Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa
File:                     b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa (raw, json)
Hash identifier:          BoHPyGUQO/urhXSamYfJzy8Ei05kWKzp5kDoT5jDkA8=
Subject key identifier:   2B:D1:9D:53:E4:02:D9:D5:E6:81:F9:D4:2F:B5:26:99:37:0E:12:88
Certificate issuer:       /CN=058a49b1-635c-42be-b1a3-1465228f2130
Certificate serial:       010D0C9F43285848E9CBEFD2783F1DF00A1EC7C0
Authority key identifier: 68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     153371
IP address blocks:        23.130.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:ef:d2:78:3f:1d:f0:0a:1e:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058a49b1-635c-42be-b1a3-1465228f2130
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=b138f6da-a8d1-4f7f-9a0e-a957fe23e1d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5a:a7:11:ca:70:6f:2e:ce:32:ad:30:7e:22:
                    04:f2:20:5c:d7:3d:c1:93:4b:e6:fc:b7:3e:12:25:
                    63:d5:1e:45:fa:81:10:c8:9e:59:e6:d0:f5:09:0f:
                    cd:6e:f3:10:e9:e4:28:5a:4e:4e:21:4d:85:df:5d:
                    1f:9c:ce:55:b5:56:bb:d9:86:b7:30:20:d4:b9:cb:
                    75:3d:fe:11:de:87:3b:bb:7b:df:f4:6e:75:47:b4:
                    53:77:86:db:2e:23:f9:74:b1:04:8e:2a:07:ac:1b:
                    54:d8:97:fc:1a:01:bb:bb:0d:db:dc:cb:39:7d:69:
                    ca:22:36:e1:05:c2:b6:f6:4a:fd:99:af:a7:e9:e2:
                    c9:30:48:81:bc:15:1b:a7:e5:01:09:56:4c:01:24:
                    be:ce:b6:f5:9a:86:eb:08:b4:a9:c2:58:90:22:02:
                    c2:9c:98:e8:16:10:eb:b1:c8:c6:69:ef:8f:24:fd:
                    a8:10:76:c6:85:eb:61:33:f5:af:58:ba:c8:0d:56:
                    40:92:fa:ec:e6:1d:25:84:14:f7:9c:2c:82:a3:0c:
                    39:89:27:a1:df:01:a0:2b:65:4e:4c:b8:08:f1:c1:
                    c9:b6:c6:10:e4:0e:f4:23:ae:e4:cb:4d:39:f5:2a:
                    98:84:c0:ee:56:a4:c9:f9:7a:54:5d:e0:e2:57:53:
                    90:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D1:9D:53:E4:02:D9:D5:E6:81:F9:D4:2F:B5:26:99:37:0E:12:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl

            X509v3 Authority Key Identifier:
                keyid:68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:52:5c:81:db:a7:52:af:9d:a7:59:1b:66:50:23:7a:73:3f:
         f2:4e:fa:d1:ce:d8:6b:a0:01:e4:29:e0:8f:4a:b4:6c:dc:ff:
         c9:23:3e:e8:e1:a4:19:bb:df:45:4a:18:51:31:27:4d:4f:5f:
         4d:1d:cb:7f:64:6f:6b:ec:99:68:83:93:89:9a:90:37:85:cc:
         65:77:28:d6:ec:f4:cf:d9:fe:ad:47:ff:e5:a1:48:b2:ae:6c:
         8f:1d:f7:22:47:37:09:a3:29:87:96:7a:88:0d:5d:42:ab:57:
         b7:21:2d:8d:ae:c5:7a:7e:ce:9d:a2:55:8b:63:b6:a2:b5:b8:
         4d:b1:f4:c9:ec:a3:9f:14:78:c0:98:74:a3:df:f0:88:8b:26:
         ff:2a:a2:45:d0:ca:c4:93:9a:24:8d:11:10:cd:09:63:36:31:
         f5:68:10:10:63:d1:8b:cf:80:d7:6e:3c:cb:e5:74:a5:6d:24:
         97:16:ff:78:6d:1b:b1:6e:40:d2:74:46:49:2c:5b:b8:91:67:
         22:83:e4:11:e5:46:21:54:df:5c:b3:cc:9a:e0:69:dc:8a:fb:
         91:2e:97:9f:c6:8c:7e:0d:b9:52:25:08:c2:af:4a:56:37:4a:
         47:57:a5:e9:b4:6f:fd:7c:c6:46:c5:64:61:6d:90:a0:b0:14:
         c6:8d:a2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:06:25 2025 by rpki-client