Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/053e21d2-df36-3335-adc2-8524bf1355a2.roa
File:                     053e21d2-df36-3335-adc2-8524bf1355a2.roa (raw, json)
Hash identifier:          Vt5czq6KqfI7hD029rSS4fpnaFimchd+6fS/2qEdujs=
Subject key identifier:   9E:94:FB:9A:5B:76:81:A7:EA:83:53:5D:6E:6C:DC:D2:A1:A6:DB:04
Certificate issuer:       /CN=13c2bd37-5092-4959-a489-318c7da33b9d
Certificate serial:       010D0C9F43285849C4D4C0937E34E5F880B5A8C0
Authority key identifier: 4F:3C:1C:3D:A6:CA:80:4F:31:8F:EE:4D:80:6D:31:87:3E:86:E6:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/053e21d2-df36-3335-adc2-8524bf1355a2.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     151338
IP address blocks:        23.145.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/13c2bd37-5092-4959-a489-318c7da33b9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/13c2bd37-5092-4959-a489-318c7da33b9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c0:93:7e:34:e5:f8:80:b5:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13c2bd37-5092-4959-a489-318c7da33b9d
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=fdc67137-39d8-4451-8e3b-9aa8a160f5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:89:03:ce:06:0d:02:aa:8b:2e:f5:1e:6a:
                    b8:7a:08:3b:b0:b0:30:dd:a2:22:e7:83:16:a2:b1:
                    92:35:22:75:7a:6c:96:0c:68:d2:f3:ee:cf:87:6f:
                    f5:f0:24:fc:2c:de:e1:b5:3d:ef:bd:98:2b:72:de:
                    10:fd:ed:34:22:bc:d3:f1:1c:aa:c9:09:f3:0a:f2:
                    40:f6:c0:6d:3b:e1:b5:10:3a:45:0e:15:ad:3d:3d:
                    63:1d:81:4e:87:90:27:a8:2b:36:de:84:0a:d1:c8:
                    f1:0b:2c:38:76:0c:70:e6:2e:87:ca:f7:fe:b0:cd:
                    07:f9:30:27:ce:2d:5b:36:79:9e:1b:67:15:81:63:
                    f4:a5:46:2e:4a:f1:4f:46:75:5b:70:aa:ef:9c:3b:
                    80:c8:21:62:68:00:9b:33:de:2e:7c:30:f5:a8:9e:
                    b0:e7:48:48:02:1e:2e:84:77:e3:36:97:ee:87:2f:
                    8c:90:ee:49:8a:ca:62:e5:a6:c5:d4:ea:34:a6:9e:
                    b7:f9:ae:d2:c1:98:eb:bd:b9:c4:6e:45:4b:ad:97:
                    c2:b2:41:fd:c2:a9:7a:ce:8c:4f:ef:82:1e:5d:37:
                    9f:b2:1f:08:82:c0:ff:39:c7:e7:7f:9b:40:76:d6:
                    40:0f:4f:4a:af:50:1d:77:32:a9:22:66:47:d9:4b:
                    d1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:94:FB:9A:5B:76:81:A7:EA:83:53:5D:6E:6C:DC:D2:A1:A6:DB:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/053e21d2-df36-3335-adc2-8524bf1355a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/13c2bd37-5092-4959-a489-318c7da33b9d.crl

            X509v3 Authority Key Identifier:
                keyid:4F:3C:1C:3D:A6:CA:80:4F:31:8F:EE:4D:80:6D:31:87:3E:86:E6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e4:59:80:6c:6a:7e:0f:ca:aa:32:37:12:f4:39:9c:8b:c7:
         82:b5:b7:fc:be:d5:16:89:d9:6a:b5:66:2c:7a:cd:d5:44:ca:
         d9:c1:f2:72:f1:54:91:d6:e2:0d:ce:29:50:89:d0:f0:e3:bf:
         9c:55:7f:14:eb:ca:38:cc:95:d5:e3:09:6e:b8:87:45:6b:32:
         29:76:aa:29:69:e9:96:14:a4:b0:de:fd:8b:85:e2:d5:87:1b:
         81:cd:5c:ad:0b:3b:e3:b9:a2:73:c3:13:06:22:94:3d:58:40:
         73:3a:2c:83:74:42:3d:9c:2c:aa:53:2d:2b:91:9c:69:9e:97:
         b0:ed:b8:35:73:71:3d:ff:45:28:75:20:f9:17:d0:ea:fd:11:
         9e:52:25:cd:ef:a1:b7:34:2f:a7:7c:46:08:30:b6:6a:97:59:
         64:e1:0d:b3:97:3e:5d:c4:a5:ab:3d:a1:46:2b:59:5b:02:7c:
         30:10:a5:6c:f3:dd:39:d7:80:2d:6f:c2:9e:29:47:ef:f7:5f:
         34:13:9f:e4:f5:b9:0e:b9:d0:46:ff:6f:48:d4:26:ce:41:f8:
         a0:5c:b6:79:dc:f9:b1:14:3e:33:f0:05:3a:29:bc:46:83:2a:
         de:66:42:7e:dc:43:36:b7:78:23:94:1f:1d:47:6b:93:d5:7d:
         7e:8b:1b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:58:10 2025 by rpki-client