Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa
File:                     2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa (raw, json)
Hash identifier:          vpmMxb70UQkarurLESefCAr4WQVPQeEedfsrW5ofe9A=
Subject key identifier:   CA:E1:73:D9:65:B0:9B:EF:DA:CD:20:32:00:99:66:CF:EE:8F:3C:58
Certificate issuer:       /CN=1fe238c2-2a2c-4f20-9f85-52fb8a42c304
Certificate serial:       010D0C9F43285849D4CBA56CFA2E4CC9F8339580
Authority key identifier: 59:9A:CC:25:E2:65:32:75:63:E8:D1:D7:A3:E5:A3:B1:BF:FE:A0:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa
Signing time:             Mon 12 May 2025 18:15:31 +0000
ROA not before:           Mon 12 May 2025 18:15:31 +0000
ROA not after:            Sun 10 Aug 2025 18:15:31 +0000
asID:                     203062
IP address blocks:        23.138.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:cb:a5:6c:fa:2e:4c:c9:f8:33:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe238c2-2a2c-4f20-9f85-52fb8a42c304
        Validity
            Not Before: May 12 18:15:31 2025 GMT
            Not After : Aug 10 18:15:31 2025 GMT
        Subject: CN=ba0f3d53-7f7f-4b30-aacf-9768b56d4f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:a9:e2:14:6d:b2:81:18:fc:26:a5:59:31:
                    47:40:b1:71:84:e8:d7:11:f5:7f:f1:a1:fc:2b:d4:
                    0c:c2:b2:68:17:38:c4:60:fa:0f:36:91:76:13:ee:
                    c2:45:c7:9c:4e:28:1d:7b:29:47:16:53:08:2d:95:
                    d2:71:5c:85:a1:55:47:de:1a:47:a0:fa:d7:bc:3e:
                    06:53:d7:6a:67:41:72:de:9e:05:31:dd:60:4f:f0:
                    81:95:67:a8:f9:d4:e6:0f:99:7e:db:ed:d1:b3:8a:
                    7c:80:1c:b4:dc:38:fd:d5:67:87:5c:1b:cc:59:3a:
                    67:f5:95:b2:0e:87:3f:03:eb:4e:21:65:40:f6:d8:
                    21:e6:31:1a:c8:95:12:e0:8f:f4:7c:91:5a:a7:f4:
                    8b:a5:13:0d:2a:4d:e5:9e:89:9f:83:ae:6b:db:ca:
                    73:6e:e8:5c:12:fd:93:7c:d2:bb:e7:5d:92:de:a0:
                    e4:8e:4c:79:4c:5e:43:62:8d:dc:54:26:bf:c1:9f:
                    f9:96:18:4a:d7:ae:f0:c9:a0:1c:5d:0e:e3:87:08:
                    22:ba:9a:5f:83:1e:6c:ee:a4:b4:af:07:df:c4:c9:
                    09:d6:e1:55:d7:a2:da:c3:ab:3d:cf:89:05:61:eb:
                    c9:11:c4:df:15:98:58:60:b2:7a:19:a5:8e:97:b3:
                    f4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E1:73:D9:65:B0:9B:EF:DA:CD:20:32:00:99:66:CF:EE:8F:3C:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl

            X509v3 Authority Key Identifier:
                keyid:59:9A:CC:25:E2:65:32:75:63:E8:D1:D7:A3:E5:A3:B1:BF:FE:A0:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:f6:6a:d6:d3:ce:68:91:3f:fd:f4:92:5d:f9:73:cc:75:78:
         12:c7:e5:cc:c5:cb:5f:54:35:b5:d5:4a:d9:aa:12:e9:d6:28:
         e3:df:9a:c7:4c:8f:4e:4b:a1:ce:ad:de:18:8e:47:f6:1a:54:
         26:3a:bf:84:8d:1f:4b:b3:33:40:0e:b4:d6:c9:47:23:a3:5b:
         52:cb:17:3c:4a:46:63:83:20:6c:7e:7a:43:d3:eb:88:f3:dc:
         52:96:db:a5:f9:fd:5c:14:e7:ee:5c:f0:13:34:1c:42:2a:ac:
         ba:20:ae:e5:a9:8c:13:21:ae:87:85:b1:0d:f4:e6:ec:5b:52:
         ba:c2:60:01:8c:a6:3b:9d:9d:a4:99:d5:bd:a7:a6:73:d9:18:
         a4:85:9e:36:2a:1f:ff:27:06:ff:95:66:59:90:42:60:01:c1:
         98:6a:fa:73:29:07:91:86:14:6a:a5:59:c2:19:05:8f:e3:ae:
         d2:c5:d1:42:e1:91:1e:a5:8d:2f:b6:7c:74:b7:ff:1a:a1:38:
         bc:42:da:52:52:60:51:1d:2c:8b:b5:07:11:1c:2c:71:58:36:
         b4:c2:32:6b:0c:c2:80:16:7d:9f:85:dd:ef:53:44:9c:d0:1c:
         6a:36:63:a4:7c:1e:3c:cd:25:91:9b:d4:8f:5f:0b:20:83:ef:
         01:fa:ef:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:01:12 2025 by rpki-client