Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/fe62eae1-c6f2-3be7-9c47-4049f6da8442.roa
File:                     fe62eae1-c6f2-3be7-9c47-4049f6da8442.roa (raw, json)
Hash identifier:          ghD5fVm1ELjb08ZcdVTiobVGVe44jKd8XjVBZRK57Lw=
Subject key identifier:   C1:FA:B9:78:91:03:AC:B2:F9:47:77:2F:22:C9:21:AC:4A:19:DD:4A
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285849F715221FBD9CF24A0976A580
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/fe62eae1-c6f2-3be7-9c47-4049f6da8442.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     30238
IP address blocks:        23.90.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:22:1f:bd:9c:f2:4a:09:76:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=8534bb9c-d159-4de9-bf59-d7c902dfc83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b7:96:80:37:e7:af:86:18:48:2b:56:60:6f:
                    38:e8:a7:0c:22:4b:0a:69:0a:35:a1:ab:82:33:41:
                    70:4b:22:1e:83:b8:17:21:29:62:7e:d3:40:52:15:
                    d8:a8:31:f5:87:1b:d7:83:99:09:59:2e:de:24:50:
                    35:08:75:71:cf:e1:39:b0:16:ca:22:29:39:e7:dc:
                    8b:9c:7a:89:cc:d5:13:31:7f:6f:4d:26:ef:ed:5c:
                    79:7e:61:77:c8:e5:c1:b8:b5:50:bc:bd:da:ea:29:
                    ad:30:d3:20:8d:f1:52:ef:b0:1c:c6:fc:01:2d:ae:
                    98:a3:fd:f0:5f:ba:6b:b3:46:3d:be:bd:c6:d4:75:
                    14:dc:78:54:eb:16:bc:36:35:c4:60:27:3d:3e:d6:
                    14:8b:10:a6:9e:c0:1f:17:ba:39:e0:91:36:c4:df:
                    5f:e2:0e:d2:23:98:a3:f3:f5:b9:a6:12:65:e1:9f:
                    56:a7:58:30:17:9c:f8:91:a2:45:77:18:a7:2a:a1:
                    ee:20:a4:2d:19:57:66:bc:96:f5:23:96:c4:a5:97:
                    de:37:ec:af:48:a6:53:68:6c:5e:9a:6d:c1:0d:e7:
                    39:f1:03:50:c8:d7:89:f2:7d:a6:f1:a6:58:ec:26:
                    62:d5:f3:85:bb:ab:8c:2b:58:c7:1a:1c:18:db:90:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FA:B9:78:91:03:AC:B2:F9:47:77:2F:22:C9:21:AC:4A:19:DD:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/fe62eae1-c6f2-3be7-9c47-4049f6da8442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:fc:11:24:fb:ce:c0:79:16:e0:89:b6:36:1f:0e:7d:b2:58:
         5a:c7:fc:46:0a:ad:e8:7c:e2:72:67:92:ae:08:5a:60:0c:54:
         30:be:6b:40:45:9f:4b:2b:e3:21:5b:de:ea:ce:3d:29:7f:5b:
         d6:c5:71:7b:d6:28:44:56:fd:ec:3f:37:b7:d7:95:4b:10:d1:
         74:a0:c6:ff:e7:02:4e:1f:27:7b:de:14:da:60:62:41:86:9a:
         b4:ac:79:6c:d5:5d:08:a2:c5:7a:ea:e3:e0:14:23:02:4a:c5:
         d2:05:0b:b5:fb:cd:ca:ea:b9:82:1e:9a:24:0c:f5:a9:4c:34:
         6c:08:72:78:a9:c5:23:fb:2d:58:f2:f8:d4:e5:58:65:59:c7:
         bd:95:ce:b9:17:f6:7c:5e:98:43:93:67:44:dd:03:76:ff:12:
         b1:e2:63:1e:1e:30:f9:04:cf:db:94:05:db:af:96:16:4a:59:
         d2:d0:18:7c:12:aa:ed:15:d7:d2:9a:ad:98:2d:ac:66:9f:7c:
         ad:c3:36:3f:fb:4f:24:18:66:6b:82:24:9b:af:36:08:7c:cd:
         41:30:b1:72:73:c3:93:6b:69:6d:0e:d8:80:ae:62:ee:e0:83:
         3c:7f:a0:c1:ed:a0:83:5e:91:61:48:4f:02:75:6d:67:4f:97:
         d5:5a:e0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:14:38 2025 by rpki-client