Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/514f37a8-f9dd-3461-9c07-1b89920890ee.roa
File:                     514f37a8-f9dd-3461-9c07-1b89920890ee.roa (raw, json)
Hash identifier:          TkYfrP6F2Oc1E6D0jPzKtX7P3juMGWMVpqsFcntNq4k=
Subject key identifier:   85:D1:5A:0A:98:15:72:9D:A5:B8:EB:72:9E:1C:A7:19:45:CC:9A:4B
Certificate issuer:       /CN=ec23d019-d079-49df-94b6-ad79d138e90f
Certificate serial:       010D0C9F43285849ED4FCBA51D97F748E11464C0
Authority key identifier: 7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/514f37a8-f9dd-3461-9c07-1b89920890ee.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     213073
IP address blocks:        23.187.144.0/24 maxlen: 24
                          23.187.145.0/24 maxlen: 24
                          23.187.146.0/24 maxlen: 24
                          23.187.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:cb:a5:1d:97:f7:48:e1:14:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec23d019-d079-49df-94b6-ad79d138e90f
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=c19f2f55-0f61-44ef-9c03-60d8a1f1ce32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:81:8b:4a:b2:43:f1:d7:ae:80:1a:bf:fe:91:
                    60:71:ce:11:60:ec:6e:74:57:c4:41:3b:4e:a0:36:
                    d3:04:f3:fd:e4:d2:6a:bb:6d:42:ce:89:c9:2b:a6:
                    45:a8:94:4d:d6:6b:cd:4d:81:bf:66:3a:68:e5:0d:
                    25:6e:a8:20:43:45:5e:9b:64:90:61:06:d3:6d:67:
                    a7:fa:6f:46:d7:59:b4:58:ac:2e:34:bd:ef:ed:93:
                    e7:d2:12:a3:7b:7c:37:34:c8:c3:a2:53:a5:4b:46:
                    b5:93:df:c7:01:54:75:63:77:3d:91:4d:68:5b:86:
                    e6:65:5b:a9:48:14:80:e5:60:7d:4f:4e:66:25:74:
                    63:9a:43:2e:75:09:54:57:67:55:e1:92:8b:66:3d:
                    55:fc:16:02:6d:67:de:cb:5e:1e:11:42:a5:0a:47:
                    b1:ac:03:f8:ec:47:4b:2d:76:b9:b0:5c:a3:ed:01:
                    2c:f4:0f:2b:51:ff:47:36:bc:69:e9:f5:7c:da:2c:
                    5b:f0:e8:77:8c:1b:90:1f:d8:5e:8a:c7:6a:84:97:
                    97:c8:7d:8a:24:9f:42:4f:f7:68:6b:7d:c1:f0:4c:
                    6c:e8:b5:db:54:86:10:01:a0:72:ac:1f:e6:a0:e1:
                    e7:5c:89:7a:76:af:6c:d0:e3:3f:21:9a:b3:ec:12:
                    a0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D1:5A:0A:98:15:72:9D:A5:B8:EB:72:9E:1C:A7:19:45:CC:9A:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/514f37a8-f9dd-3461-9c07-1b89920890ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl

            X509v3 Authority Key Identifier:
                keyid:7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:5a:ce:47:1a:19:ca:52:6e:5d:a6:de:52:63:67:70:2c:87:
         49:7d:7a:31:6f:e0:6c:df:f0:1a:6c:cd:c9:37:76:d6:91:5b:
         fd:3b:ae:38:dc:e2:2a:22:8e:b6:c6:f0:d9:c9:91:82:72:d3:
         6f:a1:47:e9:a5:37:b0:94:9e:43:92:cb:7f:53:18:81:34:c2:
         a3:bf:c7:69:a3:08:b3:08:97:16:a8:35:f3:f9:4d:d4:3c:29:
         af:28:13:11:e5:6c:a1:a1:a6:3e:08:60:c0:bd:22:f7:1c:e4:
         6b:66:78:3b:73:f6:8a:98:0d:9c:70:40:3d:75:0c:f9:17:d2:
         27:09:91:98:2d:bd:b3:58:4a:76:aa:c6:11:4d:65:58:4c:a5:
         46:1c:43:80:bd:9d:17:6a:80:9b:1c:37:53:72:d2:fc:e7:22:
         11:97:42:be:f2:35:8c:34:22:7b:ab:91:00:57:50:b0:3f:df:
         2b:1f:dd:eb:51:54:83:ec:cd:1e:31:96:53:29:c9:bc:83:33:
         ff:db:1d:e0:f8:7d:18:a3:a0:7e:7a:b5:dd:24:60:57:1e:f5:
         4f:94:ff:84:5b:97:16:98:7c:43:d8:aa:24:d2:21:bd:ff:2c:
         b1:11:63:05:bf:5e:cf:f2:b1:7c:d4:32:50:f2:d1:99:03:a6:
         07:5a:16:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:40:03 2025 by rpki-client