Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/8b0ed026-e0d3-3184-87c2-e9755bc80733.roa
File:                     8b0ed026-e0d3-3184-87c2-e9755bc80733.roa (raw, json)
Hash identifier:          cVusFarJ5gJIUA+YzhmhAXfcf8HhwXHG7f+QPRZj0As=
Subject key identifier:   6D:0B:2D:6B:B5:1F:08:65:8F:72:74:FD:48:0E:2C:D6:52:E5:12:B7
Certificate issuer:       /CN=deaf388e-6941-424e-9f96-abe06598e29c
Certificate serial:       010D0C9F43285849D361E87EC23195DF58236B80
Authority key identifier: D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/8b0ed026-e0d3-3184-87c2-e9755bc80733.roa
Signing time:             Mon 12 May 2025 06:06:40 +0000
ROA not before:           Mon 12 May 2025 06:06:40 +0000
ROA not after:            Sun 10 Aug 2025 06:06:40 +0000
asID:                     401371
IP address blocks:        23.138.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d3:61:e8:7e:c2:31:95:df:58:23:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deaf388e-6941-424e-9f96-abe06598e29c
        Validity
            Not Before: May 12 06:06:40 2025 GMT
            Not After : Aug 10 06:06:40 2025 GMT
        Subject: CN=894e3582-a73e-484b-9f54-654a288b1cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:01:b5:d0:57:13:a0:e4:89:ad:97:67:b0:36:
                    0d:c2:5f:ac:ae:f5:4c:e7:8b:4d:95:51:a0:77:9d:
                    32:0f:ee:20:1f:45:1a:2c:06:c2:0d:0a:96:e7:01:
                    11:ac:df:b0:9a:6b:89:12:92:1f:e4:d8:8c:af:2c:
                    39:9a:ec:f5:d0:46:75:7b:79:ed:ff:c5:d2:75:97:
                    c1:08:12:1e:2e:e3:da:78:6f:24:fe:86:1b:43:59:
                    c6:9c:3b:44:08:52:3f:0e:d2:ec:db:ba:ac:1e:00:
                    ff:af:95:db:b7:35:fc:5c:df:08:d6:03:78:68:fc:
                    2b:1a:83:4d:5e:67:8e:5a:04:f5:75:67:be:6c:3c:
                    ca:ab:02:6c:29:ea:ae:a6:60:b4:47:5f:72:c9:a5:
                    9c:16:e9:af:8c:4d:94:8c:11:d3:70:41:c5:c3:99:
                    3c:81:be:96:2a:4c:65:0a:3d:84:b1:c5:53:27:4a:
                    79:3a:8e:4f:6b:cf:7f:37:fd:1a:d0:e0:71:3a:e3:
                    10:b7:8e:41:59:2f:10:23:95:54:11:1b:79:16:c2:
                    ed:51:ca:ac:51:3d:e1:8d:bf:d7:54:68:dd:51:0e:
                    ec:ce:92:ce:f6:62:a3:46:cf:16:86:bb:ab:0b:67:
                    98:1c:f0:35:8b:d3:3e:57:66:a5:68:c0:08:14:4b:
                    85:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0B:2D:6B:B5:1F:08:65:8F:72:74:FD:48:0E:2C:D6:52:E5:12:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/8b0ed026-e0d3-3184-87c2-e9755bc80733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl

            X509v3 Authority Key Identifier:
                keyid:D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:b6:05:5e:6b:dc:cd:f8:a3:eb:a7:a0:46:85:29:d6:c1:17:
         42:0a:6a:74:22:c3:cc:ba:aa:63:c3:2f:f2:fa:49:42:f9:8b:
         4e:8b:a0:b7:1e:69:6d:f5:f7:e7:72:5b:c2:39:55:ff:99:9e:
         7c:54:0b:71:06:e4:82:25:fe:ff:dd:71:b4:09:28:d1:8a:81:
         99:81:4f:19:4d:8e:34:aa:e4:1c:79:4b:91:7f:1a:3c:b1:3f:
         33:e9:77:f1:40:32:ad:11:73:b9:ae:ee:49:bd:e7:34:48:42:
         8b:b9:1d:90:cd:8c:fd:91:c0:1b:f8:b1:04:83:13:19:87:65:
         5a:be:ca:f0:e9:db:3a:85:f8:b1:09:8f:22:73:b4:f6:67:18:
         4e:f7:1b:43:04:a9:17:e2:35:05:c9:48:a7:dc:8b:69:c4:03:
         69:a7:88:d6:d8:b5:b8:8d:8d:60:59:d2:43:28:73:a6:bd:e7:
         c7:a9:e2:e6:07:f2:87:b7:dd:51:eb:ab:e2:6b:3f:77:c0:31:
         49:84:e5:fb:34:e8:19:e8:dc:37:f9:69:dd:99:49:a3:94:33:
         1d:9d:33:8c:d7:04:b2:8b:19:d1:ce:a4:d5:33:fe:c2:63:a7:
         97:ad:53:b1:f9:bb:47:ca:58:2b:48:82:fa:16:8a:75:01:81:
         0c:78:78:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:22:21 2025 by rpki-client