Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa
File:                     603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa (raw, json)
Hash identifier:          W7ba1xf4na1rzAIDgEeX0Xy+3lVkkO/gFXd65gBHUEY=
Subject key identifier:   4C:A8:AE:32:6C:AB:BD:9D:9A:07:39:9F:CD:96:38:6E:CB:BE:09:7F
Certificate issuer:       /CN=4164770e-1f48-4239-921d-775b5152fa2e
Certificate serial:       010D0C9F43285849BB0F76515F76465C226FCA80
Authority key identifier: 83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     20055
IP address blocks:        23.131.120.0/24 maxlen: 24
                          2606:acc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:76:51:5f:76:46:5c:22:6f:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4164770e-1f48-4239-921d-775b5152fa2e
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=c400da26-015e-4321-89c5-5918771dedc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:94:0d:7d:79:d3:88:06:f1:f5:4a:e5:6f:
                    9a:7f:d9:15:6e:73:4f:e0:aa:d8:0e:87:b7:af:86:
                    ac:99:0c:57:5d:6a:37:c4:a1:0c:f6:8e:5a:2f:11:
                    fa:c3:13:85:52:36:67:4a:27:34:a0:71:68:73:73:
                    23:b9:df:be:ee:fe:2b:27:c4:cc:20:31:a6:26:21:
                    9f:f6:62:48:1b:14:ec:ec:e0:f7:24:ca:06:6a:7a:
                    0a:f6:71:f5:37:6f:b1:6d:3c:c3:dd:cb:03:dc:6f:
                    85:da:6e:74:10:e7:7e:79:05:ac:9a:a2:b3:93:fb:
                    53:09:45:f2:5a:1f:11:31:24:d3:21:73:85:4d:a0:
                    8d:3a:e6:5b:a9:e9:b6:22:77:6d:88:4b:b0:e1:8b:
                    35:8e:26:1f:cf:ad:52:95:cb:e9:a6:21:de:dc:82:
                    5e:12:6d:d3:9e:f3:8a:ea:01:86:5f:61:0d:53:46:
                    7e:42:19:da:02:3a:64:99:72:23:8b:d9:1f:1e:cd:
                    ec:ae:2a:21:9f:34:71:55:7f:77:cb:97:36:81:9a:
                    a4:c8:f8:e7:e0:42:53:1c:2c:ea:5f:32:64:6c:04:
                    e3:01:41:4b:92:b9:00:79:c3:5b:de:76:7f:f1:2d:
                    75:83:13:34:24:43:1f:aa:fc:c3:70:c4:d1:27:af:
                    f7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A8:AE:32:6C:AB:BD:9D:9A:07:39:9F:CD:96:38:6E:CB:BE:09:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.crl

            X509v3 Authority Key Identifier:
                keyid:83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.120.0/24
                IPv6:
                  2606:acc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c6:f7:c3:c4:13:b7:20:46:12:8b:75:79:7e:0b:7d:55:db:
         32:09:3d:36:d2:88:86:f2:63:19:f9:c3:01:9b:a1:27:da:74:
         d3:dc:44:1f:c4:1f:c4:eb:a5:ca:3f:3f:ac:31:c5:dc:23:34:
         1a:f0:0b:c4:d6:56:5e:ef:99:de:54:eb:6d:3f:f7:25:18:86:
         7a:cd:d7:56:b6:65:7d:b5:9f:ac:46:92:8f:fb:f6:ca:29:15:
         fb:91:25:36:5b:e5:07:5e:c5:d4:e6:5a:a4:af:c0:5d:99:68:
         1d:b4:82:c2:8c:cf:b8:70:f9:28:1f:ba:35:05:48:f0:48:fe:
         16:73:d9:d2:be:21:5d:da:1a:e6:99:73:5b:44:15:8f:4a:ff:
         2b:c3:08:c2:8c:42:5e:9f:e6:b6:a9:89:1a:ac:d5:04:e1:dc:
         56:d7:61:25:cc:6a:07:6b:ec:79:1d:ee:0f:1c:1a:7b:86:5d:
         4c:4c:bc:16:75:80:ec:d7:e9:7c:55:0c:4b:26:ef:17:68:3e:
         3c:c8:19:4e:3a:69:94:b9:66:79:09:d9:72:27:b4:6c:a9:38:
         b6:97:2f:77:f1:ef:35:02:6d:b0:13:26:54:15:1e:17:b5:43:
         b7:c1:99:75:ca:02:67:0b:85:80:54:85:da:48:f4:06:d0:65:
         52:33:dc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:58:28 2025 by rpki-client