Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/08d290d6-558a-31e0-b42d-51ab17937ab7.roa
File:                     08d290d6-558a-31e0-b42d-51ab17937ab7.roa (raw, json)
Hash identifier:          AU5Z9qx9wERNvCA0Fv9+i+1RDglIHdh7NRlTyk3GlRQ=
Subject key identifier:   26:AB:05:8D:27:90:C1:8D:D8:BD:C8:DE:DE:7D:54:1A:9E:E5:7E:23
Certificate issuer:       /CN=3878fd50-eae1-4b38-a142-8eff8910579b
Certificate serial:       010D0C9F432858499F24989200E9AA3753557B80
Authority key identifier: 40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/08d290d6-558a-31e0-b42d-51ab17937ab7.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     14807
IP address blocks:        23.180.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:98:92:00:e9:aa:37:53:55:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3878fd50-eae1-4b38-a142-8eff8910579b
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=da7c6e14-e067-4b19-908e-65a018edcafb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ba:49:da:86:20:55:14:60:52:2a:cb:f6:c9:
                    1c:0d:a1:27:8f:28:10:70:da:27:60:7e:65:71:43:
                    13:ca:34:73:a8:0e:63:72:13:50:19:8c:66:07:c0:
                    94:41:6f:30:60:52:98:56:51:ba:4c:93:a1:8b:22:
                    96:ff:33:34:4a:28:a1:5b:a3:9c:44:9d:19:40:73:
                    fe:8b:f8:cb:f6:f1:40:c2:63:2b:6f:22:45:ce:52:
                    b5:6d:ba:12:00:71:3e:4b:e7:16:af:52:85:cf:ef:
                    d3:2d:cc:55:4d:4f:d6:01:bb:83:53:de:dd:46:c0:
                    c3:ed:ab:9d:08:b7:23:3b:9f:67:32:5b:ba:40:65:
                    94:c2:cd:59:b3:d6:c6:c6:dd:86:01:df:96:7f:2b:
                    48:e8:79:71:cc:4d:ef:d3:9c:17:30:33:2e:78:92:
                    c3:15:2b:56:2a:75:4a:cf:88:0b:c1:72:ac:7f:59:
                    1f:35:42:a4:84:5a:ef:a6:80:65:51:7f:f1:62:51:
                    f8:67:a3:b9:bd:dd:27:64:93:10:d1:3e:28:44:f6:
                    1e:f3:92:92:39:51:e4:68:1f:f2:2d:02:dc:70:ed:
                    df:7c:3e:e9:85:2d:e2:fa:d0:4d:48:8e:ef:57:43:
                    4a:30:e4:e6:6a:33:ff:6c:42:b0:05:ab:03:db:f0:
                    e9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AB:05:8D:27:90:C1:8D:D8:BD:C8:DE:DE:7D:54:1A:9E:E5:7E:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/08d290d6-558a-31e0-b42d-51ab17937ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl

            X509v3 Authority Key Identifier:
                keyid:40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:16:a8:40:3a:fe:bd:7b:02:99:3a:12:b2:e2:af:cc:bf:1e:
         0d:cc:14:c7:89:3f:88:76:6c:de:0f:33:94:f6:4a:a1:16:7b:
         63:21:bc:0a:19:60:76:72:dc:42:bc:2d:09:8d:7d:8e:0f:83:
         f7:45:ca:3e:4b:13:bf:77:4c:a4:2e:88:fc:49:8b:08:1c:35:
         6b:c4:4f:db:b3:74:0b:f5:d3:26:80:33:f0:c4:23:96:9c:fd:
         26:ff:08:da:31:14:52:69:63:fb:eb:db:94:7f:db:1c:73:6e:
         fc:06:53:69:a2:ba:86:60:52:3b:c7:e2:b6:36:69:6d:c8:40:
         05:3b:b5:8b:60:95:15:03:e5:12:d1:84:47:c3:ca:f4:01:27:
         fe:01:ee:0b:e6:5f:98:f5:43:81:2f:0b:fa:bf:c8:d7:9a:bb:
         af:f7:9b:23:8b:e3:a5:6b:73:29:28:fe:42:82:35:e2:aa:e0:
         3d:11:66:ff:50:ce:02:00:17:fa:80:34:15:03:99:57:24:83:
         c8:8c:38:b9:63:ad:95:9a:4a:41:6d:0e:c5:40:7b:c2:15:92:
         09:3b:b3:22:aa:3b:54:56:b7:46:a4:0a:12:88:b4:13:53:fe:
         e9:97:c4:ac:b1:59:08:f9:3f:04:49:06:96:35:fd:d7:06:c4:
         1e:db:e0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:06:38 2025 by rpki-client