Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe/4eaf1c8e-0d94-34cd-a4c4-85df364bfe8b.roa
File:                     4eaf1c8e-0d94-34cd-a4c4-85df364bfe8b.roa (raw, json)
Hash identifier:          CV2zn5hEkUPBA1niVDwyllAZtUtRhmpq98hZSosn/WM=
Subject key identifier:   68:5B:DD:9F:8A:D5:B2:FB:A6:BF:B4:A8:C6:2D:CF:19:71:B2:81:86
Certificate issuer:       /CN=e7060a03-da54-4766-9b77-667ebbb66ffe
Certificate serial:       010D0C9F43285849D594D6E471652269285C9300
Authority key identifier: BD:2E:98:F5:D4:36:9B:81:AB:83:21:F0:51:BF:9B:EF:BA:EC:45:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe/4eaf1c8e-0d94-34cd-a4c4-85df364bfe8b.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     397382
IP address blocks:        23.131.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe/e7060a03-da54-4766-9b77-667ebbb66ffe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe/e7060a03-da54-4766-9b77-667ebbb66ffe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d6:e4:71:65:22:69:28:5c:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7060a03-da54-4766-9b77-667ebbb66ffe
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=0f97dfd0-82a1-4154-9160-58ad1362910b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:36:81:50:98:59:67:50:a8:63:46:81:8b:d5:
                    29:5a:d9:41:b5:fd:25:3c:dc:10:18:c3:fd:7a:63:
                    10:f1:5e:d3:68:76:15:d9:59:6f:79:2e:6d:37:2d:
                    1f:fc:ca:48:71:e2:8b:e6:09:82:2f:dc:47:eb:33:
                    01:86:5a:0f:a0:5f:3f:53:c0:d6:26:fa:7c:2f:6f:
                    14:65:62:5c:29:15:90:d1:98:b9:da:8a:a0:59:f5:
                    bf:6d:56:e2:f0:24:0b:1c:8d:1c:a3:34:48:f2:b7:
                    c4:b0:33:43:e7:32:96:29:7a:da:aa:87:9d:c5:08:
                    6d:e3:a5:bd:ef:5e:37:6e:d6:78:03:17:ee:3c:bd:
                    fd:09:75:56:39:20:a7:db:e8:50:a6:c5:97:7c:8a:
                    28:d9:b3:f5:58:48:a4:00:15:98:9e:ad:63:8b:df:
                    92:5b:35:e2:c7:91:30:62:85:46:c6:dd:a0:85:71:
                    db:a9:94:c3:00:b5:25:10:2e:fc:6f:75:b5:0a:66:
                    dd:c2:ec:92:7b:52:e1:31:34:e1:4d:03:c0:d1:8b:
                    2b:62:16:7a:06:15:a1:73:04:26:b4:15:ba:98:99:
                    2e:92:49:2b:94:7d:83:d7:90:45:64:65:bd:ae:92:
                    48:65:fd:f4:56:33:a2:34:34:2a:df:45:49:54:66:
                    f2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5B:DD:9F:8A:D5:B2:FB:A6:BF:B4:A8:C6:2D:CF:19:71:B2:81:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe/4eaf1c8e-0d94-34cd-a4c4-85df364bfe8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe/e7060a03-da54-4766-9b77-667ebbb66ffe.crl

            X509v3 Authority Key Identifier:
                keyid:BD:2E:98:F5:D4:36:9B:81:AB:83:21:F0:51:BF:9B:EF:BA:EC:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:76:db:df:db:5a:36:d0:95:b2:2a:79:2e:97:1f:d3:3d:b3:
         28:7d:d9:b5:8a:b3:ae:47:8b:8b:42:1e:08:57:08:f1:1f:04:
         85:a3:1f:66:fb:4c:26:98:a0:07:f8:13:fb:f9:9b:3f:5f:84:
         68:13:f5:96:64:ed:f1:38:5d:52:32:df:2b:fb:bb:8b:9a:f0:
         2c:8b:80:fe:76:9a:ce:ec:56:6d:b6:64:c6:50:27:48:6e:e2:
         39:6a:5e:66:5c:d9:77:23:27:45:ae:a0:be:db:27:66:51:2c:
         a1:aa:1d:50:b8:5d:40:14:68:51:fe:31:b1:5f:68:b9:52:eb:
         90:4a:90:2b:82:0d:7a:d4:60:72:af:68:36:53:7f:24:38:e1:
         94:eb:ea:a4:60:19:db:07:d3:ce:61:c0:78:8a:13:ef:b3:15:
         f2:62:3a:19:35:2c:9b:47:cb:c9:52:0a:a1:9b:fb:ea:87:5c:
         c4:80:c7:41:6d:2d:db:60:0b:92:3c:09:16:ce:7a:12:ea:bd:
         1d:e0:9e:95:6d:bc:13:ac:6c:c1:7c:7f:73:21:5e:2a:4c:06:
         6b:4c:6f:d7:74:7b:4e:7b:00:ef:27:30:02:cc:7e:21:1e:5e:
         b7:66:55:d9:6f:7f:30:2a:f0:da:55:d4:28:19:44:74:50:b4:
         89:f9:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:30:48 2025 by rpki-client