Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/f3805def-12ab-3eea-993c-463a8a73c36a.roa
File:                     f3805def-12ab-3eea-993c-463a8a73c36a.roa (raw, json)
Hash identifier:          PaX8vCUlwa/snqpPDvK3hAe/klTkvKPOIbaxN6GV7WM=
Subject key identifier:   00:44:03:04:20:91:EF:C7:99:19:03:F2:13:89:46:F2:05:CB:E7:E2
Certificate issuer:       /CN=a4607f8f-ba19-4447-a356-e3ec6823f923
Certificate serial:       010D0C9F43285849B14A0DFA1D5B1696CB536040
Authority key identifier: 3D:96:7D:2C:26:DD:A2:17:5F:C9:83:33:0B:43:4A:AA:38:74:01:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/f3805def-12ab-3eea-993c-463a8a73c36a.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     400938
IP address blocks:        23.143.248.0/24 maxlen: 24
                          74.120.232.0/22 maxlen: 22
                          2602:fad1::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/a4607f8f-ba19-4447-a356-e3ec6823f923.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/a4607f8f-ba19-4447-a356-e3ec6823f923.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0d:fa:1d:5b:16:96:cb:53:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4607f8f-ba19-4447-a356-e3ec6823f923
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=ba77d0e0-0413-438c-838d-3299a3c176da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:d7:43:cc:96:25:54:b9:65:fb:c8:ad:40:
                    5f:08:4b:2b:c1:bc:5f:01:7e:e5:b0:a5:8d:6a:08:
                    44:d8:ce:72:4c:58:b3:a6:b4:43:54:1f:31:ed:a4:
                    48:05:5c:aa:7e:bf:7e:1c:a9:9d:f6:51:65:00:06:
                    e0:4f:4b:f6:12:d2:44:f2:c1:d5:5c:b4:a9:b8:e4:
                    64:90:e1:1c:bc:60:ef:6f:3b:5e:18:4a:49:94:68:
                    1b:66:5a:5e:fa:e3:55:a2:c2:58:47:83:e9:a2:66:
                    50:b1:dc:34:e8:94:f4:1f:18:5a:b1:aa:ae:cd:b6:
                    7b:1a:79:87:83:2b:ad:ec:9a:81:69:f3:c8:d4:f8:
                    53:14:93:94:23:44:80:d8:6a:02:fc:da:44:2d:63:
                    7b:65:f7:0d:95:f2:cc:4f:51:30:2c:02:e8:d7:fb:
                    1c:31:46:80:66:ac:72:cb:01:96:f9:42:08:87:05:
                    1e:ec:be:ce:3a:f6:e9:b9:21:23:e3:f3:d9:80:44:
                    99:a8:02:e3:4d:da:66:e7:77:8c:2a:a9:4d:01:ac:
                    26:3c:5a:a7:0f:1f:29:a6:6b:6c:0e:be:b6:e1:b3:
                    1a:d3:55:3a:c2:58:ad:b4:bc:a6:fe:fb:82:c0:2f:
                    90:06:26:05:17:21:39:6e:82:11:31:28:f6:bb:ab:
                    40:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:44:03:04:20:91:EF:C7:99:19:03:F2:13:89:46:F2:05:CB:E7:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/f3805def-12ab-3eea-993c-463a8a73c36a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/a4607f8f-ba19-4447-a356-e3ec6823f923.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:7D:2C:26:DD:A2:17:5F:C9:83:33:0B:43:4A:AA:38:74:01:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.248.0/24
                  74.120.232.0/22
                IPv6:
                  2602:fad1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f9:c7:cd:4a:73:7b:4d:0e:fd:b5:82:4b:c1:63:cc:1b:a0:
         06:72:f8:24:db:55:92:7d:4d:8e:79:81:55:00:00:7a:a1:11:
         1d:29:98:97:9e:23:93:01:a2:56:6c:25:e2:d1:56:08:80:da:
         9a:74:4d:ec:ed:06:f1:2d:69:77:34:1a:c4:4e:37:4d:96:bd:
         ac:7c:8d:a5:13:47:d0:b3:3a:b4:e0:17:7d:8e:ad:22:da:2a:
         70:48:49:40:38:2c:81:f8:ad:5b:12:d5:a6:7c:1c:03:c6:93:
         40:fb:d2:3b:33:9c:e3:f0:7d:17:9c:67:c4:02:0a:97:98:fc:
         f8:83:6f:74:85:d9:3f:b3:3b:2e:d8:1b:a3:fb:0e:0d:13:99:
         d3:79:d6:b1:cf:7b:11:ff:97:1d:61:bb:66:0a:0f:c9:35:3c:
         7a:6c:a3:2e:2f:77:8d:a2:40:b4:ed:1a:94:1f:5e:21:94:92:
         ff:35:5f:bf:97:6b:53:63:9b:59:04:c3:d5:d7:d9:13:21:f2:
         29:3b:38:65:8c:5a:82:7f:7d:88:ca:3a:ce:fb:34:a5:a0:2d:
         82:6e:52:39:07:ee:42:6f:27:84:3e:68:8d:b2:3f:9f:c1:22:
         6a:82:06:2a:28:c1:5f:45:85:0e:db:06:aa:b9:19:f2:65:9a:
         8b:a6:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:24:44 2025 by rpki-client