Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/ae0349fc-611a-3439-9447-27e75e0eb016.roa
File:                     ae0349fc-611a-3439-9447-27e75e0eb016.roa (raw, json)
Hash identifier:          eDnWx/l2WcqcmCVqViy2jE4hxFZwgj+sn2QqWJRKzXE=
Subject key identifier:   56:2E:D9:71:12:9E:D7:6E:8D:CB:41:D0:FD:F2:63:EB:52:00:6B:AA
Certificate issuer:       /CN=e618da9e-0816-460e-9515-1743f366bdc6
Certificate serial:       010D0C9F43285849B149EA5463FACC146772C240
Authority key identifier: 25:1B:3B:D4:61:2C:93:3C:6B:18:D0:53:DA:75:11:03:2A:67:3C:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/ae0349fc-611a-3439-9447-27e75e0eb016.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     210000
IP address blocks:        23.142.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/e618da9e-0816-460e-9515-1743f366bdc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/e618da9e-0816-460e-9515-1743f366bdc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:ea:54:63:fa:cc:14:67:72:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e618da9e-0816-460e-9515-1743f366bdc6
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=9ad41bc6-7233-4530-8197-ce7ab3caea21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f4:c3:14:f7:b5:62:81:62:49:35:28:c7:01:
                    37:83:14:2e:03:78:59:15:c0:ef:a5:c4:64:0d:bd:
                    6e:80:7a:76:84:07:7c:3d:94:4b:60:20:0b:0e:16:
                    f5:18:98:75:ff:33:11:96:19:fe:9c:95:3e:c8:de:
                    b0:6b:ab:ef:88:d1:e7:ae:67:eb:b7:cb:1a:c8:69:
                    cb:67:cb:bc:19:7a:80:98:b4:ae:e5:1f:53:61:ec:
                    e2:9b:36:4d:58:c0:47:a6:82:9d:6c:15:46:c5:4b:
                    b3:46:aa:c1:81:92:ac:b5:14:05:91:9c:c6:81:cc:
                    b6:64:bd:5b:aa:83:94:3e:e4:6f:7e:c0:85:8e:ac:
                    06:0f:31:ea:8f:a9:87:44:55:97:8a:3a:ed:fc:87:
                    85:a3:30:25:79:11:fb:cc:77:69:7e:d6:59:80:de:
                    b1:9e:3e:9a:10:64:60:00:22:c8:ea:77:66:5c:c5:
                    01:7a:5c:03:75:c9:4d:83:f2:ec:ea:51:1a:dd:63:
                    28:cb:23:81:f9:fb:e7:99:86:c8:6d:ad:f9:04:fa:
                    ad:3d:77:ab:bf:2d:5f:0e:0b:42:c6:15:70:15:92:
                    ea:f4:10:1f:ba:69:98:e4:e7:a4:58:bd:4f:9b:7b:
                    3e:59:8f:4d:8a:29:fa:62:bf:d6:e5:92:dd:8e:4a:
                    68:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2E:D9:71:12:9E:D7:6E:8D:CB:41:D0:FD:F2:63:EB:52:00:6B:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/ae0349fc-611a-3439-9447-27e75e0eb016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/e618da9e-0816-460e-9515-1743f366bdc6.crl

            X509v3 Authority Key Identifier:
                keyid:25:1B:3B:D4:61:2C:93:3C:6B:18:D0:53:DA:75:11:03:2A:67:3C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:0a:10:1d:be:16:57:3e:11:34:20:42:58:15:a0:ea:bd:1a:
         c3:ae:b8:e3:9e:35:bb:40:c7:67:20:ce:5f:61:8b:18:b3:09:
         9e:f4:57:d8:46:28:65:0e:0c:9e:e0:82:cc:93:a7:fc:ae:84:
         5d:cb:20:4d:89:cc:0d:57:98:ee:ab:4b:ee:24:e6:d1:bf:24:
         5d:27:5e:2a:66:51:83:d4:9b:cb:ce:ad:02:57:11:d3:fd:8c:
         ef:ba:32:d7:34:e7:31:17:1c:9f:0f:35:47:fe:b5:07:85:78:
         38:c1:70:f0:29:2e:45:cc:85:e1:42:51:64:05:2b:47:2f:d9:
         68:fd:01:cf:9a:94:14:85:36:27:34:7f:6f:a4:d9:fb:af:75:
         27:14:92:06:25:61:a2:6a:2e:52:1e:9a:84:f1:64:ef:15:c5:
         17:e7:79:4b:3b:5a:81:b3:f4:72:df:4d:a7:0d:c3:44:5d:7e:
         4b:fb:10:58:2a:03:2d:b8:5c:00:f2:63:45:90:8d:c8:a8:33:
         de:e2:40:22:44:0f:34:3b:86:e1:76:34:11:2c:93:c0:7f:58:
         da:ba:12:df:cf:ac:c0:c7:4a:ed:1f:db:f6:fd:93:a4:30:82:
         91:06:6d:c6:60:ec:2a:69:d8:e4:29:60:d0:2a:cc:4d:17:86:
         dc:7b:40:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:24:20 2025 by rpki-client