Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/f01fa9c6-c8cd-3180-97da-a16e9a3ad136.roa
File:                     f01fa9c6-c8cd-3180-97da-a16e9a3ad136.roa (raw, json)
Hash identifier:          M53fhANePx0XyuW/ZKt9v2hipQRcyUXeLZHHAxKseQU=
Subject key identifier:   E1:E2:92:AB:3F:12:90:0A:5A:94:57:69:80:5F:F1:B7:FB:36:AD:8F
Certificate issuer:       /CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Certificate serial:       010D0C9F432858497279BBA87ACA7FF2C8F26400
Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/f01fa9c6-c8cd-3180-97da-a16e9a3ad136.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     40401
IP address blocks:        23.144.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:bb:a8:7a:ca:7f:f2:c8:f2:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=de771043-92d3-4c43-bf1c-7cc5ff4906a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:88:1a:01:1b:94:46:f0:94:63:af:b7:6a:9e:
                    5d:f3:65:a1:b9:63:e2:eb:cc:02:a0:15:1a:a6:aa:
                    24:ce:be:1b:5b:8d:2c:d1:55:d1:44:5f:ed:5b:fe:
                    bf:d9:71:8b:e6:0f:a7:fc:c4:84:15:83:40:9f:4d:
                    3b:08:7c:0d:8c:6c:13:9e:46:2a:18:e6:6d:20:bf:
                    3d:0a:5e:40:c4:5a:a1:d9:00:5c:6e:e4:e5:88:c7:
                    3a:9c:65:f9:b1:64:1a:ab:a3:a0:75:c2:67:73:e4:
                    11:76:e5:19:3a:19:6f:7a:56:45:92:98:17:28:aa:
                    a1:e2:df:ff:d4:f2:fa:44:99:7c:ff:8b:7a:9f:30:
                    95:7c:0e:75:0e:03:c9:d5:b5:8f:12:d8:73:28:d3:
                    80:91:40:65:a8:88:44:e8:63:28:4d:a0:1e:16:ae:
                    12:eb:e1:48:93:dd:0f:4d:44:87:ae:df:b1:be:60:
                    2b:90:2a:c2:65:ba:ff:2c:28:96:2b:09:02:ff:5a:
                    ee:d3:22:33:df:69:c9:3b:94:94:13:b1:56:15:18:
                    d0:fe:12:ad:b6:fe:81:50:8e:9d:6b:cf:fd:d2:cb:
                    18:73:c9:27:3c:52:e4:e9:19:93:37:dc:08:32:6c:
                    91:50:85:b9:f9:4c:7a:d9:55:e0:9f:57:f2:0a:82:
                    95:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E2:92:AB:3F:12:90:0A:5A:94:57:69:80:5F:F1:B7:FB:36:AD:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/f01fa9c6-c8cd-3180-97da-a16e9a3ad136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl

            X509v3 Authority Key Identifier:
                keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:fe:0a:6d:47:b9:c3:3c:1e:1a:dc:49:ff:a5:df:14:48:63:
         dc:f9:5e:7c:12:30:94:fc:b5:b0:3f:80:be:58:36:c9:7b:6e:
         4d:70:90:36:95:91:1c:20:e4:b2:1e:0a:01:bc:c1:2b:35:e2:
         80:af:6e:ec:15:3e:bb:1e:7c:ba:16:ca:1c:28:62:2b:54:40:
         ea:ec:55:34:0a:58:22:52:f5:9d:96:30:0a:37:36:bc:9e:42:
         67:da:16:b8:be:5f:28:50:2e:ed:95:36:ca:25:b3:ca:49:f5:
         b4:08:a2:84:fc:09:aa:1f:a4:de:de:bc:a4:f0:7d:cc:ff:18:
         93:40:e2:61:66:77:82:0d:3d:d2:cf:ed:3d:b5:63:65:73:5a:
         a0:11:5d:03:84:31:9d:74:a7:52:48:6d:af:56:d9:ef:c9:8e:
         5c:d3:35:07:c6:5e:8c:26:98:32:a8:a0:56:b2:61:63:c5:e2:
         34:92:e0:6c:1a:1a:ed:b4:81:9e:79:33:ec:be:63:a6:a9:df:
         ba:78:d3:80:62:f8:f6:be:7e:35:32:e6:a4:1b:d8:f8:7e:90:
         29:b0:15:55:1c:39:7a:64:31:eb:84:e9:10:5b:ef:65:66:03:
         cb:d4:a1:c5:3b:80:ef:2b:4d:c4:3f:7f:53:fb:45:1a:4e:75:
         a1:bc:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:20:52 2025 by rpki-client