Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/81d5d23e-e749-3cdd-90a2-d46ba8244068.roa
File:                     81d5d23e-e749-3cdd-90a2-d46ba8244068.roa (raw, json)
Hash identifier:          HDaG1M29NsMTh2uphX1Tq+VHrjOfg4y3ggYU7gwawQc=
Subject key identifier:   70:B3:11:9F:7F:76:56:1E:CA:59:6A:63:17:7D:FF:19:68:BA:A4:1A
Certificate issuer:       /CN=d1d7a311-3518-44d2-aa48-eeb29263a6ad
Certificate serial:       010D0C9F43285849CBF4709AC3B564FBC1A9E300
Authority key identifier: C6:19:92:97:0B:64:4A:02:05:AF:C4:76:63:8A:B2:F5:EC:C3:A2:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/81d5d23e-e749-3cdd-90a2-d46ba8244068.roa
Signing time:             Fri 09 May 2025 14:15:26 +0000
ROA not before:           Fri 09 May 2025 14:15:26 +0000
ROA not after:            Thu 07 Aug 2025 14:15:26 +0000
asID:                     53850
IP address blocks:        23.129.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:f4:70:9a:c3:b5:64:fb:c1:a9:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1d7a311-3518-44d2-aa48-eeb29263a6ad
        Validity
            Not Before: May  9 14:15:26 2025 GMT
            Not After : Aug  7 14:15:26 2025 GMT
        Subject: CN=5aac4dd5-772a-4d82-a574-5b5bca470b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:aa:78:5e:2e:74:0f:54:91:84:a6:f3:b4:81:
                    10:9e:33:0e:6d:06:1d:6b:83:70:04:5e:98:30:48:
                    6b:cf:9c:c3:7a:05:b7:d3:9f:3b:9a:5d:9a:59:29:
                    78:34:e3:9d:03:b0:c2:4a:b2:49:c4:8a:d2:dc:95:
                    b1:3c:51:2d:85:dc:51:be:fb:f7:3f:71:a4:b2:b7:
                    9b:2b:1e:78:3b:a5:92:81:d3:87:b4:d0:05:9b:b3:
                    9a:23:73:18:d2:0c:72:09:c5:3c:2f:95:f5:0a:e4:
                    eb:af:36:3f:45:92:2c:c4:55:e6:38:ff:9f:a0:ac:
                    0e:92:3e:e2:5d:6c:e8:84:c2:e7:16:80:8d:69:0e:
                    a1:e3:74:11:00:6c:17:f8:f2:0c:8a:50:fa:66:e1:
                    b5:87:37:b6:b7:b5:a6:3b:21:1e:56:4c:8f:cd:f2:
                    04:c4:7a:ab:07:05:8e:6e:dd:a5:6f:69:82:30:c4:
                    98:25:18:ad:8e:0d:c0:e6:93:80:8f:48:a4:11:4e:
                    d4:2d:eb:13:83:f7:66:8a:40:35:d2:ba:c2:90:60:
                    be:99:6c:d4:27:c8:93:18:bf:a8:65:5e:9c:f3:a1:
                    06:80:ad:f3:a8:f3:0b:99:74:96:a0:74:04:de:88:
                    71:df:26:7b:c8:cd:61:31:4a:b2:43:38:98:ba:74:
                    8d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B3:11:9F:7F:76:56:1E:CA:59:6A:63:17:7D:FF:19:68:BA:A4:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/81d5d23e-e749-3cdd-90a2-d46ba8244068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.crl

            X509v3 Authority Key Identifier:
                keyid:C6:19:92:97:0B:64:4A:02:05:AF:C4:76:63:8A:B2:F5:EC:C3:A2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:bd:ef:98:1e:6f:01:58:84:2c:3b:4c:aa:a9:ef:8f:01:a1:
         4f:f3:ac:68:35:b5:ae:97:74:13:3d:83:57:44:6d:c9:d9:a3:
         21:6b:c4:ed:a5:69:09:55:05:99:e7:3e:35:80:0e:42:95:8f:
         f3:17:40:2f:96:c1:b3:ca:a8:af:c3:10:f1:fe:a1:f6:57:d4:
         ce:cd:0c:4d:7c:b6:47:e9:97:f4:61:2d:fd:b0:ee:da:c8:11:
         4b:97:40:64:89:e5:39:9a:4e:90:8f:0c:9d:d8:db:b6:1f:5d:
         95:52:2a:3a:f5:f0:b0:e1:0b:fc:c6:aa:d4:38:c9:d1:a4:6b:
         dc:d2:38:bd:d4:3b:91:14:c6:ed:8a:22:92:15:09:5f:87:4f:
         f3:02:37:7d:30:28:40:e6:0e:31:a8:67:33:44:7b:88:a9:4a:
         4f:75:7f:8e:10:e6:01:58:87:92:2c:a6:4d:30:1c:80:e0:c9:
         d6:4d:23:5c:3c:29:d6:3b:aa:ea:84:11:d4:db:61:bc:e7:42:
         2f:a2:be:4e:02:cc:3d:4b:ce:f8:fd:a2:4c:bd:ac:48:2e:a2:
         25:be:32:9c:14:14:d5:d2:89:8c:55:c8:db:8b:42:72:a0:41:
         38:25:91:35:95:1a:97:75:7f:c7:2f:c1:e6:0b:09:7e:29:f4:
         fd:ad:ec:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:12:12 2025 by rpki-client