Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/d0aa6771-362e-3935-947a-bfd5081d3828.roa
File:                     d0aa6771-362e-3935-947a-bfd5081d3828.roa (raw, json)
Hash identifier:          xK0LkC/+KdVecrWe4LPxT2TRiunvtJLCcFKLMkYgMhc=
Subject key identifier:   33:BC:42:4C:BE:6F:84:9C:BA:91:05:E2:38:E1:7D:C1:6E:A8:90:5A
Certificate issuer:       /CN=f8fa851f-0c6f-44a2-8017-7b062f4d8e74
Certificate serial:       010D0C9F43285849BF3F6196CCE2CA843A60AD00
Authority key identifier: DF:AE:29:DC:48:23:A0:74:F5:E6:38:79:26:77:86:E8:AC:D0:6B:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/d0aa6771-362e-3935-947a-bfd5081d3828.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     399340
IP address blocks:        23.180.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:61:96:cc:e2:ca:84:3a:60:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8fa851f-0c6f-44a2-8017-7b062f4d8e74
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=0bbf44a6-73f4-47b5-a588-8cda10010fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2c:cb:45:69:2d:08:61:7d:26:4f:76:b7:48:
                    f4:47:c2:74:f0:2a:16:5d:41:ee:e9:b7:90:5a:b7:
                    cb:67:c1:18:d4:bb:39:48:61:04:7f:a6:ec:d3:6b:
                    21:12:9e:3a:57:09:26:ad:fd:9e:14:24:e8:60:65:
                    07:66:a1:5c:c0:2a:9e:b7:40:b7:98:24:3e:cf:a7:
                    01:c4:fd:ce:03:28:cb:20:9a:67:f4:38:81:e4:0e:
                    1c:e2:ad:50:f3:45:57:92:c3:29:73:ac:2f:1a:2f:
                    78:d6:dc:0f:bb:b5:09:df:7b:b6:b4:67:47:a8:d7:
                    2e:90:d9:5a:e3:71:58:a3:69:84:e0:db:f3:67:6e:
                    8c:fe:a0:f7:37:c9:bd:e2:8a:13:0d:8a:db:a6:3d:
                    38:5e:5f:7f:ff:c7:00:e8:35:0a:d3:05:ca:44:fb:
                    93:59:b1:e1:51:75:c1:4b:e1:ed:83:dd:83:56:3d:
                    87:c1:40:86:05:c0:9b:6d:fa:c4:92:55:e3:22:1a:
                    bd:a9:26:3a:ac:7b:c5:58:60:d3:61:b7:8e:f5:eb:
                    62:8b:3f:a4:96:64:55:16:d7:be:d7:a7:3c:97:4c:
                    ee:8d:da:af:d4:2a:5d:fb:84:2e:0e:b6:f2:1b:98:
                    78:7f:28:54:14:11:f6:f3:70:61:00:a3:3b:e2:b8:
                    1a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BC:42:4C:BE:6F:84:9C:BA:91:05:E2:38:E1:7D:C1:6E:A8:90:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/d0aa6771-362e-3935-947a-bfd5081d3828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.crl

            X509v3 Authority Key Identifier:
                keyid:DF:AE:29:DC:48:23:A0:74:F5:E6:38:79:26:77:86:E8:AC:D0:6B:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:11:2d:e2:f3:cd:52:c1:50:e1:a2:aa:87:43:b5:c3:83:44:
         ec:9c:1e:44:8d:c0:f2:84:2d:8c:af:54:8a:f5:a3:59:bf:9d:
         bf:fb:ce:ca:b2:c6:92:80:f9:45:e7:48:14:65:35:db:2d:0d:
         79:ea:53:7e:42:10:5d:24:a4:0d:d7:35:4d:4e:a2:23:f8:1b:
         e0:e5:58:66:81:fc:24:ab:69:a2:6a:85:d3:68:73:28:66:a9:
         84:9c:e4:99:96:3a:80:80:13:e2:c3:21:51:f2:ef:6a:9d:37:
         ef:1c:3b:04:dc:41:9e:d4:0a:3e:a3:a8:3f:4c:86:4b:ed:a6:
         9d:ea:46:72:b2:57:62:48:26:68:49:dc:08:54:99:d8:b8:d1:
         31:c0:9c:93:9e:8b:cd:59:1a:9c:2c:8f:7f:05:cf:d8:c2:ec:
         fe:3a:40:3a:c9:89:ac:d9:36:ad:c7:15:0c:e6:3f:72:81:9f:
         fa:b8:46:ae:fd:bb:96:ad:03:a7:23:69:38:a2:9f:c1:f4:90:
         af:bb:9d:10:75:a5:31:ce:20:47:fb:bd:59:31:dd:51:a8:ef:
         57:d3:86:8b:9e:a5:70:72:74:64:d8:78:f6:47:9f:ec:78:2f:
         24:fa:01:c8:b4:f2:dc:32:dc:57:e7:9f:75:81:55:00:ca:3b:
         85:c5:79:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:43:58 2025 by rpki-client