Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/ea99eee9-0141-3532-97ca-8fa2da22d425.roa
File:                     ea99eee9-0141-3532-97ca-8fa2da22d425.roa (raw, json)
Hash identifier:          xCs4msegrh1xYLJZEvw3NnguBPQPgEn0+cZQfXYoB3w=
Subject key identifier:   3F:36:D5:2C:5E:EA:63:99:4D:7E:A9:B1:77:5F:69:32:B3:B1:68:2D
Certificate issuer:       /CN=53f9e4fa-8a21-4981-b8c8-6c7eaf79186d
Certificate serial:       010D0C9F4328584917DC26560B291FC30525ABB0
Authority key identifier: C7:C8:8B:AC:CE:CE:96:FD:73:FB:D3:9D:73:C3:AA:C1:42:DD:4C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/ea99eee9-0141-3532-97ca-8fa2da22d425.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        23.191.48.0/24 maxlen: 24
                          2620:9d:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:26:56:0b:29:1f:c3:05:25:ab:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f9e4fa-8a21-4981-b8c8-6c7eaf79186d
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=5b5cdfa8-d7d4-486b-87c3-784e2294c835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e2:ab:fb:40:4c:83:4f:aa:6b:56:96:b9:1b:
                    83:4a:d0:ed:f0:33:d5:2e:90:57:11:6e:2e:08:64:
                    87:7a:4c:10:04:63:40:82:3b:94:a8:2f:31:cf:4a:
                    3b:93:67:b1:f2:3c:30:37:ca:dc:09:da:a2:f3:db:
                    a7:cf:c1:61:2a:24:9d:09:4a:28:dc:e3:28:06:51:
                    8c:e3:0c:54:5b:48:be:0d:c9:91:7c:59:3e:7f:7a:
                    08:78:fb:47:48:2d:63:c3:6d:a8:ca:5e:71:32:ba:
                    4a:fd:cb:52:17:ca:61:c5:9e:20:45:0a:f7:1d:56:
                    30:28:9e:a3:27:a4:53:72:67:80:cf:50:75:3d:f3:
                    39:57:2f:e7:a3:11:11:4b:49:9a:b6:11:c3:3d:b9:
                    3e:d9:c2:75:dd:6e:f8:ac:da:c5:5e:56:5f:b5:2c:
                    a5:00:7f:1f:f9:07:73:ca:c4:32:c1:f6:db:22:10:
                    e1:41:17:c4:3e:4f:94:ad:87:4f:e4:c5:bd:f0:c6:
                    9b:ff:84:e9:b4:6a:ac:01:c5:08:e9:77:a6:9c:8b:
                    ed:96:d1:5f:45:78:90:5f:0f:a3:e2:5c:c2:78:1a:
                    2f:ae:c1:99:d9:a0:f4:72:f8:b9:63:68:58:3d:0a:
                    5f:c2:75:f0:c0:c3:7a:95:04:56:e3:9c:d7:39:1e:
                    3d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:36:D5:2C:5E:EA:63:99:4D:7E:A9:B1:77:5F:69:32:B3:B1:68:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/ea99eee9-0141-3532-97ca-8fa2da22d425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.crl

            X509v3 Authority Key Identifier:
                keyid:C7:C8:8B:AC:CE:CE:96:FD:73:FB:D3:9D:73:C3:AA:C1:42:DD:4C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.48.0/24
                IPv6:
                  2620:9d:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:eb:16:46:86:3a:14:2f:33:60:0f:3e:a3:43:75:cc:4e:a0:
         d3:41:4f:e6:c0:3f:0e:9f:68:2d:47:c4:5a:ac:8a:4e:ea:3d:
         d4:f1:3d:15:4b:84:8f:9c:c7:8b:a6:86:9d:5a:0e:ef:54:c1:
         62:83:b6:60:be:86:3a:a3:1e:18:34:43:7a:d1:6d:b6:c8:82:
         a0:f1:81:77:f8:db:2d:09:9d:96:d1:db:f7:14:22:cb:94:fb:
         81:b3:90:1f:69:be:00:77:35:c6:69:ee:0c:5c:3b:a0:0f:25:
         62:65:b4:cd:16:dd:8b:fc:a2:8f:db:4d:bd:48:ed:80:24:43:
         91:4e:d6:60:b5:45:7a:d1:e8:9b:e1:10:99:90:31:54:21:47:
         b2:a7:7c:1f:34:0d:fe:b7:c6:ab:04:03:bc:2b:d4:46:b6:97:
         9c:87:5a:99:45:a1:26:e8:83:30:39:a7:be:65:ea:fe:9a:c9:
         d7:62:d4:c6:2d:af:69:0c:6b:0f:67:11:f1:9e:0d:34:91:57:
         06:88:44:c5:f1:8b:ba:7a:4b:f3:fb:83:62:a0:67:dd:70:84:
         81:13:40:8d:f7:f8:d6:c7:da:64:ea:7b:7c:a8:e1:19:f1:f0:
         fe:47:60:f7:d1:78:e8:2b:5c:33:2d:3c:0a:45:e9:1d:36:f9:
         ab:fc:ba:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:27:24 2025 by rpki-client