Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/514ed226-7abc-3d2b-99e4-c31ebdc25087.roa
File:                     514ed226-7abc-3d2b-99e4-c31ebdc25087.roa (raw, json)
Hash identifier:          EkrCiUBA/iB0WlTbkXKu+1smO/+dAObTxw646+7JcCw=
Subject key identifier:   F8:7B:20:7C:FD:10:AB:93:1A:71:76:AC:48:17:0A:34:DA:2A:80:35
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A268AAB3960845027AA64F500
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/514ed226-7abc-3d2b-99e4-c31ebdc25087.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     4229
IP address blocks:        23.91.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:ab:39:60:84:50:27:aa:64:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=907e71d5-af24-40a6-85c5-46b0f9489599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:69:0a:47:a9:23:b6:5d:38:06:4e:6d:10:
                    f8:3a:08:8e:0f:ef:df:ef:03:60:77:6a:6a:43:0e:
                    9c:50:63:eb:00:57:bf:64:56:ed:9d:b0:35:00:48:
                    2e:41:71:60:fe:b9:5a:0f:1f:db:68:4c:c3:49:56:
                    c4:2b:89:25:c8:84:7e:3e:69:5b:5a:32:b4:3d:a0:
                    1b:de:08:c1:58:d0:8f:fe:d0:11:7c:12:14:3f:75:
                    0b:9f:26:01:2b:1a:97:b0:90:8e:d4:c9:52:41:f1:
                    25:2c:ca:e4:3d:88:24:e9:ce:df:36:41:71:6f:5c:
                    4c:8f:f3:ff:00:e8:94:a5:13:4b:3d:93:7a:51:4f:
                    41:81:44:15:da:2c:05:cd:46:7e:6b:d8:80:a1:83:
                    4d:b1:8f:5e:b8:dc:c2:6f:26:f3:c8:87:d0:bc:e1:
                    ea:d0:53:d2:b3:4f:de:c0:1b:9f:da:5c:93:f7:8b:
                    7e:a8:22:04:45:df:dc:a9:a5:0f:0e:2d:c6:cc:ac:
                    e0:84:23:31:0b:72:34:fd:03:bd:a5:61:f7:75:b2:
                    ed:49:90:70:33:0e:d6:b8:4d:9f:c7:6b:37:85:dc:
                    d0:9c:21:2a:67:d6:cd:36:ff:9b:d8:64:52:1c:7e:
                    6f:3a:e7:bc:55:81:00:34:f4:75:ef:f4:4b:3f:2a:
                    e1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7B:20:7C:FD:10:AB:93:1A:71:76:AC:48:17:0A:34:DA:2A:80:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/514ed226-7abc-3d2b-99e4-c31ebdc25087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:98:5f:d9:49:c0:cb:07:15:20:01:ed:03:10:ef:b3:70:e3:
         37:d5:3d:c5:6d:05:a3:44:71:e7:a5:96:b2:35:84:1c:20:44:
         57:8a:25:8f:a1:9c:c7:c6:b6:21:e4:9b:69:6f:95:cc:46:9a:
         24:44:5d:90:50:b7:86:7e:ec:ec:0f:bd:18:d5:46:e7:b4:4b:
         d1:74:b7:d4:1e:82:3c:bc:f0:1b:0d:70:f8:7c:39:7d:1b:37:
         72:d2:60:25:ca:5e:a9:f3:e8:4f:0d:99:82:4f:cd:3a:ce:fb:
         3b:fb:29:b7:3b:d3:b9:0b:fa:0d:94:da:2e:25:6c:8d:fd:b7:
         cf:e4:45:cc:bb:91:61:60:bf:f0:79:73:9d:7c:88:d3:d3:59:
         4a:15:24:33:15:d5:d2:ac:be:c3:0c:40:fa:e8:1e:68:50:b2:
         bc:48:03:55:33:a0:4b:1d:5a:1c:41:18:f5:f6:06:bc:cd:c8:
         3f:9d:38:22:9c:e2:4b:6d:f4:79:ef:71:d1:c5:21:8f:60:60:
         8a:56:c9:87:c6:f0:1f:90:21:18:14:91:58:3b:30:f8:87:ae:
         56:8c:a4:fd:e1:24:60:2f:ec:7c:e2:de:e7:d8:ca:16:50:68:
         c7:87:c8:fc:9f:78:01:3a:e9:19:55:fe:ba:77:de:c5:b8:e2:
         95:a9:fc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:20:28 2025 by rpki-client