Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/efb834f3-4901-351b-81eb-f56fe0d2d61a.roa
File:                     efb834f3-4901-351b-81eb-f56fe0d2d61a.roa (raw, json)
Hash identifier:          JEZe3x/Zu/SbpC0Yp89iaHsgQTSDIlmuD4SU41JanU4=
Subject key identifier:   62:98:33:8F:84:7C:01:C6:F7:49:80:CE:DF:08:6C:0A:8A:EC:09:09
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F43285849BC74AB09A02A00F16FE33340
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/efb834f3-4901-351b-81eb-f56fe0d2d61a.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     397041
IP address blocks:        23.160.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:ab:09:a0:2a:00:f1:6f:e3:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=55aa0f63-525e-4c1f-84ca-e74d39b64d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bb:3a:b1:6c:00:31:50:3c:c5:77:15:c5:b0:
                    58:6e:14:8d:86:c0:7b:9d:d0:0d:b6:32:51:61:c8:
                    cf:ce:42:13:0a:a1:85:36:29:20:29:e0:e7:fb:d1:
                    5e:1c:e4:d2:89:9a:02:bd:09:22:ac:d6:93:ab:78:
                    9d:f5:c8:f3:fd:fc:95:9d:d4:08:21:ee:5c:f6:9f:
                    68:82:12:a2:3d:b7:03:41:a2:53:2d:7c:89:87:1f:
                    40:df:e5:3e:f5:8e:d6:08:c1:bd:40:6c:c5:56:46:
                    71:a6:f3:05:c7:7e:de:65:c9:91:62:bd:4b:8b:9e:
                    73:f6:7c:e3:a0:5a:0f:16:1d:05:fc:40:d7:eb:3b:
                    c7:d3:25:1e:ff:a9:42:26:80:ce:6b:79:11:0b:20:
                    05:99:d5:ce:4e:86:16:ca:ef:34:52:48:ad:7b:e4:
                    6a:44:2e:5a:02:14:8e:90:a9:8a:0b:78:b5:a0:96:
                    3a:84:7f:2d:4a:e6:7b:ac:36:91:bb:cc:0e:37:fa:
                    11:3e:84:9d:83:d9:a3:2a:1f:d4:53:c7:c5:4f:30:
                    40:06:62:c3:2d:32:b4:6e:d1:88:8b:82:82:8d:1c:
                    9a:5d:fe:f2:52:f8:bc:25:4a:24:b0:06:7c:85:0f:
                    cc:9b:e1:49:c1:6c:97:a4:24:f7:4e:61:3a:17:10:
                    3a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:98:33:8F:84:7C:01:C6:F7:49:80:CE:DF:08:6C:0A:8A:EC:09:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/efb834f3-4901-351b-81eb-f56fe0d2d61a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:4e:8c:a1:27:58:3d:23:0b:2a:5e:f8:ff:bb:d7:f7:81:c5:
         dc:f1:a8:32:27:8e:ed:02:bc:39:d8:f5:aa:f9:da:c4:8f:f2:
         e0:09:7f:0e:d0:e1:52:20:7c:88:3e:55:5a:9e:f6:5a:b6:d2:
         50:59:25:da:6f:2a:7d:19:bf:f2:be:25:5d:d2:5e:6b:8d:9c:
         82:74:18:af:b2:d2:c7:92:d8:4d:85:86:28:a1:e9:be:cd:59:
         b2:8e:9c:5d:79:73:19:73:e7:90:2c:94:dc:46:2b:33:a9:99:
         99:b6:d1:fb:c2:c8:de:8c:65:3d:40:ec:b5:0f:64:d6:56:a0:
         16:0a:6b:66:06:ff:4c:f6:8b:f5:06:dd:0d:13:bd:b3:db:88:
         18:82:94:5a:43:15:92:14:57:26:4c:eb:f2:c2:d5:30:88:c3:
         1c:84:0e:8d:1b:a1:f5:05:b3:57:53:73:e4:b6:ab:54:a5:c3:
         3b:65:69:d5:a5:79:5b:08:02:c1:30:04:66:aa:d9:e0:e7:26:
         ad:c0:0e:74:51:fc:ec:ae:b5:72:9f:b5:67:94:eb:d8:3d:f7:
         5c:d8:e1:b8:80:15:54:19:e6:08:41:80:3e:0a:79:f4:45:87:
         20:9f:4f:56:40:d9:59:79:60:de:0e:ac:78:0d:ab:6c:bf:f2:
         ae:22:48:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:51:21 2025 by rpki-client