Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c44e440f-4d01-4c06-b75f-062798907867/62b61f23-bd81-39d1-87ec-aea5c3f1112e.roa
File:                     62b61f23-bd81-39d1-87ec-aea5c3f1112e.roa (raw, json)
Hash identifier:          P7n264/UxI08Uu31DT9EKcmf/3aWilXv91ZAveKtUkc=
Subject key identifier:   4D:C6:53:02:39:65:B2:DA:C4:B8:03:89:CB:85:21:9B:B8:DB:A1:FC
Certificate issuer:       /CN=c44e440f-4d01-4c06-b75f-062798907867
Certificate serial:       010D0C9F43285848DBD66ED63A5610B9120BB200
Authority key identifier: 9D:97:F6:4C:76:67:5C:AD:D4:4C:BD:E3:F8:A7:9F:D9:40:5C:CC:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c44e440f-4d01-4c06-b75f-062798907867.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c44e440f-4d01-4c06-b75f-062798907867/62b61f23-bd81-39d1-87ec-aea5c3f1112e.roa
Signing time:             Wed 12 Feb 2025 14:00:53 +0000
ROA not before:           Wed 12 Feb 2025 14:00:53 +0000
ROA not after:            Tue 13 May 2025 13:00:53 +0000
asID:                     395898
IP address blocks:        23.152.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c44e440f-4d01-4c06-b75f-062798907867/c44e440f-4d01-4c06-b75f-062798907867.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c44e440f-4d01-4c06-b75f-062798907867/c44e440f-4d01-4c06-b75f-062798907867.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c44e440f-4d01-4c06-b75f-062798907867.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:db:d6:6e:d6:3a:56:10:b9:12:0b:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c44e440f-4d01-4c06-b75f-062798907867
        Validity
            Not Before: Feb 12 14:00:53 2025 GMT
            Not After : May 13 13:00:53 2025 GMT
        Subject: CN=b9f51a20-461a-4a99-b2f9-3accbcd4a15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5d:7f:34:01:fc:be:b6:27:39:ef:cc:cc:ac:
                    97:a2:9e:18:15:f7:50:59:f9:da:c3:8f:2f:31:39:
                    19:7f:0e:4c:d0:a5:c9:bf:b1:9d:93:61:8d:9b:ed:
                    d0:e3:97:66:a4:b5:73:5b:77:2b:33:d4:69:3b:99:
                    59:b1:e8:9f:e2:e4:57:60:70:3a:41:bc:4f:5f:c0:
                    fb:4b:d8:ea:c1:11:ab:0b:15:02:03:53:80:9d:e5:
                    54:75:ad:16:b6:b4:36:da:7e:8c:de:97:05:5b:d4:
                    59:2c:d0:54:1f:3e:93:27:11:d4:29:cc:9c:65:5b:
                    e6:76:10:d9:2f:d9:8c:dc:05:a0:26:88:7c:c4:f5:
                    0a:5e:9f:b3:0b:9b:ef:02:fd:78:47:06:0e:be:05:
                    9c:f0:40:7b:04:30:8d:d5:5c:88:01:71:2f:c8:ea:
                    52:82:3f:0a:4b:2c:a6:8c:c0:05:27:cc:9f:26:7d:
                    0a:41:c9:08:b4:de:2d:3b:ab:fb:5b:f2:5e:9d:17:
                    00:69:5f:59:ca:f7:ab:42:0a:cb:c8:73:8a:15:37:
                    7f:ae:0a:02:43:d5:38:31:5c:20:56:d5:f6:93:d9:
                    8f:f1:6e:0a:02:e3:4c:e7:ab:6e:ba:ab:00:17:7a:
                    68:2f:d3:2e:5d:ea:b1:57:c9:e2:cb:d3:0f:af:af:
                    15:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C6:53:02:39:65:B2:DA:C4:B8:03:89:CB:85:21:9B:B8:DB:A1:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c44e440f-4d01-4c06-b75f-062798907867/62b61f23-bd81-39d1-87ec-aea5c3f1112e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c44e440f-4d01-4c06-b75f-062798907867/c44e440f-4d01-4c06-b75f-062798907867.crl

            X509v3 Authority Key Identifier:
                keyid:9D:97:F6:4C:76:67:5C:AD:D4:4C:BD:E3:F8:A7:9F:D9:40:5C:CC:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c44e440f-4d01-4c06-b75f-062798907867.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c9:69:69:2a:2b:b1:fe:a8:be:7a:b7:64:dd:03:16:ea:4a:
         2a:7a:15:84:10:d7:a2:71:99:fc:e6:2c:69:64:b8:6b:d0:54:
         3d:4f:49:d1:5b:39:53:6e:e4:e5:3d:59:c7:c8:b9:fe:6a:5e:
         e5:2f:67:bc:8c:06:17:5a:52:5c:fb:2a:34:38:ba:97:ef:4f:
         87:b3:40:7f:39:26:c2:1e:b4:99:cd:98:62:f0:c9:20:e3:92:
         e9:03:84:85:a2:34:9b:e8:b7:dc:39:ef:da:f8:91:84:33:b5:
         78:80:c1:63:68:a0:b1:6b:ad:7d:1f:ac:1c:47:d9:78:dc:c9:
         6a:c5:80:ea:fd:8a:9a:8f:84:06:d6:18:8b:00:4a:e9:c3:d5:
         26:3e:0f:50:93:09:e2:87:c7:24:7c:87:46:0b:19:ee:25:af:
         ac:3f:3f:71:af:61:b6:89:11:40:88:96:0a:4d:70:45:d1:04:
         61:9b:96:7c:69:f6:1d:c4:01:0f:ab:94:ad:e3:bc:38:30:f2:
         c7:65:f5:e2:0c:8d:ed:c0:43:28:68:13:89:8c:d0:4c:74:2e:
         1d:83:2c:f5:03:d7:1e:e8:30:17:1d:75:c7:59:c5:a8:f8:94:
         9e:90:e5:7a:78:73:07:90:54:06:20:bf:ab:68:38:99:f0:80:
         50:21:7a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:05:18 2025 by rpki-client