-459b-ba48-23e5cdf5e7a4
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=32516365-34f2-4fd1-8e2f-82ea12d61720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7e:a6:ca:01:d6:70:29:53:39:e0:36:a9:56:
                    39:70:9e:99:c7:ea:32:8a:c2:fa:d2:70:a8:73:fb:
                    7e:05:4f:50:59:a3:0f:a2:54:84:76:b3:3a:64:3b:
                    0d:83:5c:71:99:f7:08:fc:ff:e5:53:63:9d:49:c6:
                    c5:24:fb:6a:19:a6:70:2b:fe:1e:2a:f5:0b:2b:54:
                    8b:94:30:56:3b:de:37:0b:da:cc:bb:2d:d2:e2:e8:
                    9c:6a:c9:4f:39:56:9d:4d:be:a3:c4:1e:22:4e:9f:
                    2b:55:a1:a4:d9:68:5b:9c:12:12:00:e0:90:b2:2b:
                    41:5f:ba:d1:d4:b2:cb:93:e2:fa:6b:72:8c:47:2d:
                    5c:58:11:08:18:a1:30:b7:86:e6:12:b1:23:ac:18:
                    99:fc:e5:02:38:95:41:fd:69:0a:2d:0d:c0:37:f7:
                    ce:1e:36:b0:72:cd:7b:fa:d5:b2:03:34:b4:6b:28:
                    95:2e:7f:ed:6d:24:f1:7e:af:6c:39:2c:75:0d:a3:
                    a1:c1:ef:fc:04:6e:81:87:5a:bd:c7:c1:6d:8d:79:
                    3c:ae:84:23:28:a0:d8:42:05:6f:ae:62:98:7b:ec:
                    81:ca:a6:c8:ea:58:25:18:7c:36:e4:41:57:75:26:
                    a7:c1:97:7b:c1:6f:58:99:88:09:95:99:57:6a:cd:
                    24:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C6:DE:04:F3:12:FB:64:26:3C:FB:30:2B:10:17:BB:E4:23:78:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4/3bc7e763-1e26-314c-ac7a-edd9ab8e21dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4/5e82123a-01c9-459b-ba48-23e5cdf5e7a4.crl

            X509v3 Authority Key Identifier:
                keyid:E2:2B:2C:05:67:46:19:AC:9A:DD:7B:23:1A:06:D6:5E:35:BB:8A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e82123a-01c9-459b-ba48-23e5cdf5e7a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:79:d1:38:3a:68:8b:14:57:33:c9:a5:a7:1f:69:34:b7:21:
         72:e1:23:7e:c9:94:ff:29:dd:e0:5d:91:a3:8b:1a:30:62:60:
         ff:c3:59:4e:df:83:6d:f8:e7:27:90:39:8f:fe:64:91:2b:66:
         87:83:f9:34:b6:17:8c:82:cf:dc:ea:15:52:45:10:43:33:78:
         7a:25:19:9a:11:b7:76:ce:a9:7f:7f:db:18:df:8d:54:4c:26:
         ed:dc:7f:51:1d:68:5d:5e:9e:d2:85:66:d2:2b:ee:4c:05:67:
         a6:4a:e0:81:0a:75:56:66:34:32:cf:88:37:c1:36:52:45:92:
         61:26:31:67:7a:63:3f:4d:ad:a8:a1:5f:b9:c4:34:6c:59:9b:
         7b:0d:14:b2:98:32:b2:ef:16:a6:22:fe:61:24:72:ef:87:ac:
         ea:d9:9c:cf:8a:32:1a:d4:d9:d2:f1:52:a1:ef:f5:04:86:92:
         13:28:0b:ae:75:a0:cb:30:2f:1e:4a:e4:eb:c0:5c:45:2e:8e:
         ea:af:b8:08:42:62:fb:dc:e8:d5:2e:09:32:b1:ba:6a:71:5d:
         e0:5f:64:18:c8:39:2a:ac:3e:44:ab:7b:ed:8d:4f:d1:f6:69:
         58:0f:37:df:7b:a8:46:25:90:83:4c:8d:d6:3a:a6:97:db:a5:
         e3:33:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:45:08 2025 by rpki-client