Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/dfe59efc-118f-3db4-aec8-bb89561d936c.roa
File:                     dfe59efc-118f-3db4-aec8-bb89561d936c.roa (raw, json)
Hash identifier:          Rrk9L9VXX5uTTfJY1OoK1KXVbfjwACLIllR51xnlDO0=
Subject key identifier:   24:AD:FB:F2:A8:95:D2:2E:49:DB:6D:A6:C9:DD:BF:CC:1D:9A:0E:9A
Certificate issuer:       /CN=db3a4466-554c-4a7d-9803-eceac12519bb
Certificate serial:       010D0C9F4328584988CF2C0B58D4B2AA6A36D900
Authority key identifier: DF:C1:84:7A:4C:76:6B:D7:EB:4D:50:5D:47:52:BC:DF:54:A4:70:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/dfe59efc-118f-3db4-aec8-bb89561d936c.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     401065
IP address blocks:        23.179.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/db3a4466-554c-4a7d-9803-eceac12519bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/db3a4466-554c-4a7d-9803-eceac12519bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:2c:0b:58:d4:b2:aa:6a:36:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db3a4466-554c-4a7d-9803-eceac12519bb
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=d1eaead9-bd56-415a-8187-d9d6e8670cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:5a:ed:44:9d:4f:d5:1d:ff:77:dc:14:fb:
                    37:37:0c:8b:28:17:7e:5e:1b:c0:a9:e1:dc:a8:47:
                    16:07:51:e4:47:6f:8e:40:c7:66:70:0a:d6:66:19:
                    39:d3:2e:d4:8d:99:63:a7:6a:61:b2:01:45:61:ed:
                    e4:23:f8:47:90:64:8d:7d:a4:2f:58:8f:7b:c3:71:
                    e3:c5:ce:3d:03:f1:8a:0e:3e:c4:b4:27:d6:c7:6b:
                    50:d1:12:fa:ce:cc:54:51:e5:54:8e:02:2e:a7:d4:
                    79:02:c0:c0:91:44:45:a2:3f:10:3c:4d:2d:58:ef:
                    b1:5f:2f:64:e4:d2:a8:45:48:ca:b7:22:dd:fc:30:
                    d8:40:df:b8:12:2c:56:49:f0:5b:fc:19:fd:55:3b:
                    a1:d5:b1:ba:84:42:0e:d3:c5:76:88:7a:eb:97:61:
                    27:60:2d:2f:5c:c9:0d:89:8a:9e:be:84:ab:6f:4d:
                    b9:02:92:91:5d:87:30:e1:45:4b:39:70:02:81:c2:
                    7f:4c:bd:6f:d3:ee:1c:50:92:a0:5b:ce:63:88:be:
                    03:1e:45:aa:c5:cf:56:75:17:1b:ce:d3:85:95:aa:
                    55:da:50:dd:f2:60:16:97:18:5e:c1:c7:c0:c8:4f:
                    45:cc:25:54:5b:3a:5d:46:87:98:26:80:0d:67:29:
                    cf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AD:FB:F2:A8:95:D2:2E:49:DB:6D:A6:C9:DD:BF:CC:1D:9A:0E:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/dfe59efc-118f-3db4-aec8-bb89561d936c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb/db3a4466-554c-4a7d-9803-eceac12519bb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:C1:84:7A:4C:76:6B:D7:EB:4D:50:5D:47:52:BC:DF:54:A4:70:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/db3a4466-554c-4a7d-9803-eceac12519bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5f:19:d9:69:8b:23:17:6d:5a:f2:5d:b5:08:a4:52:ce:5b:
         aa:67:08:3e:71:9b:e9:f1:71:8d:6f:33:7a:82:9f:12:0e:06:
         fe:e7:bf:9b:e2:c4:01:ad:ea:ff:3c:4f:13:64:8f:db:31:5e:
         98:a7:85:81:ce:ca:4c:0f:c2:f7:75:f7:6c:5b:14:39:1b:c6:
         b3:79:ca:70:6a:86:bb:16:60:a8:78:4b:2a:bf:c9:6b:cd:82:
         17:78:5b:0a:26:05:5a:ed:ca:ab:63:0e:4b:01:c5:e2:ba:7a:
         e0:1a:22:c5:19:eb:8b:e9:32:22:06:9a:60:e5:18:81:7f:3f:
         75:29:f7:8d:eb:f6:19:8e:17:f9:25:80:a9:2a:0c:dd:9a:af:
         1e:c2:9c:db:88:59:46:86:10:71:69:ce:38:1a:78:08:2e:12:
         4b:fa:40:4a:1a:a0:56:26:c5:60:72:f7:22:ff:ca:c9:2f:7f:
         50:49:db:79:67:13:c5:ca:57:48:0b:53:0e:8f:36:d0:52:fe:
         22:0b:42:70:ec:e6:b4:22:6c:9a:53:c4:74:a0:88:42:54:21:
         73:5b:b5:2f:c1:b0:29:bc:71:15:64:b6:11:7f:54:6b:d3:97:
         c1:36:cc:3a:74:d7:0e:6d:7f:4b:af:ce:08:d1:a8:3a:d8:e4:
         ee:f5:7b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:15:49 2025 by rpki-client