Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa
File:                     b7201278-097e-3b32-a4e1-96b53fb35fb0.roa (raw, json)
Hash identifier:          CNFsLpOgF4N6wNf66o8tSxoReCGe9MTO3okb5Ur+fyI=
Subject key identifier:   3C:55:01:C6:6B:A5:AA:43:6E:C5:76:CF:35:2F:92:A6:F3:6A:B2:27
Certificate issuer:       /CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
Certificate serial:       010D0C9F43285848CDE10C86CDE23110F26A6140
Authority key identifier: AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     36222
IP address blocks:        23.138.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:0c:86:cd:e2:31:10:f2:6a:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=424e70e2-c620-4dfc-8108-3ebc5a9527b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:97:44:d3:cc:fb:16:24:e1:5f:8c:a2:c9:
                    db:82:26:49:8e:ec:f0:2f:57:bb:72:52:60:58:58:
                    29:f0:cc:eb:ba:77:c9:72:03:fe:c5:b1:55:0b:be:
                    ad:8f:32:01:99:77:9c:14:0e:21:bf:fa:36:32:3e:
                    8b:6e:b4:fe:71:aa:21:00:2a:c1:c4:9d:e2:05:6d:
                    77:05:1f:ba:3f:bc:39:eb:a8:b1:03:93:e6:d7:22:
                    8b:eb:31:97:9b:1c:1d:99:aa:85:a0:60:aa:10:2f:
                    9a:18:44:06:ff:1f:34:d6:58:2e:ee:c7:30:be:7e:
                    85:ee:81:f1:27:9b:77:af:29:89:18:94:fe:b1:5e:
                    7c:e8:b0:dc:6a:d1:89:48:d7:c5:2b:6a:94:b1:80:
                    04:55:46:ad:98:98:5d:18:f8:7e:c7:54:89:fc:9a:
                    15:ff:48:a8:40:8e:4e:da:70:0e:72:e1:23:fa:c1:
                    e2:cb:51:b2:02:6b:ed:df:5d:d2:9d:d1:f3:21:c4:
                    d8:b0:99:d7:eb:d7:d2:09:ff:63:89:1d:29:57:f4:
                    27:39:31:67:b6:19:d5:1b:ac:df:65:89:bd:82:65:
                    4e:62:69:c2:03:02:b5:cb:e9:a5:64:9e:41:36:b3:
                    ec:14:4e:73:b0:a8:75:5e:f2:bf:3b:e4:96:b8:2a:
                    3b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:55:01:C6:6B:A5:AA:43:6E:C5:76:CF:35:2F:92:A6:F3:6A:B2:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl

            X509v3 Authority Key Identifier:
                keyid:AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:5a:35:39:a7:98:d4:11:3a:6f:c0:37:c6:03:5b:1d:be:ef:
         f9:1b:cc:c5:27:ae:05:6f:59:a6:1c:e1:e1:22:af:80:25:71:
         15:00:93:10:17:0c:d1:8a:3f:b1:78:db:3c:c0:f2:a9:31:93:
         1a:3b:20:f9:3a:80:81:c8:e2:6b:15:21:30:b1:0f:f9:5e:40:
         66:26:75:9f:b8:4c:2c:95:bb:57:14:01:10:c6:be:18:6f:c0:
         f6:29:e9:9b:b0:59:9a:66:a9:bc:5e:0c:ef:4c:e7:d5:d8:55:
         50:5c:3a:ca:f9:ac:2f:09:18:54:70:34:54:ca:d4:4b:4d:ab:
         6f:e2:63:c7:dc:76:44:ae:1a:a4:ad:b9:0a:80:a7:a8:d0:88:
         cb:57:dd:fa:7b:a7:f9:9e:b6:dd:0a:91:3c:57:20:27:27:b3:
         45:43:fd:e5:a8:d2:7d:64:71:ed:90:fe:81:d2:b1:02:41:19:
         2c:dc:44:48:e7:52:4d:4e:a2:d3:b6:81:64:46:8c:e8:4e:28:
         5e:84:5c:a8:31:b8:2d:62:c5:5f:ce:7f:e6:a8:26:30:2d:58:
         b2:a6:b0:b4:2c:00:0b:77:d0:de:ed:77:09:8d:20:0a:db:fe:
         30:a1:e4:87:2d:28:f4:38:b7:9b:ec:eb:ef:88:02:a5:3a:73:
         b2:bd:27:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:47 2025 by rpki-client