Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/6053494b-ad6e-3463-a4d4-78568350ab7f.roa
File:                     6053494b-ad6e-3463-a4d4-78568350ab7f.roa (raw, json)
Hash identifier:          fj9QpnSNkErnXCTNcrWc+ItwsXtVkPeVSDvvJKMI/yM=
Subject key identifier:   71:72:9B:3A:B9:BB:54:F1:AE:FF:B8:5E:33:24:D7:5E:8D:5E:DF:C6
Certificate issuer:       /CN=ea962f40-5514-411b-b23b-2a5e787628d5
Certificate serial:       010D0C9F4328584902EC2DD42AF05C6E25F3ADA0
Authority key identifier: 95:EC:28:9C:11:BA:47:70:E5:AA:FD:0E:AE:40:4F:AA:7D:C1:F2:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/6053494b-ad6e-3463-a4d4-78568350ab7f.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     401336
IP address blocks:        23.189.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:2d:d4:2a:f0:5c:6e:25:f3:ad:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea962f40-5514-411b-b23b-2a5e787628d5
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=ca3d1a9b-836e-4c27-bdc5-b76253b89f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:12:c4:b4:8c:43:98:e0:5b:b5:19:46:eb:f8:
                    50:4a:1b:38:34:c2:ac:9d:33:a1:5d:45:03:4c:b3:
                    a4:cd:16:64:47:37:2b:0a:53:c2:23:6a:21:35:bc:
                    fc:2c:c9:17:e4:17:90:6e:63:c6:b7:46:2e:9d:e1:
                    29:5f:34:06:34:e1:1b:d2:93:21:d0:f1:cc:38:1c:
                    0b:46:4c:c3:3b:e6:35:b4:f5:94:e4:32:15:8b:ee:
                    ed:d6:94:c1:42:6e:c3:31:04:11:15:d4:42:b3:cf:
                    8e:09:77:a8:52:03:af:8e:ed:c4:81:1f:2e:ab:71:
                    89:b3:ae:86:30:84:61:48:2a:43:00:58:f2:25:cf:
                    6f:bd:9e:4f:81:5f:52:16:c1:84:d7:16:c9:90:6c:
                    84:30:fe:2f:6e:c2:86:60:a3:a9:dc:c4:7f:43:9b:
                    cf:5f:b5:f9:e1:92:28:c0:c7:8f:00:65:03:54:79:
                    bc:8d:1a:a0:c2:ce:74:ac:31:b0:76:ae:47:f0:44:
                    59:9a:2b:48:b9:3a:e2:8a:ca:ae:8e:a4:76:ae:d1:
                    3d:ee:de:06:99:cc:81:c1:a4:69:c9:20:86:6f:e1:
                    66:dd:40:7b:b6:ff:b7:1d:c8:32:fb:f7:a6:66:9e:
                    69:82:7a:02:76:c2:fe:cc:16:fb:54:e9:5a:4f:6a:
                    41:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:72:9B:3A:B9:BB:54:F1:AE:FF:B8:5E:33:24:D7:5E:8D:5E:DF:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/6053494b-ad6e-3463-a4d4-78568350ab7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.crl

            X509v3 Authority Key Identifier:
                keyid:95:EC:28:9C:11:BA:47:70:E5:AA:FD:0E:AE:40:4F:AA:7D:C1:F2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:0e:9b:82:fd:07:7d:a6:4d:ba:ed:15:f3:19:1f:f4:17:e2:
         25:f2:89:f2:63:b5:ec:33:a8:65:61:be:a8:e9:80:c1:a8:5c:
         66:2a:96:cd:0a:88:d7:a8:02:3f:33:1f:d7:d5:60:02:e0:7b:
         c0:d0:02:32:cd:aa:f7:c0:9f:b5:00:b2:90:d3:a8:ba:f7:1f:
         e9:1a:74:04:ed:96:f5:80:a5:92:86:2d:4f:63:42:27:08:ba:
         af:bd:0c:d4:c5:a4:7a:5c:32:22:0c:5d:8e:1d:3d:82:bd:03:
         92:e2:0e:a4:fb:90:e8:c1:99:7d:68:6f:48:28:5a:33:6a:e7:
         21:b2:81:9a:57:e0:03:ce:13:9a:b2:9c:57:af:fc:6e:6a:d3:
         00:5f:05:42:b6:fe:c2:a7:79:3d:df:10:c3:23:a2:9b:90:6f:
         64:4f:2e:ae:ae:a2:94:3a:95:59:55:3c:5b:fd:e9:3b:70:fc:
         16:cf:c9:85:a3:b2:3a:60:fa:4f:35:ec:b3:20:7d:53:e7:50:
         22:99:c1:5a:c2:86:6c:84:6a:19:b8:d1:ca:1d:fb:6a:c6:4f:
         e3:e1:d8:f6:50:78:bc:2b:b8:ac:c4:b1:93:b3:cb:64:15:db:
         32:75:6e:15:bf:6e:cb:0a:a8:23:18:92:25:7e:ec:75:43:61:
         50:07:37:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:19 2025 by rpki-client