Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a9effcd9-4a49-3ab2-ad0d-5a1a63022214.roa
File:                     a9effcd9-4a49-3ab2-ad0d-5a1a63022214.roa (raw, json)
Hash identifier:          RIRebHWxH1TOM/qFbBAoZAgjRYhbv6Qn3s3nJK/gE78=
Subject key identifier:   9B:7F:54:E5:B4:3B:8D:AD:93:6D:E9:72:20:2F:AD:9F:24:42:D9:EA
Certificate issuer:       /CN=a8f7d642-12c0-4585-8981-7b7b7a058b8c
Certificate serial:       010D0C9F432858494CC9455C60E3558403213600
Authority key identifier: 0D:77:E3:0F:D1:94:46:4A:AD:8B:4E:F8:CC:0F:3D:DF:9B:9F:F6:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a9effcd9-4a49-3ab2-ad0d-5a1a63022214.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     212524
IP address blocks:        23.155.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:45:5c:60:e3:55:84:03:21:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f7d642-12c0-4585-8981-7b7b7a058b8c
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=5e392322-fe15-4159-a218-9574d772d2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:65:37:93:f2:9a:69:f8:eb:7c:e1:31:0c:ce:
                    81:a5:5a:c8:26:ab:f0:7d:5d:8d:03:95:91:62:80:
                    34:86:83:ba:03:8e:51:ef:39:f7:96:55:15:4a:05:
                    62:6d:bd:29:24:f3:eb:97:3c:bc:ab:76:ce:0e:c5:
                    de:fd:3d:41:a5:85:73:ee:57:d3:7b:7d:25:23:61:
                    e5:d8:06:a9:d9:02:54:b7:5e:17:9b:16:60:1f:97:
                    af:e5:d3:7a:10:59:b5:a6:21:8f:d8:b1:9b:89:c2:
                    d7:ad:07:07:86:ff:99:ec:07:4b:5f:e4:92:9c:1c:
                    9f:08:49:f3:20:78:22:cd:16:66:c7:38:05:01:d8:
                    a9:f4:87:14:2c:bb:4c:0c:c7:7d:bf:04:78:e9:cf:
                    69:87:26:4c:bb:82:30:32:d4:a5:ba:e4:4b:ed:f1:
                    8d:61:a6:98:59:3c:b0:99:e4:4b:f9:b1:db:56:01:
                    4d:ee:24:71:0d:cb:c5:fa:21:bf:9b:00:f0:9f:9a:
                    92:6c:0a:04:11:bb:99:e9:98:ea:c5:bc:d3:cf:0e:
                    f1:fa:da:48:af:20:ff:29:16:a2:53:53:b0:2f:44:
                    ef:21:e9:ac:63:41:8a:45:1b:24:20:d2:ed:47:7c:
                    9a:9f:97:22:88:76:61:d2:da:00:f5:98:cc:d3:ee:
                    1a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7F:54:E5:B4:3B:8D:AD:93:6D:E9:72:20:2F:AD:9F:24:42:D9:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a9effcd9-4a49-3ab2-ad0d-5a1a63022214.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.crl

            X509v3 Authority Key Identifier:
                keyid:0D:77:E3:0F:D1:94:46:4A:AD:8B:4E:F8:CC:0F:3D:DF:9B:9F:F6:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:97:4d:13:4e:ac:1b:27:78:0b:ce:a7:dd:47:4a:b7:9d:6f:
         57:18:c8:8d:b3:48:dd:8d:06:6b:9a:d8:39:13:7d:ed:ea:60:
         26:11:49:8c:9f:37:1d:3b:68:77:a6:2c:f3:97:b6:2c:78:bf:
         3d:83:66:43:24:aa:8e:d3:ed:4f:dc:00:23:e5:dc:12:07:95:
         a7:5c:24:bd:4a:c0:66:b8:6c:9e:49:f0:bf:d4:8e:2b:dc:32:
         6b:64:72:67:44:e7:94:de:b4:bf:cc:af:e6:08:93:02:4f:c2:
         13:74:11:38:9c:ee:b7:22:dc:fb:ec:a8:f3:a6:68:4a:bd:c9:
         79:ad:9a:9f:bd:5a:df:e4:62:4b:d3:aa:63:8a:14:9f:7b:1c:
         39:42:b2:62:c5:83:0f:f2:21:c7:dc:ce:01:c1:1b:ea:74:ad:
         53:88:fb:44:41:5e:f3:26:02:5e:e3:76:dd:44:d7:c6:41:fc:
         dc:1e:96:3f:2b:99:95:3e:eb:19:39:46:d6:0d:cb:f3:85:4f:
         6a:d0:46:a7:9c:d6:0f:6e:b7:d1:a7:69:1f:6c:d8:e2:74:64:
         c7:63:41:31:04:bb:6a:bf:ca:e1:ef:9c:97:e7:cf:fe:6d:f1:
         98:46:95:c6:47:e0:55:7a:3a:78:47:6e:9f:cf:a7:a8:dd:fe:
         c9:df:22:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:16:45 2025 by rpki-client