Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/65373b22-d003-3664-af25-5e36b1d06812.roa
File:                     65373b22-d003-3664-af25-5e36b1d06812.roa (raw, json)
Hash identifier:          T59J1Hqdl0YqCYVK7WLJT2bta+rMOupf0czFYCO/iro=
Subject key identifier:   91:A6:8F:BE:5D:58:5C:9C:E2:0F:9B:9C:C2:00:DD:72:7C:92:B7:D5
Certificate issuer:       /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial:       010D0C9F43285849D2CA1D053EA5D734FD0A31B0
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/65373b22-d003-3664-af25-5e36b1d06812.roa
Signing time:             Mon 12 May 2025 01:00:47 +0000
ROA not before:           Mon 12 May 2025 01:00:47 +0000
ROA not after:            Sun 10 Aug 2025 01:00:47 +0000
asID:                     19905
IP address blocks:        23.128.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d2:ca:1d:05:3e:a5:d7:34:fd:0a:31:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
        Validity
            Not Before: May 12 01:00:47 2025 GMT
            Not After : Aug 10 01:00:47 2025 GMT
        Subject: CN=9ea67845-fb84-495a-973e-d4f12cff5364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1f:98:ab:90:db:3f:4b:0c:92:ba:58:9c:ed:
                    fe:37:4e:90:fe:c9:67:6e:c8:e6:dc:b5:65:c0:d9:
                    93:34:b2:03:87:5d:44:42:85:c7:10:47:8d:81:52:
                    ea:4d:0f:2f:a5:b9:49:a4:ae:37:d7:c6:cf:50:dc:
                    f2:20:44:44:ea:4a:ca:5e:79:f1:90:b8:69:01:86:
                    69:21:7d:1f:78:9f:4a:da:2a:c9:a9:1e:02:58:40:
                    8f:74:71:3c:ca:62:6f:da:06:a3:a5:11:f1:c2:d6:
                    3d:d9:3d:ed:f8:07:41:29:c2:eb:66:92:09:2f:17:
                    d8:9b:4b:e3:6c:54:80:47:1f:f2:8c:10:6b:fb:73:
                    79:0a:9c:25:92:f0:6f:10:61:5a:98:6c:c3:f7:2b:
                    91:74:92:7e:da:b9:1c:57:f4:1f:f8:89:14:cc:d4:
                    94:27:ae:59:a9:98:11:7f:bc:2d:5b:e3:f0:9c:11:
                    3c:5a:79:1b:98:61:48:17:f9:df:bc:c5:c6:ed:be:
                    e8:2f:32:d2:4f:aa:61:4a:da:21:1d:b7:41:9c:ea:
                    e8:d3:49:09:57:3f:ef:73:89:20:7b:c0:e5:1b:6a:
                    cd:18:a9:b8:78:8d:ae:6b:a0:ae:f9:93:2f:ff:19:
                    7e:82:25:cb:f7:61:71:7b:76:ea:8f:fc:62:62:31:
                    66:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A6:8F:BE:5D:58:5C:9C:E2:0F:9B:9C:C2:00:DD:72:7C:92:B7:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/65373b22-d003-3664-af25-5e36b1d06812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl

            X509v3 Authority Key Identifier:
                keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:3a:bf:89:a6:ce:a0:50:6b:44:68:92:69:f7:85:45:8c:f8:
         59:68:cc:5b:e7:a1:77:d9:47:7a:a3:1a:b4:b0:10:52:51:77:
         ed:72:79:ca:ef:09:56:ee:d4:04:d0:c2:38:c0:4a:22:95:f5:
         12:71:34:61:35:f5:39:e4:fc:fa:50:52:3d:86:3b:bd:fe:da:
         bb:9a:a3:1f:1d:96:c1:11:a7:af:6e:cb:b6:d3:4b:55:ed:0e:
         63:41:bd:88:ab:76:bc:d7:52:41:fb:96:50:b9:d1:0b:e9:79:
         63:24:5d:17:ae:8c:7e:6e:17:21:ed:1e:28:0f:f1:ea:d0:7f:
         b5:db:6d:28:f0:85:2f:06:19:67:5e:b2:3d:71:04:3b:c5:44:
         be:20:0b:c8:a3:3d:9b:3f:9f:5a:07:b0:0e:4a:60:a4:c5:32:
         2a:b8:4f:49:0b:0c:61:ab:ee:02:9c:33:44:7e:b6:c6:0e:18:
         8a:45:9e:87:29:3a:db:3e:b4:ae:2a:ab:9a:85:f3:56:a2:c2:
         42:1a:7d:06:a8:79:0f:36:4c:1b:2c:9f:1c:c0:dc:a3:a7:a9:
         0d:ea:2a:d1:fb:a8:25:3d:df:60:36:eb:6a:1f:51:e9:bf:b6:
         a9:c3:34:e7:b3:6f:43:9d:61:30:a9:0e:a7:d8:c5:c8:01:db:
         45:d0:6a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:48:34 2025 by rpki-client