Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/0ea3fd91-deb2-3677-854f-64e931788b66.roa
File:                     0ea3fd91-deb2-3677-854f-64e931788b66.roa (raw, json)
Hash identifier:          Bx6rT+RekJO+JeMmmZJ2WDGvFHaYuSsEZ4AvT9G8SqU=
Subject key identifier:   14:69:52:2C:74:A7:49:19:BD:12:C8:62:EB:B1:36:32:3E:7B:FB:28
Certificate issuer:       /CN=23f3c964-aab2-4965-9f55-d270cc840a73
Certificate serial:       010D0C9F43285848C2B650DE7D34281C43E92040
Authority key identifier: 3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/0ea3fd91-deb2-3677-854f-64e931788b66.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     30265
IP address blocks:        23.184.248.0/24 maxlen: 24
                          2602:f86e::/36 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:50:de:7d:34:28:1c:43:e9:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f3c964-aab2-4965-9f55-d270cc840a73
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=8be188c3-73e6-400a-aeb2-fea13a4ec6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d0:61:ec:c5:6a:fd:3f:3f:cd:10:ce:99:76:
                    25:96:66:3c:a3:7c:67:b1:73:0d:be:39:83:79:2a:
                    44:e4:f3:80:c8:b8:ad:a5:dd:c9:f7:ce:15:c4:15:
                    31:9b:70:51:3d:05:c0:7e:8e:8f:99:35:62:b4:12:
                    6f:30:44:d5:58:c5:14:6b:95:c8:88:31:97:0d:cd:
                    a9:9c:2b:61:ca:a7:ee:dc:d2:e6:b9:a5:a7:a0:0c:
                    1e:59:de:5a:ea:64:8d:8c:f5:66:3a:b5:3e:f7:70:
                    7c:36:ce:19:d5:49:cc:19:70:02:d9:83:e2:aa:ea:
                    e6:75:8c:2d:be:e1:9c:f8:4c:00:5c:2b:87:0e:49:
                    c0:ac:ec:23:fc:27:b6:9e:c2:b6:f9:d1:2a:43:62:
                    99:52:76:cc:da:63:41:b7:95:64:d4:3a:d4:f6:39:
                    a2:2f:55:2e:df:3b:69:1d:a8:1b:39:98:e9:c3:1b:
                    fb:6e:89:73:4a:47:68:67:c7:67:6c:30:c1:cf:d4:
                    8c:0c:03:69:5f:4e:a3:a9:6d:4d:41:58:5d:d6:bf:
                    2f:fb:3a:6d:f8:11:33:6b:62:ee:1d:44:0c:9b:c9:
                    5d:54:3b:34:09:11:ed:53:01:b7:cf:c1:9a:d1:b1:
                    75:50:c8:00:ce:d6:9e:8e:47:ce:0b:44:b5:37:13:
                    5a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:69:52:2C:74:A7:49:19:BD:12:C8:62:EB:B1:36:32:3E:7B:FB:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/0ea3fd91-deb2-3677-854f-64e931788b66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl

            X509v3 Authority Key Identifier:
                keyid:3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.248.0/24
                IPv6:
                  2602:f86e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e4:98:f2:fc:aa:89:b5:fd:ae:ea:8e:12:d2:36:d0:d3:7e:
         99:fc:1c:8c:e6:0f:7e:a5:e3:7f:5e:c3:8c:af:26:a7:19:a7:
         96:b1:9c:a2:d3:81:3d:3f:cb:5b:7f:3f:9b:e1:c5:6f:34:58:
         23:bc:7e:16:92:b5:c9:32:08:64:87:09:e7:04:db:5a:3a:41:
         23:85:14:6a:45:79:29:8a:fb:b5:72:c0:6a:19:f0:f9:8e:06:
         3a:35:5e:03:80:ef:85:86:cb:a0:18:52:3d:1d:e8:cf:f0:21:
         01:72:54:9c:ab:5f:06:63:ef:7c:7b:09:99:d6:00:50:f3:35:
         57:2a:db:6a:8d:c8:91:96:44:48:14:77:09:ca:b0:2f:61:b6:
         49:94:12:ec:ef:e6:2c:28:9d:8d:62:6b:47:b5:e7:65:d9:bf:
         d6:53:b2:26:90:32:57:8e:79:bc:76:ed:6c:99:59:24:ca:e9:
         d2:48:9a:da:8e:58:68:23:a7:68:98:5f:32:d2:b4:50:8c:63:
         b3:b3:2b:72:68:35:53:3b:58:7d:b2:f9:a8:7c:ac:06:fa:f7:
         47:d5:04:67:b5:fa:fd:c1:9e:5b:7c:fc:1b:08:71:12:5f:6d:
         6f:41:8d:05:03:a8:61:11:f4:64:86:fd:4c:8d:5c:18:97:97:
         43:b8:48:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:16 2025 by rpki-client