Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa
File:                     c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa (raw, json)
Hash identifier:          qXKt4WwJ5wXRx5sSWk+Kozkg5AvS3dkbXXuys+Fw7iU=
Subject key identifier:   02:04:75:DB:1A:52:AA:66:BA:50:F9:07:AC:1B:6A:2B:B3:B2:8A:1F
Certificate issuer:       /CN=cf96d190-5b35-4b24-ac78-599aa0e50405
Certificate serial:       010D0C9F432858494CC94FA4D7BA0024578CA780
Authority key identifier: 56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     400655
IP address blocks:        23.191.184.0/24 maxlen: 24
                          2602:f7e4::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:4f:a4:d7:ba:00:24:57:8c:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf96d190-5b35-4b24-ac78-599aa0e50405
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=ac40be27-66d9-4e97-a692-297b2182adae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6d:3e:0b:3e:7c:ba:91:8a:33:37:b0:cc:cf:
                    74:66:d6:5c:df:3b:cf:cf:26:62:4c:72:cb:4d:d6:
                    64:d1:3b:e3:1f:61:72:84:7f:ed:a3:c0:8c:c6:6f:
                    a6:a1:81:8a:5f:da:4f:7f:ac:a9:97:d9:02:3c:5e:
                    1f:da:14:cf:61:db:e9:68:9c:2c:b7:ce:30:dc:72:
                    55:c7:47:1f:11:0a:5d:70:e9:2b:f4:fa:4c:d3:62:
                    6e:36:8d:d4:8e:1f:8f:e1:b0:6a:ff:67:bb:2d:c8:
                    ac:62:25:5f:4e:d8:66:08:08:21:30:27:54:e4:94:
                    75:70:a6:e7:74:74:de:65:18:1c:29:44:a5:76:bd:
                    d1:a1:18:7e:ea:f5:46:70:05:ad:03:92:07:5f:e5:
                    a8:41:b6:c8:32:ed:44:7c:72:88:6b:bd:f9:fd:ea:
                    dd:24:6a:26:45:b8:5b:37:3a:9b:42:d0:a4:e6:16:
                    12:40:fc:52:8e:be:e1:65:4e:83:94:63:d9:ca:61:
                    e7:00:7c:55:03:48:92:ef:b6:5a:71:6d:06:97:1c:
                    58:95:4e:92:08:ee:3b:71:de:aa:bc:fb:0e:42:b0:
                    56:64:ed:e7:42:b9:b7:f9:e1:d1:0b:09:b4:c6:4c:
                    5c:fd:68:5d:85:4b:0c:d5:85:e1:4d:3b:0b:87:75:
                    a8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:04:75:DB:1A:52:AA:66:BA:50:F9:07:AC:1B:6A:2B:B3:B2:8A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl

            X509v3 Authority Key Identifier:
                keyid:56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.184.0/24
                IPv6:
                  2602:f7e4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:08:f3:e0:62:80:98:31:96:d2:cc:56:53:ac:f3:f5:62:
         6f:61:4c:66:42:49:1f:3e:0f:bb:bf:87:00:80:95:77:a8:66:
         39:61:eb:09:10:44:54:7f:c1:63:3f:d4:ab:56:4b:cc:06:85:
         52:42:4c:a0:92:f3:1c:4c:24:6a:02:7b:5e:91:7f:3e:bc:6a:
         68:cc:62:3e:7c:1d:c0:b7:99:43:07:eb:84:e5:6a:d1:ba:b5:
         62:d6:05:9c:b6:8b:35:f1:ae:04:a2:c9:89:9d:b7:9e:03:07:
         54:cb:35:3d:f8:dc:42:c1:06:ff:9a:cf:8a:b4:13:18:fd:66:
         24:03:d8:58:0a:f9:ac:44:83:63:11:ee:17:ce:d5:c5:55:e5:
         1f:ed:ef:1d:93:4c:7f:66:41:79:46:00:d6:17:1c:cf:e3:1e:
         f8:a0:f7:ec:19:af:aa:87:6e:b6:de:ec:4c:5f:3d:1d:79:87:
         94:20:a1:b8:c2:11:18:c7:75:47:8d:cb:39:bb:a5:a0:4c:13:
         07:9f:bb:1d:df:f9:55:92:0b:80:fc:8d:7e:c1:81:15:96:df:
         f3:42:b4:b3:eb:80:77:fb:61:3b:77:c3:63:d8:d7:fe:3b:89:
         62:6a:3d:5e:2f:13:18:37:65:43:ed:c1:1b:9a:f5:07:29:82:
         9b:f2:bb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:39 2025 by rpki-client