Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/9a634cdb-3f00-32ed-b82a-68d49afe6ccf.roa
File:                     9a634cdb-3f00-32ed-b82a-68d49afe6ccf.roa (raw, json)
Hash identifier:          20ouQDHL78hxyX/Hnc9MrM/X24YFV/U9y9RLEoRYP3w=
Subject key identifier:   2C:91:3F:9A:9F:DE:DE:71:6B:9B:D3:8A:FD:9D:CA:79:29:09:2C:E2
Certificate issuer:       /CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
Certificate serial:       010D0C9F4328584A0D6A8B7EA16C9F4CC3D0BB00
Authority key identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/9a634cdb-3f00-32ed-b82a-68d49afe6ccf.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     22296
IP address blocks:        23.155.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:8b:7e:a1:6c:9f:4c:c3:d0:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=29f5777b-a001-4d36-8fef-925b15fccc9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fb:58:e8:4d:ab:90:04:de:96:fc:40:20:b7:
                    fc:20:1d:0f:86:ae:43:06:96:cf:1c:ce:c2:e5:b4:
                    e1:be:f0:4e:78:14:a7:ce:5d:b9:95:61:03:3b:14:
                    1f:6e:04:7c:8e:35:fa:43:68:01:6a:32:9c:55:56:
                    a4:51:b3:29:b1:cf:cb:31:77:87:0b:12:57:41:06:
                    a7:44:1d:a1:b2:e7:e7:38:d1:08:e5:70:45:bd:f0:
                    c0:22:48:62:9a:d8:67:54:46:8b:1f:20:85:43:aa:
                    f0:83:39:0c:6b:b3:ba:59:d8:21:25:3a:3d:d8:d6:
                    e3:e4:f0:87:35:2e:3e:61:df:c4:d5:69:a0:4e:47:
                    c3:05:ac:78:17:07:1b:0d:b6:31:18:d1:17:15:0d:
                    5b:57:6f:8f:de:e8:8a:d3:21:a2:35:5e:ae:87:53:
                    22:b3:4c:7a:b1:53:1a:35:ad:7e:69:66:52:a3:02:
                    c2:d2:f7:49:50:e6:99:a2:92:91:8e:c3:6f:78:f0:
                    a2:97:0e:84:76:ac:65:14:d6:2d:56:0d:f1:6d:68:
                    4a:9c:61:ad:ca:1e:a6:98:9a:ac:16:a7:a4:26:3a:
                    fe:97:d7:92:f2:df:6f:d9:19:ff:46:e4:0f:88:73:
                    e8:ab:5b:05:9d:2b:d5:23:1b:f4:9b:48:d4:ef:2f:
                    df:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:91:3F:9A:9F:DE:DE:71:6B:9B:D3:8A:FD:9D:CA:79:29:09:2C:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/9a634cdb-3f00-32ed-b82a-68d49afe6ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl

            X509v3 Authority Key Identifier:
                keyid:53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a6:c8:1c:fe:ac:92:df:0e:68:14:3d:fc:5d:fa:69:8b:4d:
         0c:6a:32:2b:d0:17:06:b9:4a:5d:5c:9f:2e:c2:04:ec:e4:41:
         d1:0d:87:5a:6f:97:1f:5a:38:69:24:4f:50:c6:c8:11:78:7b:
         75:9b:d9:86:ef:1c:7b:ca:6f:23:c2:fd:42:62:f6:8c:6f:db:
         f8:6c:bb:33:8b:b3:cd:b1:df:64:43:23:f7:68:39:b1:49:7d:
         21:5d:3c:0c:42:ad:2f:d6:ad:68:56:c2:81:7e:09:1e:7a:e3:
         a1:99:33:64:c6:0e:f1:4f:ee:5e:be:1d:18:2d:be:90:a6:0d:
         b5:8c:1f:03:0d:3a:6f:9e:21:62:76:7a:fd:85:da:19:e0:7a:
         2b:8d:20:f5:5b:24:ef:65:70:73:78:00:b2:d2:b5:97:89:71:
         fe:67:e5:21:12:03:d0:22:9f:66:46:a1:d1:ac:89:a9:2d:57:
         59:14:8c:52:59:b0:2e:b7:a3:21:cf:8e:da:c0:55:c8:b9:56:
         a9:d8:24:fe:4c:58:fa:ba:35:a0:85:e2:21:0d:1f:c2:1e:4e:
         ac:11:4a:a7:b8:00:d6:c8:43:23:ce:4d:d1:46:62:7e:47:8a:
         47:be:46:bf:4c:1e:f6:3f:3f:61:09:65:dd:d3:2a:f9:1b:67:
         6d:3e:f0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:08:10 2025 by rpki-client