Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/1c1f05e7-5441-371b-94af-1c37f52a9bbd.roa
File:                     1c1f05e7-5441-371b-94af-1c37f52a9bbd.roa (raw, json)
Hash identifier:          nn2MznB1Xqpnb6rVTyDOGhuVnwZ9jLeYvWwhM8T811U=
Subject key identifier:   85:45:3A:29:C7:19:10:F3:2E:42:6F:1C:3C:8A:81:44:FE:7A:00:82
Certificate issuer:       /CN=e95630a3-5da1-408c-891c-268d2b4791c7
Certificate serial:       010D0C9F43285849C8C993AEB0250715977E2D00
Authority key identifier: 16:CF:DA:C7:A2:73:33:B8:CD:21:DD:63:1D:95:5D:22:74:49:73:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/1c1f05e7-5441-371b-94af-1c37f52a9bbd.roa
Signing time:             Thu 08 May 2025 11:01:39 +0000
ROA not before:           Thu 08 May 2025 11:01:39 +0000
ROA not after:            Wed 06 Aug 2025 11:01:39 +0000
asID:                     401380
IP address blocks:        23.191.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c8:c9:93:ae:b0:25:07:15:97:7e:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e95630a3-5da1-408c-891c-268d2b4791c7
        Validity
            Not Before: May  8 11:01:39 2025 GMT
            Not After : Aug  6 11:01:39 2025 GMT
        Subject: CN=15cc1855-8cd9-4533-943c-962ca2c59f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:b2:cf:f6:8e:1a:d3:31:20:16:c0:ce:0f:
                    45:b5:a4:45:1a:39:30:06:d5:97:b9:05:ca:78:8d:
                    83:3a:ce:bc:a5:3e:f3:92:b3:e9:b5:b4:a7:be:05:
                    4a:97:cb:df:91:2e:fd:83:e0:4b:82:3c:69:a5:6d:
                    d2:14:84:1c:f1:92:27:c7:b0:6b:37:dd:62:80:7d:
                    74:19:ee:cd:9e:01:34:cc:3d:d7:7c:a0:98:d9:7d:
                    89:57:bb:ed:87:38:d8:19:1d:e1:72:73:54:7d:49:
                    f3:f4:3b:98:91:d6:41:d7:50:7a:01:0f:94:22:e5:
                    0f:0d:af:95:ec:d0:a5:bf:cc:e1:05:cc:06:9b:94:
                    11:ed:25:af:76:51:82:fa:aa:e9:e0:74:07:65:84:
                    dc:21:d3:f2:dc:fc:79:45:b4:54:3a:06:0b:07:a1:
                    11:66:73:fa:f0:76:e6:91:f8:6f:1f:99:95:eb:fe:
                    12:58:e8:0a:e8:fd:2f:3e:8d:d1:f3:7b:8b:dc:83:
                    0a:61:da:5f:b0:cb:d0:81:f4:fc:58:e8:32:48:09:
                    6e:72:90:4f:24:a9:5a:7c:64:b6:c4:0d:30:8d:27:
                    7b:1c:a3:ae:50:45:60:bc:24:76:dc:49:51:d1:25:
                    1c:a9:45:14:7a:d6:32:75:57:29:94:8e:e6:d5:20:
                    9e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:45:3A:29:C7:19:10:F3:2E:42:6F:1C:3C:8A:81:44:FE:7A:00:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/1c1f05e7-5441-371b-94af-1c37f52a9bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.crl

            X509v3 Authority Key Identifier:
                keyid:16:CF:DA:C7:A2:73:33:B8:CD:21:DD:63:1D:95:5D:22:74:49:73:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e0:47:84:4d:13:30:56:2f:e9:89:8d:70:32:3a:4b:4a:67:
         da:8a:c2:c2:d7:ff:f9:b6:3d:53:23:94:26:6d:3c:c2:e7:96:
         f9:4e:45:73:58:56:34:38:44:64:90:a9:14:ce:6e:cd:d6:95:
         b7:41:c9:53:e8:ed:7a:63:0d:a7:a2:12:48:3d:4d:b7:72:bb:
         6b:73:28:e9:5d:d0:ca:c3:ae:ab:81:f2:37:e2:c3:4c:f4:c8:
         f9:2a:1b:c8:10:78:08:ca:ec:7b:c5:a6:39:b0:ed:f5:52:3f:
         b7:32:93:44:00:e7:8d:ec:04:dd:b7:cd:04:3a:03:cc:70:b5:
         f7:9b:83:fe:39:3e:95:33:cd:f9:72:b8:9c:e1:72:e3:70:95:
         94:1c:77:bc:6c:73:43:66:a4:b4:b7:22:05:e8:0b:7a:9a:9f:
         c4:b3:03:70:ba:be:f9:7d:70:ca:37:25:6f:0d:d5:55:ed:bc:
         a0:30:6f:31:e6:ee:fe:75:3f:f0:c5:4b:42:ed:58:ce:f3:3b:
         14:e8:f2:f4:8b:3c:88:c0:3b:b5:57:a9:2b:bb:ec:db:25:b8:
         c1:9d:07:ec:0b:07:20:01:12:48:10:b2:10:19:10:5d:c4:03:
         b9:51:db:f1:8a:67:a1:e5:b1:ed:9f:ad:30:4d:05:3e:36:37:
         03:a1:6d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:25:04 2025 by rpki-client