Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/3d670424-fd95-3967-bba2-b42dd43d4732.roa
File:                     3d670424-fd95-3967-bba2-b42dd43d4732.roa (raw, json)
Hash identifier:          YpFgjBdxSqw1om/XV0YwXBnlVyyWHIfnyRwT02nnjW8=
Subject key identifier:   C0:CC:B6:89:B7:A6:5F:D5:A7:1E:35:FB:C2:0A:57:B7:22:81:B7:65
Certificate issuer:       /CN=4316bfc9-2a2c-4138-ad58-ab51d7cc37d6
Certificate serial:       010D0C9F43285849C9A9E64F3DEFADAC83DBC3C0
Authority key identifier: 12:E2:5C:34:5F:1B:37:D1:DC:89:E2:16:D1:1A:07:C0:B5:BD:4C:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/3d670424-fd95-3967-bba2-b42dd43d4732.roa
Signing time:             Thu 08 May 2025 18:33:38 +0000
ROA not before:           Thu 08 May 2025 18:33:38 +0000
ROA not after:            Wed 06 Aug 2025 18:33:38 +0000
asID:                     212512
IP address blocks:        23.185.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:a9:e6:4f:3d:ef:ad:ac:83:db:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4316bfc9-2a2c-4138-ad58-ab51d7cc37d6
        Validity
            Not Before: May  8 18:33:38 2025 GMT
            Not After : Aug  6 18:33:38 2025 GMT
        Subject: CN=2332d556-b6a9-42c0-8f2e-6167d9651714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:13:2e:ad:71:25:5c:f6:9b:fe:6a:3e:cb:cf:
                    97:76:07:45:e9:6d:cb:f2:37:f2:b6:17:62:83:49:
                    18:8d:ad:0f:12:a0:1d:e2:6f:ab:c9:85:83:38:4e:
                    b0:fc:4d:c6:34:15:2b:e4:5a:0c:f7:cd:2b:83:3e:
                    89:44:e3:4c:10:28:ef:4f:e5:4d:31:77:49:fc:a8:
                    a5:8b:0d:52:2d:79:11:a7:a9:76:06:ac:1d:d4:62:
                    e1:cd:4a:88:5c:f4:7b:f9:d5:64:92:6c:2b:81:43:
                    d1:1d:4c:f6:47:50:93:69:30:6a:ba:46:48:b5:b9:
                    e7:98:fd:b0:6c:28:82:50:02:58:d8:53:57:c0:56:
                    94:e6:32:e6:89:dd:fc:a8:84:3a:aa:56:3b:4c:33:
                    d6:bc:d1:4d:02:91:c5:5c:ad:55:76:a7:67:59:4f:
                    76:82:03:87:bd:cb:aa:9b:7d:24:c6:26:f4:71:1d:
                    32:4c:e4:67:e7:31:97:37:c5:65:51:0c:6e:0d:35:
                    f7:9d:d4:f2:bb:41:0c:64:a1:2f:88:1f:51:7f:cc:
                    3d:a9:08:ce:35:74:18:ff:4b:ac:5f:13:4a:b9:68:
                    6e:bc:d0:f0:22:6b:e7:6b:ac:c7:1b:23:ac:a6:fa:
                    85:ab:83:91:ea:64:d2:82:f9:8a:29:08:ad:61:c7:
                    77:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CC:B6:89:B7:A6:5F:D5:A7:1E:35:FB:C2:0A:57:B7:22:81:B7:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/3d670424-fd95-3967-bba2-b42dd43d4732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.crl

            X509v3 Authority Key Identifier:
                keyid:12:E2:5C:34:5F:1B:37:D1:DC:89:E2:16:D1:1A:07:C0:B5:BD:4C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:10:3b:63:34:f8:48:88:5c:8a:f9:65:4c:75:2f:2d:c0:fb:
         bd:02:bb:72:8c:43:8d:67:5c:d5:0e:87:54:ce:ae:fb:51:03:
         5e:e2:4b:04:f9:bb:cf:9f:4d:e7:68:0c:2c:ad:59:f1:36:e7:
         f9:d7:da:f0:2f:fa:8f:7d:10:27:ef:14:fa:a9:42:27:c7:1b:
         b3:fd:79:d9:31:85:44:49:04:2c:a8:3d:9e:60:99:fc:50:e4:
         45:1e:79:12:b0:e4:c9:3e:cf:3d:58:50:89:85:93:2f:74:dc:
         66:91:3d:d5:e0:4d:a2:39:a1:b9:6a:35:b3:66:17:63:19:2b:
         35:42:6b:1e:7d:b6:73:e4:60:55:64:a7:a5:c3:9d:c5:5a:62:
         fc:57:6e:cd:14:4f:8a:bd:bc:05:a9:c0:52:d3:a5:87:05:1a:
         d2:a0:6e:6b:12:0a:74:b7:5b:a6:1f:f2:48:9e:e2:62:16:1d:
         c3:d1:f5:21:0b:45:22:ee:39:94:f1:07:48:ac:8b:c9:0b:15:
         64:16:b9:0f:26:02:b4:55:b7:e5:a9:a0:93:e4:e8:68:fe:b8:
         7e:2f:8f:36:ec:67:c4:ea:94:3b:ff:5b:fb:cf:5b:2d:3f:20:
         4e:11:a4:7b:f6:86:27:a6:52:1d:b0:8f:91:ff:c4:20:a9:00:
         ed:20:b8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:01:31 2025 by rpki-client