Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/13156011-7624-36a7-93ec-fb2c055d8fd0.roa
File:                     13156011-7624-36a7-93ec-fb2c055d8fd0.roa (raw, json)
Hash identifier:          z/4H3o+AR3ujZ5oB/Y/r2k3+w++A6QhkvXp882BKRu4=
Subject key identifier:   02:E1:74:52:49:D3:E0:0E:68:B3:33:3F:3D:57:C2:E0:37:29:8E:8B
Certificate issuer:       /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Certificate serial:       010D0C9F43285849E761B854D8C62F35CC8480C0
Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/13156011-7624-36a7-93ec-fb2c055d8fd0.roa
Signing time:             Mon 19 May 2025 10:02:27 +0000
ROA not before:           Mon 19 May 2025 10:02:27 +0000
ROA not after:            Sun 17 Aug 2025 10:02:27 +0000
asID:                     55799
IP address blocks:        23.154.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:61:b8:54:d8:c6:2f:35:cc:84:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
        Validity
            Not Before: May 19 10:02:27 2025 GMT
            Not After : Aug 17 10:02:27 2025 GMT
        Subject: CN=f29ccee8-4928-4525-bcf6-beabfa496433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:95:10:a0:f1:15:b8:49:19:2a:9d:b2:37:
                    0c:d9:88:9d:0b:dc:fc:6b:1d:9a:5b:05:00:22:8d:
                    f1:41:61:64:d2:74:0d:15:d0:dd:14:98:f6:8e:1d:
                    b0:15:c6:60:21:97:cd:3f:e1:ae:de:6a:d1:2f:80:
                    d3:08:dc:87:d8:d5:7e:b2:53:77:8e:ca:d6:1f:e5:
                    70:e4:83:88:ac:6d:41:e7:8c:a0:c1:05:7f:a8:75:
                    9f:e4:3f:c0:44:79:7e:36:0d:9b:3d:7d:e4:b5:67:
                    4a:0c:be:b4:2b:e2:bf:21:ad:59:04:9a:9f:9f:86:
                    66:b4:f6:c5:76:01:7d:6e:75:75:d7:ed:47:d9:66:
                    d6:8d:cd:4d:00:bd:01:70:22:14:68:42:e5:e8:e9:
                    45:0f:99:e5:a2:8d:8b:6b:2d:d8:28:7c:93:34:a9:
                    e4:d2:41:74:2a:08:22:2e:d0:86:54:b8:0b:02:13:
                    c0:69:38:25:f6:17:3f:e1:d0:b7:88:d1:46:b8:d6:
                    83:75:a8:2b:1c:9d:c0:32:6c:da:05:bf:e9:41:a7:
                    e5:4b:c5:d9:55:cd:69:fc:61:61:63:d2:55:6e:0e:
                    fa:75:f5:f4:43:9e:10:b2:e6:da:a3:06:65:60:ff:
                    71:41:ea:9c:fe:ab:e4:3c:30:d6:33:b4:a2:f0:68:
                    93:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E1:74:52:49:D3:E0:0E:68:B3:33:3F:3D:57:C2:E0:37:29:8E:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/13156011-7624-36a7-93ec-fb2c055d8fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl

            X509v3 Authority Key Identifier:
                keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:4b:0b:da:78:38:c6:58:51:f9:5b:e5:c6:68:ba:3f:d3:1b:
         3e:18:e4:ac:08:8d:63:94:96:e4:a8:16:1b:e7:3f:bd:74:aa:
         22:84:98:ca:3d:15:f9:90:17:6b:95:98:fc:b9:7b:f4:4a:75:
         51:68:f6:20:29:e0:2f:36:52:83:b0:40:75:98:e1:fe:c4:9d:
         e3:a0:13:26:cb:cb:bc:56:9d:5c:ca:3d:d5:4d:f1:9a:56:d8:
         8b:86:c3:29:b6:0d:69:31:bb:6b:50:d1:e6:b0:e7:37:d8:92:
         03:c5:ce:3d:a5:3d:f9:3a:7e:cd:16:95:a6:ea:bd:ba:44:87:
         46:9a:2b:9b:88:45:6d:2d:bd:61:b2:b2:0a:c9:c9:3f:51:e7:
         8a:a7:10:ed:94:cb:03:f4:d9:3f:3a:36:c9:b7:e1:48:83:be:
         a0:43:ea:82:b9:ee:70:15:9b:47:84:ef:0e:20:c2:38:55:ef:
         cd:eb:5f:a6:73:dd:db:39:f5:0f:59:92:fe:9e:ec:76:5d:bb:
         d8:d7:d5:68:4e:4f:89:05:89:72:46:a6:ab:75:49:2a:e7:93:
         69:c9:ba:b6:9a:2b:df:72:21:c3:7e:05:9d:c6:36:77:42:9e:
         c3:91:fe:99:4b:7b:e7:39:eb:8b:19:3a:bc:28:21:d4:02:c8:
         1c:e3:a0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:45:23 2025 by rpki-client