Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/a5083115-9d64-38b2-a390-44d44072b1bf.roa
File:                     a5083115-9d64-38b2-a390-44d44072b1bf.roa (raw, json)
Hash identifier:          22ULd3+oP6TfHzBhsO9dgM2fe1vNzlN4rGFRs2gN4LQ=
Subject key identifier:   FC:70:67:BC:C2:1F:19:A0:0D:DB:CF:46:C7:55:C7:64:D7:E9:13:C0
Certificate issuer:       /CN=dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a
Certificate serial:       010D0C9F432858494F93E8D8776A742571DE7160
Authority key identifier: D6:BA:62:8C:6C:6D:EB:E5:BF:15:35:E1:6C:06:4D:B0:26:70:6F:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/a5083115-9d64-38b2-a390-44d44072b1bf.roa
Signing time:             Wed 26 Mar 2025 01:00:40 +0000
ROA not before:           Wed 26 Mar 2025 01:00:40 +0000
ROA not after:            Tue 24 Jun 2025 01:00:40 +0000
asID:                     399861
IP address blocks:        23.191.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4f:93:e8:d8:77:6a:74:25:71:de:71:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a
        Validity
            Not Before: Mar 26 01:00:40 2025 GMT
            Not After : Jun 24 01:00:40 2025 GMT
        Subject: CN=ef249721-90ab-4310-a053-c8fc4ad9276a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:05:7a:9a:a7:51:e9:85:28:91:f3:b7:c8:a0:
                    43:d1:46:ee:20:70:c4:cc:d4:27:2e:4c:4e:bf:f6:
                    ca:21:a3:f9:a4:af:de:4a:78:d7:06:71:0f:93:d2:
                    52:02:dd:56:d6:0b:68:5c:fa:79:7e:05:7d:b7:01:
                    42:d1:ce:51:ae:db:1c:f4:3b:8c:64:b3:99:2d:3a:
                    3a:95:be:da:16:1a:79:53:22:e7:ab:a3:02:80:d8:
                    69:18:cf:e4:72:5d:83:43:f9:7e:cd:58:f9:23:cb:
                    25:5f:44:be:80:a3:81:d4:f1:c4:4f:5c:e0:c9:f0:
                    16:00:bb:c4:79:71:47:45:e2:ad:5e:6b:0c:32:e1:
                    61:23:f2:90:ed:4d:80:30:2a:26:72:3f:6b:24:ef:
                    e6:31:5d:ff:b4:72:b7:94:ef:53:27:fb:a1:29:7b:
                    47:47:b9:1d:25:ed:fd:8d:d0:03:04:db:82:74:f1:
                    33:6d:ba:43:42:2e:61:1b:1f:68:ed:98:aa:48:56:
                    c8:a2:15:f4:1f:6b:ee:ad:fb:7f:a7:df:79:d1:6f:
                    0a:81:78:30:1f:fb:66:ea:b0:d9:1d:9f:eb:4d:ad:
                    e4:fc:ef:ac:30:c6:54:ff:6d:b4:6f:0c:28:9a:7b:
                    bd:71:e7:b8:8f:8b:90:92:10:68:a3:b2:99:8a:59:
                    e3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:70:67:BC:C2:1F:19:A0:0D:DB:CF:46:C7:55:C7:64:D7:E9:13:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/a5083115-9d64-38b2-a390-44d44072b1bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BA:62:8C:6C:6D:EB:E5:BF:15:35:E1:6C:06:4D:B0:26:70:6F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c8:16:5d:71:80:72:1a:5a:14:43:1e:87:11:fb:f2:86:21:
         ca:49:38:3c:ad:d6:49:d3:80:2f:00:84:0e:03:f2:1f:12:87:
         76:03:b7:f9:29:90:80:21:ce:f2:61:1d:de:ea:ac:1a:1c:82:
         ed:92:8c:2c:56:55:0b:b5:d8:e7:85:4b:45:07:f1:66:a6:4d:
         65:6f:91:7f:4e:29:61:5b:64:79:0c:d9:f2:bf:b8:95:31:27:
         1f:ff:28:5e:d4:71:71:a4:3e:7c:cb:d6:27:45:22:43:9f:b5:
         10:52:f3:11:7a:ff:8c:bc:17:f6:70:71:f9:db:bd:e3:38:fb:
         ca:b8:a7:01:8b:59:b6:34:dd:df:8b:dd:b5:23:46:96:ab:e7:
         b6:10:8a:a1:12:f2:62:8d:c3:be:49:7e:78:b6:ff:63:64:45:
         6d:01:8a:66:77:74:2d:46:25:00:85:5e:04:00:3b:7b:c1:ef:
         90:2a:bb:77:49:a4:00:e6:94:27:0f:94:64:bd:f2:07:e9:d5:
         e0:aa:b0:fa:39:cb:f5:d6:b9:7c:0d:3b:f1:f6:54:0e:f7:67:
         a8:8a:f6:6d:76:05:3b:8e:72:cf:9a:5a:33:da:e6:7b:5a:81:
         6c:b3:20:03:35:f8:95:02:86:1b:78:a3:2e:26:97:d2:3e:fc:
         ce:8c:b2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:19 2025 by rpki-client