Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa
File:                     4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa (raw, json)
Hash identifier:          xyHZmQ0OSmujybBia/+rMaL7xpln7yrfm4LGdH4MoeY=
Subject key identifier:   BF:AA:8F:CA:43:C5:71:3B:04:31:A7:E9:18:86:FB:90:49:78:B5:7B
Certificate issuer:       /CN=cc195d24-8046-44e5-bf80-7bdde011ee7b
Certificate serial:       010D0C9F43285849BB0F7286FAA4143D847B9240
Authority key identifier: BB:88:F9:B7:DC:D8:C0:65:52:71:57:36:F2:60:0C:47:E5:8C:F1:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     400240
IP address blocks:        23.189.112.0/24 maxlen: 24
                          2620:9e:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:72:86:fa:a4:14:3d:84:7b:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc195d24-8046-44e5-bf80-7bdde011ee7b
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=c77b6e7a-52c8-4780-a7e1-2951ebbbc7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:15:b6:45:c9:9b:fe:2b:89:cb:a3:9c:24:
                    db:9c:e5:eb:1e:eb:cf:ca:a3:73:31:ca:54:77:6b:
                    b6:cb:98:7c:e9:2e:0f:e3:a7:9f:dd:35:ab:74:25:
                    de:f0:cc:42:97:3f:3d:60:61:b6:84:25:f1:f0:bc:
                    f7:60:2c:86:1f:6d:49:1f:21:fd:1c:e3:8a:f3:42:
                    3e:91:45:ab:c6:0c:06:df:53:80:33:fa:21:d0:05:
                    41:fe:ad:7e:a7:b8:4d:e0:99:7b:6a:54:d8:81:37:
                    a3:12:5c:0d:a0:0f:c5:fe:69:f0:85:87:9f:72:9d:
                    1b:1a:ed:b3:6b:b5:90:6d:4e:cb:d4:64:f2:8d:3a:
                    69:db:cd:68:2f:42:0f:da:cf:ad:77:45:b8:74:e4:
                    92:48:2b:65:f1:3e:82:e1:99:d0:47:ec:30:4c:03:
                    f6:b5:31:20:06:7c:05:19:ee:15:02:0f:fb:85:ff:
                    a6:d1:1e:8d:fb:94:65:25:b6:10:ee:60:ab:be:b7:
                    c8:f9:74:71:89:c1:30:3c:d9:95:d1:d0:dc:20:72:
                    cf:bb:78:00:ae:0c:8a:84:f4:ad:0b:26:6c:b3:4f:
                    b4:5a:ab:b7:0b:0d:36:4d:56:bd:17:e5:a5:bc:54:
                    6f:fc:ed:6b:9a:fb:35:2a:81:b2:41:5b:cc:d1:1e:
                    1b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AA:8F:CA:43:C5:71:3B:04:31:A7:E9:18:86:FB:90:49:78:B5:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:F9:B7:DC:D8:C0:65:52:71:57:36:F2:60:0C:47:E5:8C:F1:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.112.0/24
                IPv6:
                  2620:9e:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:89:d0:77:35:4b:63:84:66:22:da:d2:7c:bd:04:2b:33:2e:
         db:d1:a1:fc:e0:e7:5b:64:9f:ca:38:6c:60:31:af:ab:5f:a8:
         14:44:25:42:06:f1:35:3e:97:81:cb:d6:26:c1:8e:00:c6:0a:
         d0:ba:c6:52:1e:e0:0b:e3:14:a7:5b:74:d5:9c:76:e4:06:30:
         d7:75:fd:97:a6:40:4e:42:60:60:53:3d:e9:e0:b0:7c:01:90:
         0f:05:d0:c8:42:e9:cb:37:d2:2b:a1:0c:45:09:2b:61:91:3f:
         5e:bc:f5:b4:d8:d4:e2:16:eb:33:dd:b3:88:02:ed:8d:25:7e:
         43:9a:aa:d1:53:72:2c:41:1c:ac:84:24:2b:20:46:5d:8e:1b:
         13:f0:6a:9e:36:61:bd:78:63:5c:49:d1:a1:6b:3a:b9:8a:03:
         66:fe:3e:c1:fe:62:57:00:73:6d:40:93:3f:06:91:bb:83:68:
         10:86:4e:bb:e5:fa:2e:d5:62:96:09:af:8e:88:d7:21:14:77:
         3e:3d:0f:6a:b8:ce:1d:7c:bc:b8:75:6c:9c:76:41:ab:bd:1f:
         7e:b9:af:e8:86:df:24:fa:ec:22:15:8d:a0:75:e2:99:81:c1:
         75:30:05:6d:6b:25:ca:4a:61:d6:ed:da:95:98:c5:eb:16:df:
         b7:1b:ee:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:02:48 2025 by rpki-client