Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/dc37949b-fd68-31d3-8530-d51a972e599a.roa
File:                     dc37949b-fd68-31d3-8530-d51a972e599a.roa (raw, json)
Hash identifier:          KPhOKaaJEl3WGLv3iEd9LRyDGykLDItVjUTfBqjLyL0=
Subject key identifier:   FF:9E:DF:55:05:99:00:19:3D:F4:29:FB:08:8D:15:BC:E4:1D:D7:1C
Certificate issuer:       /CN=4c7bb7c9-9462-45de-9a96-5887b6042f79
Certificate serial:       010D0C9F432858495ABEBE7FA5077DB925F1E480
Authority key identifier: DA:DD:B7:A5:36:89:D6:40:54:A6:6B:41:71:04:A1:F4:04:9E:83:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/dc37949b-fd68-31d3-8530-d51a972e599a.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     400719
IP address blocks:        23.140.168.0/24 maxlen: 25
                          2602:80f:c000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:be:7f:a5:07:7d:b9:25:f1:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c7bb7c9-9462-45de-9a96-5887b6042f79
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=baa4255b-6c63-41bc-baa4-4076b9cff0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:71:a9:43:57:18:a9:5c:3a:5e:bd:7b:a5:
                    f4:01:2d:ef:3d:8b:72:d5:97:18:51:3f:d0:f3:8d:
                    ea:be:a0:62:e7:90:63:20:8a:3d:04:81:b9:fa:93:
                    a0:68:24:5a:d0:19:86:7e:6a:f8:43:e1:9e:fc:f3:
                    4a:e2:64:95:53:3d:f5:b3:73:5f:fd:f7:8c:dc:1d:
                    b4:a7:5e:38:a8:26:23:b0:11:6d:a3:1f:4e:f5:60:
                    38:51:96:55:b2:c2:fa:bc:0a:d2:9a:93:bc:98:2c:
                    8a:8d:89:41:45:f1:85:51:43:1c:54:46:ca:b0:68:
                    93:7a:8f:0f:13:c0:e6:0d:93:29:b8:80:68:a9:cb:
                    31:34:74:2e:5d:49:f9:83:19:e9:3a:f4:5d:55:b2:
                    71:a5:97:57:ec:3f:2d:36:be:48:82:f3:f6:ae:26:
                    d6:3e:9a:1d:b0:b9:7d:3a:8f:c0:03:84:4e:eb:81:
                    52:97:31:99:d5:c1:22:07:4c:86:91:a7:e5:6b:c3:
                    a3:b3:46:2f:5d:bd:a1:67:e0:94:3c:14:5b:01:43:
                    c5:5f:52:79:57:a1:46:b6:d8:bb:1d:62:23:d8:29:
                    52:53:35:eb:37:40:0e:24:09:74:ed:8e:dd:d9:0f:
                    1d:67:8e:32:88:2e:cd:32:2f:34:6e:51:61:e2:09:
                    7f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9E:DF:55:05:99:00:19:3D:F4:29:FB:08:8D:15:BC:E4:1D:D7:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/dc37949b-fd68-31d3-8530-d51a972e599a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.crl

            X509v3 Authority Key Identifier:
                keyid:DA:DD:B7:A5:36:89:D6:40:54:A6:6B:41:71:04:A1:F4:04:9E:83:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.168.0/24
                IPv6:
                  2602:80f:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:79:fb:ab:9e:22:6d:d0:5c:df:3d:ac:3d:a3:70:5c:9f:01:
         6f:db:f0:02:0b:11:cc:cd:6c:13:03:9e:ff:82:1b:5e:9c:07:
         00:7d:d6:73:43:ee:73:5d:fc:4d:c9:fd:b4:f9:c7:0e:1f:85:
         be:6e:d4:89:d5:fd:29:6f:17:7d:bd:0e:22:6f:55:2a:4e:aa:
         6c:46:ad:f0:9c:d4:9d:4f:d0:30:e7:bd:19:06:f2:11:e5:35:
         65:e7:7d:b4:01:57:2a:94:c5:11:80:f9:2b:d5:b9:06:b4:85:
         b7:6c:42:c2:1f:d5:0b:96:92:64:e9:56:e0:4b:1d:31:0f:36:
         8e:26:3d:b7:7d:9a:32:84:61:dd:5d:09:43:b5:fd:da:f3:0d:
         05:b9:63:cb:4a:8b:58:80:21:39:76:29:3d:14:bd:35:bc:91:
         03:87:51:05:d0:48:40:0e:ef:3c:a9:1b:de:f2:90:b2:88:8f:
         cb:56:14:e7:e9:b6:ba:38:32:2f:ea:91:55:5c:f5:85:30:c9:
         97:74:c1:d3:a9:1a:6c:37:ff:26:63:dc:d6:5a:7d:29:23:f5:
         36:40:61:4e:f5:6c:4b:23:8b:a3:23:d2:96:d6:67:5b:be:f6:
         2d:fb:4b:79:52:7b:f8:ca:07:bb:ce:61:0b:a6:2c:70:6f:65:
         3e:49:6a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:34 2025 by rpki-client