Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2997a217-d468-3059-978d-6d7d89969d6d.roa
File:                     2997a217-d468-3059-978d-6d7d89969d6d.roa (raw, json)
Hash identifier:          sYcaUpQG/eF1aCX3iJ7SKLh4sTeskdhL3kMO7BwZrYo=
Subject key identifier:   1F:99:74:DB:82:72:5D:AF:99:8C:DB:F6:3D:42:CC:F7:B2:39:C3:0F
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F43285849BC74AE7639C38C0A06F2BC00
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2997a217-d468-3059-978d-6d7d89969d6d.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     54905
IP address blocks:        23.234.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:ae:76:39:c3:8c:0a:06:f2:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=ffeaa920-fc62-4a6c-abd6-08625cebc013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8a:03:32:a5:a2:72:58:99:69:57:e0:b7:96:
                    65:2d:7a:ad:53:b4:22:84:69:1c:89:84:7c:6f:78:
                    a7:e4:1c:66:e6:18:83:41:36:6e:b2:82:e5:04:3a:
                    ee:c7:33:51:19:33:80:4e:03:54:a1:f8:50:08:68:
                    e3:48:18:c8:82:15:56:77:fb:13:e8:6b:c1:05:ed:
                    3d:ba:27:51:19:65:24:31:6b:1f:be:61:1d:0f:1d:
                    00:39:8e:82:2a:9d:c8:5b:50:5c:f4:f6:d3:b5:6a:
                    75:69:c8:e7:0e:cc:40:51:ac:9e:02:84:36:87:e3:
                    90:fd:f0:8e:42:42:40:01:ef:fa:c4:0d:4e:ad:b9:
                    d3:f1:fc:39:f3:fa:70:c4:3b:9d:86:8d:49:f2:9f:
                    1f:14:31:71:1a:1c:26:88:f5:6e:98:8a:6b:18:09:
                    b6:8a:1e:3c:ee:27:bc:54:a5:91:6a:e6:b5:b2:38:
                    5c:5c:76:b3:7c:52:3a:66:89:ba:9a:b9:77:64:8e:
                    a3:b2:8b:b0:be:b5:4e:08:9b:e9:93:70:ee:4c:78:
                    81:a5:70:67:dd:08:ba:36:f3:a0:fc:31:c4:2e:2c:
                    0f:89:f0:13:64:84:52:f4:e4:0a:a3:f9:b5:a7:ae:
                    33:0c:34:fb:55:7a:68:b3:a2:d1:00:21:06:ac:ff:
                    e5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:99:74:DB:82:72:5D:AF:99:8C:DB:F6:3D:42:CC:F7:B2:39:C3:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2997a217-d468-3059-978d-6d7d89969d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ee:ca:16:a4:92:fb:7a:a7:87:a0:84:3f:ea:e4:3c:43:b9:
         13:c0:10:08:51:f5:42:e3:fc:fe:7c:11:0b:27:1d:69:37:15:
         71:e2:1e:34:87:96:6d:c7:4d:6c:f4:cc:fe:11:6d:79:a2:22:
         67:a7:47:d5:d3:77:5c:8c:e0:b7:e9:3d:6d:bc:79:ae:3a:ca:
         02:32:4c:6f:4c:9e:94:5a:73:f8:03:1a:d0:6a:cb:70:6a:1d:
         4d:46:29:5c:bb:50:77:d0:94:c7:88:d9:39:46:70:dc:96:5e:
         cb:c6:67:65:72:8f:67:21:d6:5e:ff:62:ca:27:3c:80:5b:d6:
         53:cd:29:09:cc:bd:2f:69:31:db:c4:c4:c4:c6:c7:2a:6b:49:
         18:ad:64:c0:46:92:08:da:b9:ae:80:50:af:f0:b3:09:6f:a5:
         73:0b:58:e1:94:f9:8c:5d:1f:bf:56:19:12:77:fc:94:8b:c5:
         98:f0:ff:2f:e3:c3:d4:3a:16:7e:96:6f:bf:1d:f2:9d:4d:f4:
         a9:c6:e8:c7:ff:db:f1:8b:32:5c:20:1b:50:7c:87:9f:69:37:
         78:8c:f7:66:20:92:84:e7:fc:22:04:bf:0c:e5:44:7f:6f:50:
         8b:52:27:fa:10:35:e9:00:ea:92:f5:04:dd:97:58:30:fb:db:
         2a:16:93:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:32:51 2025 by rpki-client