Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/fdc8a2c8-e833-37b5-aa96-54f5d96579b5.roa
File:                     fdc8a2c8-e833-37b5-aa96-54f5d96579b5.roa (raw, json)
Hash identifier:          70V/Z+0v6JsrIfCoVkpOXlih3gFT4uN2bmnewrTkmLc=
Subject key identifier:   BA:8F:80:B9:28:79:E2:9A:06:9F:90:59:A8:BC:A1:CD:4A:EB:DE:94
Certificate issuer:       /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
Certificate serial:       010D0C9F43285849B57A126621DB128A5A250680
Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/fdc8a2c8-e833-37b5-aa96-54f5d96579b5.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     15020
IP address blocks:        23.188.17.0/24 maxlen: 24
                          23.188.18.0/24 maxlen: 24
                          23.188.19.0/24 maxlen: 24
                          23.188.20.0/24 maxlen: 24
                          23.188.21.0/24 maxlen: 24
                          23.188.22.0/24 maxlen: 24
                          23.188.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:12:66:21:db:12:8a:5a:25:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=ef2910a3-d7c4-45f0-924d-3b3d4994f37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:19:47:5a:eb:25:99:39:a8:ea:80:10:b5:65:
                    90:c5:2b:28:09:f8:b9:da:cf:86:2c:6c:88:78:7c:
                    b6:c8:a0:e2:c8:cb:55:19:9d:c1:82:f7:87:10:a5:
                    0e:8f:52:86:36:1d:e3:34:08:ab:03:e1:8e:3f:86:
                    6f:6b:4c:e6:14:be:6d:bc:15:7b:bb:0c:c7:b5:c3:
                    f0:f6:a6:88:e3:00:7a:03:04:3b:f2:ad:ae:69:b7:
                    00:ff:0c:dd:ca:7d:0b:61:38:e3:70:99:c2:68:45:
                    d8:d9:b9:0a:9f:18:7d:b3:b2:36:ec:4b:e9:9f:7f:
                    93:8e:a7:1a:d9:c0:32:c8:ea:04:11:71:38:45:6c:
                    c6:96:ca:76:23:79:bf:de:18:b5:e0:4a:c2:a0:1c:
                    33:bc:c3:92:04:f1:63:75:d8:3b:13:9c:f8:3b:c1:
                    7d:9f:1c:21:73:1d:67:06:79:7a:a3:e4:27:04:02:
                    c5:0c:1b:af:82:41:8b:0b:ef:8d:e9:19:87:6f:63:
                    c3:7e:ff:71:8c:49:fb:88:b7:c9:2b:a9:f8:20:ab:
                    6f:10:1f:4f:21:f4:69:8a:a4:8b:58:20:b9:da:05:
                    36:2d:0f:4f:a8:fe:93:7e:43:df:13:73:88:7f:c0:
                    e1:63:10:b7:6d:32:69:80:99:42:6b:58:92:02:be:
                    3c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8F:80:B9:28:79:E2:9A:06:9F:90:59:A8:BC:A1:CD:4A:EB:DE:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/fdc8a2c8-e833-37b5-aa96-54f5d96579b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl

            X509v3 Authority Key Identifier:
                keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.17.0-23.188.23.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7f:3b:70:92:b2:16:24:45:eb:d4:de:88:2a:76:aa:b4:69:
         15:a4:44:d1:5e:3d:fd:3a:05:42:e2:8b:49:28:e1:b3:67:8a:
         1f:0c:b0:b7:a8:65:ff:33:e6:e7:58:11:c9:07:ad:be:f0:e0:
         6f:c0:da:6a:97:15:69:7d:65:bd:ea:d1:90:59:a9:ff:bb:3b:
         90:05:e0:0f:e6:90:fe:0e:c1:d0:41:bc:1c:c3:dd:fa:46:1d:
         ed:24:c1:71:79:b7:34:c0:fd:39:ba:f9:e2:ea:d5:bc:36:90:
         b7:b2:9e:1a:ad:f4:9e:c5:fd:2b:8a:90:79:cc:2b:e3:1e:3e:
         66:11:e9:1c:af:6b:e5:f0:e5:0c:e3:2f:59:35:5a:e2:cb:65:
         8a:7a:86:44:27:49:19:86:16:03:21:e5:3f:fd:a4:73:69:1a:
         51:35:92:40:0f:17:36:8b:29:9a:f7:65:3c:e6:a4:04:2b:09:
         6d:66:f0:c5:4a:9e:4b:92:64:bf:6a:8e:46:7b:bf:62:59:d2:
         c1:05:f4:28:a1:fe:c8:a9:d1:c4:90:05:3e:7a:8e:0c:ac:f6:
         f8:1e:c1:6a:68:68:80:cc:7a:c6:bf:1b:1f:fb:df:b8:6f:c9:
         a0:d6:dc:18:60:ae:1a:97:e5:8d:cd:95:54:ac:87:96:90:27:
         07:24:bc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:49:28 2025 by rpki-client