Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/98ac1ad7-32f8-34d7-8048-09340f8a5b09.roa
File:                     98ac1ad7-32f8-34d7-8048-09340f8a5b09.roa (raw, json)
Hash identifier:          5jygmAIZKYxPpAedVfLT482qy/hw9pdk1ZfHj9LzbVo=
Subject key identifier:   94:D7:A2:EA:82:7F:63:5D:7C:DF:AD:BD:F6:96:54:7C:EF:7B:E2:89
Certificate issuer:       /CN=c9f25ce3-01f4-4dff-bf38-059af5b64d3b
Certificate serial:       010D0C9F43285849B14A0C8C36FE9532A3018700
Authority key identifier: 22:5A:CC:2D:57:96:FF:3A:CE:BC:72:6B:24:0F:D9:DB:23:9A:D2:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/98ac1ad7-32f8-34d7-8048-09340f8a5b09.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     11925
IP address blocks:        23.163.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0c:8c:36:fe:95:32:a3:01:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9f25ce3-01f4-4dff-bf38-059af5b64d3b
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=44b81fcc-76a3-48e9-80dc-5f5060d8fcfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:91:5e:ce:26:12:22:ab:74:59:1e:0d:35:
                    b1:76:90:41:fc:94:88:e6:b7:30:c4:44:68:a4:97:
                    08:eb:2e:dd:c9:ad:fa:93:bc:4b:f0:6e:2a:41:7a:
                    9d:5f:00:32:67:dc:4b:05:29:57:e7:ee:86:46:9a:
                    ba:b6:f4:56:a0:29:bb:83:69:5c:1c:78:e2:c2:ee:
                    c4:3b:f6:93:93:d2:6a:77:6e:1d:99:1b:ee:8d:0e:
                    90:3b:f0:8e:74:b5:12:e4:bd:89:13:6c:ca:b5:47:
                    8c:41:04:29:66:a6:f9:18:a1:69:2e:32:4e:d9:b7:
                    76:00:4b:37:52:09:f8:f1:75:bf:94:6b:df:63:1c:
                    ee:c9:dd:9e:d4:f1:d9:c9:88:8a:2e:a6:8a:d7:fa:
                    c0:34:a5:aa:a4:f2:4a:91:e9:3e:de:d9:ff:c0:6f:
                    09:d7:df:d8:19:4b:99:9f:52:88:64:99:d5:48:14:
                    ea:21:40:c3:4f:8e:35:3b:c1:66:dd:f0:ae:81:15:
                    c4:8e:c7:d9:43:01:0a:51:64:66:8b:39:b7:fd:3a:
                    8e:79:26:f1:32:83:46:e9:8b:1f:d2:73:6f:88:55:
                    56:5e:0e:4b:f2:10:4f:ee:57:94:b7:0a:cb:32:7e:
                    f3:01:12:5d:46:70:ac:d1:71:c1:2c:2c:cd:48:1c:
                    2a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D7:A2:EA:82:7F:63:5D:7C:DF:AD:BD:F6:96:54:7C:EF:7B:E2:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/98ac1ad7-32f8-34d7-8048-09340f8a5b09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.crl

            X509v3 Authority Key Identifier:
                keyid:22:5A:CC:2D:57:96:FF:3A:CE:BC:72:6B:24:0F:D9:DB:23:9A:D2:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:7a:d9:9e:bf:b4:16:69:69:40:23:d5:69:05:63:be:7c:b7:
         f5:7c:6b:72:b9:85:68:73:8f:23:eb:26:eb:24:32:e2:47:47:
         1a:33:22:2b:6f:66:3e:6b:1e:04:ec:02:ed:f1:83:b6:b6:dc:
         ef:ea:73:5c:eb:9b:8c:bf:3e:f0:77:08:64:06:9e:8d:01:e4:
         7e:76:9d:05:a1:8d:bf:7f:4b:76:0b:58:09:79:4c:e4:3f:3c:
         b2:a0:ff:e8:59:13:f0:1f:37:47:19:bb:d0:a8:ba:f1:97:23:
         6b:67:20:f4:d5:91:c9:5a:ca:9b:28:b1:9b:85:a3:bd:2c:b6:
         0a:b4:72:70:49:9a:72:c6:f8:7d:53:ad:a0:f2:a8:d4:70:6e:
         6b:fe:af:40:ab:ea:72:8b:09:5d:33:f0:7b:49:40:59:3c:be:
         84:75:5a:14:a4:42:0b:9a:84:d1:a9:4c:bc:95:e8:a8:07:9b:
         72:27:91:ad:43:7b:c5:19:cb:01:e6:52:b6:1f:1d:5d:77:5e:
         14:ce:33:0f:32:61:c7:5e:0f:ef:e9:3d:2a:a9:be:99:6f:47:
         d5:c4:3b:07:82:ae:c2:df:cb:17:0a:9d:8a:1b:77:d9:81:1f:
         ba:5b:7c:0e:a4:50:9f:6a:99:08:8c:aa:94:7b:0d:9a:78:fb:
         17:9a:12:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:55:50 2025 by rpki-client