Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/ab7f0c19-f312-32a6-87d7-d1a2469cb70b.roa
File:                     ab7f0c19-f312-32a6-87d7-d1a2469cb70b.roa (raw, json)
Hash identifier:          Bl2vWgHjlSTSlSckkEe1MPZD5gKGDF/31xHmvCcvw5U=
Subject key identifier:   A9:8C:B6:23:09:E9:8C:C8:4F:BD:A2:D5:C3:05:FB:AD:64:7D:3C:8A
Certificate issuer:       /CN=cc664683-d58e-4d26-8cf1-e5f5c5dc24c2
Certificate serial:       010D0C9F432858491CA3A5D029A04EBEFC76BB80
Authority key identifier: D0:65:B9:1A:8B:5E:DD:F3:FA:1A:9C:17:3D:BA:C6:E1:DB:E4:69:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/ab7f0c19-f312-32a6-87d7-d1a2469cb70b.roa
Signing time:             Fri 07 Mar 2025 19:06:11 +0000
ROA not before:           Fri 07 Mar 2025 19:06:11 +0000
ROA not after:            Thu 05 Jun 2025 18:06:11 +0000
asID:                     398395
IP address blocks:        23.185.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1c:a3:a5:d0:29:a0:4e:be:fc:76:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc664683-d58e-4d26-8cf1-e5f5c5dc24c2
        Validity
            Not Before: Mar  7 19:06:11 2025 GMT
            Not After : Jun  5 18:06:11 2025 GMT
        Subject: CN=a5ceaf59-9f1d-4ca6-ba17-e6219b680eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0b:36:7d:86:1d:db:c3:2b:79:1e:f1:33:bb:
                    ed:07:c4:6f:5c:cd:ea:d4:c4:3f:f2:7f:40:76:dc:
                    27:ab:bd:16:f6:73:21:f1:1c:a2:04:6a:df:fb:08:
                    02:6a:c6:48:a0:f1:df:bd:38:9b:bf:1c:64:a0:b1:
                    28:b9:b7:94:79:ce:41:6b:10:4a:7c:fe:20:61:97:
                    92:ed:5a:a4:60:b3:85:f1:50:99:ef:e8:78:74:52:
                    69:a0:b1:07:56:38:b8:1e:10:3c:e7:e6:21:90:e6:
                    aa:af:14:04:b7:f2:2c:c9:37:96:a8:29:72:6b:3f:
                    2f:d9:29:5c:b3:9e:a9:69:86:2c:32:26:b5:35:35:
                    65:e2:f6:1c:bd:87:4e:af:ef:26:f8:5b:72:a0:d7:
                    ed:33:1f:c5:c5:84:1c:ab:7d:52:4b:cf:e3:2f:1f:
                    82:50:2f:0a:37:7c:3d:4b:ea:10:dd:73:3c:7c:d4:
                    91:78:f0:a0:85:fa:9c:fe:7f:41:cb:5c:4d:f2:95:
                    4f:7f:d4:b8:74:16:73:ba:00:0b:e0:4f:68:90:1e:
                    b0:da:d4:b7:84:bc:03:ef:80:5b:19:6c:17:cd:74:
                    e3:33:53:d0:ce:8c:eb:8b:35:43:3f:14:73:2d:c3:
                    05:58:41:66:77:82:ec:aa:ad:6f:a3:77:4d:01:3f:
                    8a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8C:B6:23:09:E9:8C:C8:4F:BD:A2:D5:C3:05:FB:AD:64:7D:3C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/ab7f0c19-f312-32a6-87d7-d1a2469cb70b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.crl

            X509v3 Authority Key Identifier:
                keyid:D0:65:B9:1A:8B:5E:DD:F3:FA:1A:9C:17:3D:BA:C6:E1:DB:E4:69:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d8:5b:da:15:e0:b0:3f:db:74:e4:d9:49:50:1f:62:6d:86:
         3f:12:ea:76:7a:77:ac:00:42:37:80:40:61:50:ce:98:53:43:
         b0:e7:a7:fa:b1:ea:45:f9:e9:4a:b6:ca:db:6e:a6:1b:fd:5a:
         4e:de:bb:30:81:cb:ef:98:17:10:14:45:5b:f3:90:f8:b4:5f:
         c7:85:72:1d:b3:b1:20:08:67:4f:03:8a:c7:43:d4:27:cf:51:
         c2:b3:ee:fc:37:6b:4f:30:13:00:03:a1:1f:87:5d:0c:28:76:
         96:8c:74:00:a3:bd:a2:72:9d:e3:37:09:36:f7:b0:80:da:d3:
         ae:78:e6:93:23:6b:bc:59:05:e9:94:93:25:fb:34:7d:93:9f:
         a5:87:05:9a:64:39:dc:b3:61:a0:76:85:4e:d0:46:fb:9f:f9:
         ba:50:59:84:f6:21:71:ef:9a:b7:a8:89:4a:e1:37:2f:1d:16:
         68:f7:34:fd:3e:9e:ab:1f:f6:bc:ff:ed:6f:db:42:35:eb:bf:
         ef:4c:d9:a1:92:ea:bf:a6:23:9e:64:fd:b4:5b:e4:94:30:cd:
         f2:b3:46:29:b2:d9:0f:22:9e:cb:80:98:0d:db:5b:1e:9a:87:
         12:71:0c:6d:ee:28:c6:25:74:fc:18:ac:31:aa:77:4e:ff:4f:
         b6:65:ce:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:47 2025 by rpki-client