Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/7f1e737c-bbf4-354b-8249-4f3d124c9b30.roa
File:                     7f1e737c-bbf4-354b-8249-4f3d124c9b30.roa (raw, json)
Hash identifier:          Dyr6fU3ltNTP4lhXx7P4UqDi2kbw1lscNHxnN2ThPQ0=
Subject key identifier:   10:92:D8:B1:70:35:66:44:D3:F1:C4:5D:A6:29:2F:33:E7:98:6F:84
Certificate issuer:       /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Certificate serial:       010D0C9F43285849A1EF76C57515ACC9348BE800
Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/7f1e737c-bbf4-354b-8249-4f3d124c9b30.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     213856
IP address blocks:        23.151.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:76:c5:75:15:ac:c9:34:8b:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=5ba6bab2-c38b-4cba-9ef5-54090178001c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:05:a8:30:00:aa:16:06:fd:bc:64:47:1d:71:
                    4a:99:af:76:b7:ba:0f:02:43:c3:c3:b5:ff:6c:c5:
                    59:21:68:2b:ab:ff:85:de:8a:1e:78:09:59:a9:ed:
                    be:72:7a:dd:95:9b:ef:43:d7:75:71:a8:bb:fc:04:
                    87:39:0a:ef:1a:82:d2:d7:b1:8a:96:64:4c:35:69:
                    1c:51:20:b4:de:1d:44:99:bd:b4:03:bd:c3:01:fe:
                    16:bd:6c:76:d4:f8:7c:a0:ac:9e:41:4a:9f:0e:8d:
                    e6:8c:90:78:a3:0a:33:c2:ac:64:52:7e:8e:dd:24:
                    e0:49:dc:b0:38:04:12:bd:66:8f:42:12:a2:60:0d:
                    b2:70:98:13:85:49:24:a4:a9:ce:41:3b:1f:04:cc:
                    41:02:3a:e8:ac:7a:ce:bd:21:27:79:b7:ed:ad:a3:
                    8c:fb:bc:37:60:45:f1:ce:ff:57:46:06:f2:23:eb:
                    36:67:3e:43:11:c2:63:ad:fe:62:99:a1:de:82:1f:
                    88:e2:f7:26:b0:16:b0:0d:6e:8f:0e:2f:43:f1:0f:
                    e3:31:0d:de:81:be:d2:c8:d5:14:6c:95:fe:b2:d7:
                    de:b2:be:cc:c3:e9:8f:a4:a3:80:7a:22:a6:da:4e:
                    05:ad:a4:72:14:22:7b:af:d6:77:c7:74:13:f1:b4:
                    73:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:92:D8:B1:70:35:66:44:D3:F1:C4:5D:A6:29:2F:33:E7:98:6F:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/7f1e737c-bbf4-354b-8249-4f3d124c9b30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl

            X509v3 Authority Key Identifier:
                keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:cc:02:ee:53:3b:d4:cb:14:78:75:53:29:e6:fc:66:75:31:
         1b:ea:7e:4d:c6:42:34:cc:a0:fe:8b:98:e2:38:bc:ff:b2:65:
         a1:70:72:47:18:55:72:07:7f:47:00:0a:ac:36:c0:60:16:0b:
         3a:bc:3e:cd:3e:91:89:6a:ff:cf:60:04:57:a7:da:1b:5d:26:
         8b:29:35:72:1e:1b:7f:88:a7:60:0c:d7:37:8e:fe:44:80:a0:
         f6:d7:77:eb:d3:da:03:ff:86:de:76:b1:81:53:72:13:a0:8e:
         c3:4f:f0:ac:9f:ac:1b:7d:e1:69:e0:8e:9d:00:ce:5a:2c:09:
         aa:d5:1e:a7:52:d7:37:ef:c6:8a:20:97:4f:4d:d3:10:42:a3:
         bc:3a:08:4d:5c:77:70:13:15:de:19:38:f1:04:ba:0f:d3:1d:
         9e:66:d5:fd:a0:cc:97:59:ee:c5:15:88:1e:88:93:5f:8d:a1:
         4b:89:20:7c:e5:5b:98:23:31:fb:4b:c0:94:50:6f:3b:36:1e:
         0b:95:9b:df:63:31:87:12:58:1f:32:81:0c:f1:cf:bf:17:69:
         8a:4d:19:fc:98:8e:05:e6:1d:28:b1:13:2d:0c:f2:94:a5:af:
         80:b4:3d:8a:b4:81:f6:7c:45:f0:a0:6a:37:e8:11:7e:0c:5f:
         41:6b:e6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:11:46 2025 by rpki-client