Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/d6eb6926-4dbb-3dff-b9c3-ec105ea075c8.roa
File:                     d6eb6926-4dbb-3dff-b9c3-ec105ea075c8.roa (raw, json)
Hash identifier:          7cXiG/PE1Lu/OGrqzsB6Ojv3ULyQBA2lGWQcg4dhY/0=
Subject key identifier:   74:EB:02:3C:82:08:C4:FC:30:D1:A2:02:9B:8D:E3:B0:7E:EC:17:AC
Certificate issuer:       /CN=324596f5-1cf7-4d92-9c68-ecfb27205d68
Certificate serial:       010D0C9F43285848E2D11A7CB58387933B34F8C0
Authority key identifier: A7:F2:5A:3A:50:B8:87:85:17:91:C0:9A:33:22:29:38:EC:E5:23:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/d6eb6926-4dbb-3dff-b9c3-ec105ea075c8.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     400115
IP address blocks:        23.130.152.0/24 maxlen: 24
                          2606:9b40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:1a:7c:b5:83:87:93:3b:34:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324596f5-1cf7-4d92-9c68-ecfb27205d68
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=b50b6c54-eb73-49ff-9478-e0dee657d1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f2:b5:20:8c:fb:88:f7:16:a8:b4:38:76:dd:
                    d3:40:26:63:ad:9e:b6:52:8c:17:81:d4:2e:6c:bb:
                    0f:97:17:7a:79:5e:ae:d7:08:40:86:d9:c7:81:92:
                    45:81:ef:81:53:29:29:bf:6f:ac:7d:de:e2:79:e0:
                    38:5a:0c:e4:c7:a6:6e:4b:6b:c9:6c:67:17:81:15:
                    36:d9:33:ab:3d:3d:7e:1d:82:89:01:ee:eb:8c:85:
                    a4:b2:3c:6e:0b:e4:e3:23:95:9d:f9:d0:34:79:1c:
                    ee:f8:7b:b0:c8:a4:f3:fc:1a:75:62:0e:82:91:9c:
                    8a:80:03:91:cf:b0:7e:63:aa:1e:64:58:e6:9e:e9:
                    df:09:73:84:83:45:0b:05:0b:17:c6:bc:7a:17:de:
                    bd:33:f4:4f:a1:f1:cb:fc:2f:68:ba:0d:1c:71:24:
                    bd:77:40:20:69:10:d3:8a:3c:6a:f7:5a:a7:b8:f5:
                    6a:68:65:1b:c3:50:11:16:73:ab:8e:8a:32:92:a4:
                    a5:d2:53:4c:41:54:75:71:44:de:18:ab:20:e6:91:
                    cc:a8:85:7f:f9:c2:9d:cd:07:be:03:df:71:84:88:
                    53:27:ad:43:6f:d3:ee:57:bc:f4:09:40:62:cf:33:
                    8f:63:6d:51:ce:e8:ff:5a:21:83:13:49:1d:cf:1f:
                    3e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EB:02:3C:82:08:C4:FC:30:D1:A2:02:9B:8D:E3:B0:7E:EC:17:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/d6eb6926-4dbb-3dff-b9c3-ec105ea075c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F2:5A:3A:50:B8:87:85:17:91:C0:9A:33:22:29:38:EC:E5:23:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.152.0/24
                IPv6:
                  2606:9b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:bb:34:1b:bd:d1:28:d4:70:09:9b:24:4e:ba:aa:76:24:de:
         e7:ac:95:e1:69:6e:dc:61:65:e1:f3:58:f6:38:e6:93:02:73:
         41:6f:f5:89:25:bf:4d:a6:15:bd:51:8b:6e:2e:0e:77:7f:cc:
         31:1c:6f:55:fb:72:93:7c:09:0b:ad:dd:35:94:87:3f:a5:76:
         f4:9d:09:f9:7c:58:63:34:92:11:0e:ee:c6:10:fe:96:dd:1f:
         62:f5:67:0c:a2:47:89:71:13:9f:5d:31:81:d0:1f:74:d7:68:
         ab:d5:5a:e0:a8:2d:d3:67:65:0a:84:6f:46:06:4c:8d:dc:14:
         c0:f2:53:6a:7b:6b:28:d6:c9:dc:04:20:97:72:a3:bf:28:10:
         85:22:90:8b:15:bf:e4:98:36:fe:33:b7:5f:fc:88:10:7a:c4:
         5c:f8:71:2c:ad:32:00:4d:8f:05:2c:c3:a1:58:90:95:c6:3f:
         15:93:cc:80:3c:44:ed:52:ab:2a:ec:71:9c:74:2b:d0:f1:69:
         f1:7c:d5:77:3b:29:7e:cf:96:83:07:58:b9:cf:b0:5b:38:c7:
         c3:a6:f4:63:eb:6d:8c:5e:d7:4a:33:a1:45:f9:bf:d1:49:47:
         7f:99:5f:f5:a3:81:61:20:73:cc:9b:55:bd:c8:2a:3e:90:46:
         32:0b:92:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:41:48 2025 by rpki-client