Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/c7d7aef3-1f19-3f42-a05d-81f59c59181f.roa
File:                     c7d7aef3-1f19-3f42-a05d-81f59c59181f.roa (raw, json)
Hash identifier:          MOkxnX4aNaaLmHmMXeF4BMe/5HEnWF70BWV7L58hIkM=
Subject key identifier:   7E:C5:BD:BE:B1:6E:7E:65:2F:ED:A0:D6:E3:B6:95:6F:48:9C:B0:63
Certificate issuer:       /CN=11f590b6-eb6e-4969-824b-0df247220283
Certificate serial:       010D0C9F4328584953C41612C5C80AE99A017B80
Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/c7d7aef3-1f19-3f42-a05d-81f59c59181f.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     395301
IP address blocks:        23.227.216.0/24 maxlen: 24
                          23.227.217.0/24 maxlen: 24
                          23.227.218.0/24 maxlen: 24
                          23.227.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:16:12:c5:c8:0a:e9:9a:01:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=dc628655-e7e7-43e8-89ca-e3a9b2b3864c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:43:21:74:40:13:6b:d8:ad:88:3c:9a:0a:
                    f7:3f:22:5f:23:9f:b4:a6:02:a2:38:45:26:86:a2:
                    46:d5:8b:6e:fe:e2:01:82:c9:02:01:e5:50:f5:93:
                    3c:84:e2:a5:db:89:da:40:9a:f5:59:b3:a9:46:0b:
                    92:b0:8f:95:d4:65:1f:00:d4:f5:15:50:3b:27:22:
                    68:82:f4:b3:df:46:4d:ae:ce:ee:d2:b6:ec:3d:71:
                    b2:b4:9e:5f:f6:a7:40:93:13:e6:19:17:ea:1e:ce:
                    b6:51:31:ec:bf:75:0f:1a:6c:5d:e0:45:44:0e:9b:
                    14:a2:cc:45:c8:a8:28:74:15:96:7e:2b:09:82:10:
                    96:4b:06:6b:03:fa:ab:72:34:1c:b7:a2:a1:24:87:
                    c4:67:77:ba:94:b3:66:74:b1:b4:77:4a:8a:7b:22:
                    5c:57:c4:3a:b7:cb:80:77:0f:79:c9:0d:4e:f4:3a:
                    c8:3f:c0:5b:4e:74:ef:e6:30:47:fc:8f:93:d5:d3:
                    26:18:a2:fb:2e:fd:23:2a:0f:42:10:67:17:1d:d5:
                    ff:a1:c3:c8:0a:49:5c:30:03:e7:0d:5e:7b:44:8a:
                    86:32:0f:04:4f:57:b7:15:ae:ef:b0:01:8c:0f:49:
                    15:f6:44:94:11:d4:ec:33:55:71:a1:18:53:2f:3c:
                    64:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C5:BD:BE:B1:6E:7E:65:2F:ED:A0:D6:E3:B6:95:6F:48:9C:B0:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/c7d7aef3-1f19-3f42-a05d-81f59c59181f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl

            X509v3 Authority Key Identifier:
                keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:84:6f:bc:d9:5e:e3:a0:10:29:43:57:5b:ee:c6:28:38:54:
         d2:8e:1a:0c:4d:13:3c:ab:5d:b3:9d:13:6b:15:9f:c3:98:08:
         e2:5a:b8:60:63:e5:ba:7a:86:3a:51:48:69:71:01:f1:f0:9c:
         79:a7:82:64:b8:44:02:9d:61:49:7f:2b:f9:ce:2a:ed:f1:b5:
         16:fd:7a:ed:1d:a3:75:86:8c:c1:11:33:30:ec:18:f4:36:39:
         ee:bc:da:d4:34:7a:11:9b:a2:99:2f:ea:ef:39:c5:2e:dc:0e:
         fc:da:09:3b:88:f5:ae:7d:46:5d:b0:1d:cd:a0:b4:79:b3:07:
         09:a9:d5:23:f5:07:6e:28:df:89:ec:a2:20:d5:28:02:21:fb:
         3f:e0:ac:dc:08:bb:1e:72:8f:22:59:40:0f:2e:9f:b9:2e:ed:
         2f:77:b2:af:c9:a1:0e:48:6d:d5:99:fe:30:a3:78:ac:36:a9:
         3f:c7:80:5d:01:5a:23:62:79:96:4b:3b:34:6d:80:12:8c:30:
         b1:ca:42:cc:55:59:76:27:e1:cf:a9:53:ef:1c:ea:ea:8a:1a:
         a5:44:f8:eb:35:d8:d2:e4:58:59:47:26:f1:db:22:3a:95:43:
         b7:e6:42:42:f6:78:e8:5c:51:0c:3c:0e:f7:60:5f:94:7f:af:
         c0:71:18:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:46 2025 by rpki-client