Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa
File:                     0e8a0d07-db89-35b7-89ab-5b71612a7984.roa (raw, json)
Hash identifier:          BGPWwcUXBzHScIavgqXOvJ9uL4QKvYXbDWNGhw5Kbnc=
Subject key identifier:   48:86:A7:24:19:22:EA:08:8C:65:A3:75:99:E2:80:77:DD:13:64:6F
Certificate issuer:       /CN=1d6006cb-f538-4709-8be5-960b57450a76
Certificate serial:       010D0C9F43285848AAFB4E528BB08F63DE345B98
Authority key identifier: 5C:8F:06:CB:20:BB:50:44:59:D1:C7:19:B7:CD:71:27:38:DC:B5:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     396422
IP address blocks:        23.151.88.0/24 maxlen: 24
                          2607:3dc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/1d6006cb-f538-4709-8be5-960b57450a76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/1d6006cb-f538-4709-8be5-960b57450a76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:4e:52:8b:b0:8f:63:de:34:5b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6006cb-f538-4709-8be5-960b57450a76
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=a57eb99f-a256-4578-8195-65b2983ddef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:38:66:60:7a:47:83:de:ea:69:39:24:46:c5:
                    8b:f0:e8:f0:26:4d:a2:23:5c:d4:cd:06:cf:60:ff:
                    07:8c:63:54:d6:dc:e5:4c:32:69:83:11:c6:fa:14:
                    d9:c0:fd:9c:20:f8:14:0f:76:7d:7b:6c:22:bc:ef:
                    55:cd:97:ff:d2:44:10:b2:56:67:f6:66:7b:c5:8a:
                    a3:e5:3e:15:d5:a6:42:9d:0d:12:12:3f:cf:bf:2a:
                    82:0a:ed:a3:b4:c2:26:12:f9:98:b5:40:2d:29:5c:
                    d4:5f:88:ae:2a:6b:af:d1:7d:dd:a2:4b:b9:6f:4e:
                    aa:d6:51:49:ac:a8:1e:7d:38:2c:1b:76:34:88:02:
                    8d:03:d3:27:22:4e:57:78:e0:4a:5d:71:da:be:c7:
                    ef:de:b7:41:31:d2:e3:de:3c:3d:20:96:74:f0:35:
                    f9:cd:b9:e2:32:54:3a:db:db:ba:20:b2:02:f8:15:
                    b8:02:59:81:cc:43:b1:8b:80:dd:e4:0d:d3:79:a5:
                    17:a6:91:33:d4:a5:f5:5b:9a:41:ab:be:43:e6:0e:
                    f5:fb:93:ab:01:46:82:09:18:ed:59:da:26:e7:19:
                    07:d3:0e:58:4c:e9:61:dc:e5:0a:95:b1:a7:8f:cf:
                    24:f3:04:f2:38:3b:37:e9:02:62:cb:05:85:bc:ba:
                    30:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:86:A7:24:19:22:EA:08:8C:65:A3:75:99:E2:80:77:DD:13:64:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/1d6006cb-f538-4709-8be5-960b57450a76.crl

            X509v3 Authority Key Identifier:
                keyid:5C:8F:06:CB:20:BB:50:44:59:D1:C7:19:B7:CD:71:27:38:DC:B5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.88.0/24
                IPv6:
                  2607:3dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f7:19:63:dc:b2:4e:29:b9:4b:3b:ce:d0:25:7a:54:50:9f:
         5c:73:08:9d:bc:70:cc:be:f2:0e:05:77:c1:9f:1c:3c:ce:58:
         c6:5b:99:25:40:b8:f6:b5:a7:c0:3e:71:cf:d7:bb:7d:8e:48:
         25:5a:de:da:51:40:f0:3d:37:f3:55:15:4c:4b:97:b3:e5:33:
         f3:be:bc:20:26:43:6c:6c:74:6b:a3:e1:82:03:fd:ef:c8:a1:
         56:b7:7e:04:b3:c7:6c:82:b7:86:83:9f:00:58:7a:4c:f6:67:
         f5:fc:77:05:35:a2:f7:58:25:20:e6:3b:47:08:bb:b7:56:61:
         7a:1f:50:85:af:9d:f2:d1:f6:dd:2f:61:d1:45:dd:88:f1:ea:
         ef:83:5c:1b:bd:eb:70:11:8f:4c:eb:ca:58:66:fd:5c:31:86:
         cd:9d:21:77:1a:29:4b:ea:49:f0:76:23:2b:18:2a:98:6c:d5:
         df:d1:d0:92:24:46:65:be:6d:c4:74:09:20:e3:63:a5:a1:64:
         22:34:cc:52:b6:56:c8:3a:cd:24:60:37:27:d7:44:b7:fb:cb:
         c6:9e:7f:6c:d8:d0:05:06:37:c2:a9:6d:2c:5e:8d:d9:08:45:
         0e:ed:e5:8a:0a:ce:f6:b9:43:a7:21:4d:94:53:ed:dc:57:01:
         a5:c4:dc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:28:30 2025 by rpki-client