Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/ead27e67-c07d-30c6-a3f1-e23d77c953c8.roa
File:                     ead27e67-c07d-30c6-a3f1-e23d77c953c8.roa (raw, json)
Hash identifier:          bndswhzw1k3N1BRzf0FD/k559+lRBovOJRFy5u2qjjs=
Subject key identifier:   DC:CC:08:32:17:57:49:3F:D7:95:B5:2C:21:C4:C0:DA:65:D4:D2:7F
Certificate issuer:       /CN=55bbf9e8-b36d-4738-b477-dcc24272dbf6
Certificate serial:       010D0C9F43285849287E65B4FEDB1783EC771980
Authority key identifier: 63:41:45:20:E6:F3:69:D2:70:D0:25:C7:9C:ED:98:AD:57:67:48:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/ead27e67-c07d-30c6-a3f1-e23d77c953c8.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     397547
IP address blocks:        23.130.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/55bbf9e8-b36d-4738-b477-dcc24272dbf6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/55bbf9e8-b36d-4738-b477-dcc24272dbf6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:65:b4:fe:db:17:83:ec:77:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55bbf9e8-b36d-4738-b477-dcc24272dbf6
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=ea7b58b0-6330-4486-be07-f69b84d0b341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:d8:96:8f:46:d9:56:f2:a5:f5:26:f4:a6:
                    14:96:5f:be:77:d4:4f:4f:ed:86:14:5f:a8:93:cf:
                    3c:50:f1:ca:f5:3e:f5:70:65:99:b5:c5:e7:a2:ba:
                    53:9e:f5:42:4f:55:46:a6:ef:a2:5f:88:29:7d:30:
                    e8:4d:c7:2a:5d:2b:56:9b:39:64:f9:cd:fc:b2:55:
                    85:02:86:85:3a:61:c4:d4:81:f2:8a:fd:eb:c9:55:
                    c2:ac:e8:69:0a:7b:aa:f1:f5:ee:02:da:6f:69:7d:
                    e9:83:87:d9:e7:ab:4f:4c:17:57:ca:a1:75:fc:dc:
                    ad:c3:44:8e:96:87:8d:fd:ed:19:9d:1a:58:33:c6:
                    e1:b7:6e:a8:f2:e4:ba:93:cc:8b:09:bc:7e:57:a6:
                    fd:b9:06:b9:fc:ee:10:33:a9:79:dd:64:9d:81:4f:
                    02:f3:20:56:90:d8:3e:93:f9:b7:1b:f0:ca:a1:bd:
                    08:8c:0c:0e:63:6f:d1:30:b7:eb:0b:c1:f0:65:ec:
                    a9:d1:9d:d0:18:2b:31:e4:08:dc:b2:9b:77:c6:b1:
                    0c:e5:24:bf:7e:d3:b4:09:24:dd:aa:5a:88:6d:a8:
                    cd:26:3d:1a:2f:a6:c1:ba:0b:64:c2:8d:5a:ea:a6:
                    41:30:cd:be:32:2a:fe:16:dc:a6:3a:ca:9c:23:ee:
                    66:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CC:08:32:17:57:49:3F:D7:95:B5:2C:21:C4:C0:DA:65:D4:D2:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/ead27e67-c07d-30c6-a3f1-e23d77c953c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/55bbf9e8-b36d-4738-b477-dcc24272dbf6.crl

            X509v3 Authority Key Identifier:
                keyid:63:41:45:20:E6:F3:69:D2:70:D0:25:C7:9C:ED:98:AD:57:67:48:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1c:dd:48:25:c6:c0:3d:9c:2d:97:03:13:e5:15:b9:95:f5:
         b9:12:82:cc:cc:50:bf:8b:a8:99:85:00:cd:a0:9f:23:f4:b1:
         72:be:fe:02:6c:56:fa:60:4e:e5:e2:af:08:41:b0:19:f4:bb:
         60:75:eb:7d:0a:c4:19:39:fe:14:f3:25:5c:db:b3:15:4d:c5:
         03:71:f5:ef:ea:b4:13:61:7c:a8:9a:4b:fe:5e:aa:7f:5e:1d:
         24:95:ec:7c:f4:0f:a8:f4:6b:45:ba:91:e7:de:12:71:bc:db:
         90:86:aa:b4:b0:38:a0:5e:51:da:24:dc:ea:1b:cb:5a:a5:fc:
         fd:22:b2:a5:b5:68:2e:57:c6:c4:5f:00:cb:00:80:67:67:f9:
         38:b9:5e:c7:8e:02:cd:98:a7:36:a6:0d:12:47:df:d4:05:41:
         1b:0c:00:5a:72:f9:cb:1d:13:06:04:1d:60:91:d9:9d:43:05:
         b2:61:c1:0f:ed:a5:82:ee:ad:68:42:c8:a0:6f:16:75:de:00:
         f6:b2:f1:d1:a8:c4:3c:25:0f:9f:13:2e:5f:68:e9:25:0f:2c:
         bb:90:90:5a:d6:b1:ab:7d:cd:ea:a9:dd:8c:d3:68:45:31:67:
         fe:41:1e:b3:19:56:06:df:55:20:db:16:33:e6:be:09:ce:ab:
         fd:10:bc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:00:05 2025 by rpki-client