Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/30c7134b-40eb-32f5-8e24-6aadae966e69.roa
File:                     30c7134b-40eb-32f5-8e24-6aadae966e69.roa (raw, json)
Hash identifier:          elXjuOFHsJTGhzC5tZPkMgvC54X5zrvLQvg9PBOmyjs=
Subject key identifier:   48:FB:B8:A5:EE:DE:39:0A:1D:FC:ED:11:5B:42:56:64:A8:57:BA:ED
Certificate issuer:       /CN=f7e22a46-44cd-4462-bb02-872f7aa721b7
Certificate serial:       010D0C9F43285848F22C64D35CC6E40C3F84C080
Authority key identifier: 4B:FF:DD:B3:5D:E7:17:48:AF:51:A3:98:D0:AF:FE:9D:45:3B:D5:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/30c7134b-40eb-32f5-8e24-6aadae966e69.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     30542
IP address blocks:        23.140.80.0/24 maxlen: 24
                          23.181.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/f7e22a46-44cd-4462-bb02-872f7aa721b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/f7e22a46-44cd-4462-bb02-872f7aa721b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:64:d3:5c:c6:e4:0c:3f:84:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e22a46-44cd-4462-bb02-872f7aa721b7
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=80acaa3f-e45c-4aed-8215-637d98832cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5f:9f:d3:24:20:dd:d2:b1:5e:1f:69:c3:c3:
                    b4:cf:1e:df:f7:cd:15:07:5c:c8:ed:c0:41:c0:a3:
                    d4:c9:c8:57:7f:49:bb:65:c1:6b:54:8a:42:de:9d:
                    9b:8c:22:a9:db:44:b5:4f:a5:d0:98:a8:0b:5d:f7:
                    67:f4:0a:db:97:f8:dd:1f:f0:3a:cf:1e:87:26:f7:
                    b4:66:2c:e1:ad:08:45:6f:74:84:d6:8f:f8:a5:03:
                    cd:75:19:1d:1c:81:37:36:c4:dd:ba:d0:c2:e0:9d:
                    16:f9:9c:e6:4c:24:67:6c:24:9b:8d:96:29:b5:ca:
                    73:ba:ad:c9:89:98:65:24:ca:27:33:bc:b5:6d:5b:
                    c7:f2:40:ce:ac:f9:fd:13:33:ce:4b:eb:58:74:c2:
                    e1:4b:ef:ea:f9:39:b0:6d:ab:88:a7:43:20:2f:ff:
                    13:64:95:74:1a:7e:4c:7b:98:b9:86:b1:4a:56:60:
                    64:f4:3c:0d:b0:b0:58:69:12:4e:b4:05:68:8f:08:
                    1e:ab:c0:de:81:9a:77:ea:68:e3:5f:48:94:d0:53:
                    30:99:c3:b5:06:af:37:f8:bd:30:56:11:1c:3c:4c:
                    40:e6:97:e5:db:a0:6a:41:e2:bc:0f:c6:dc:49:70:
                    3a:41:61:6a:a9:0f:c5:f0:95:98:a0:88:df:22:55:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FB:B8:A5:EE:DE:39:0A:1D:FC:ED:11:5B:42:56:64:A8:57:BA:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/30c7134b-40eb-32f5-8e24-6aadae966e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/f7e22a46-44cd-4462-bb02-872f7aa721b7.crl

            X509v3 Authority Key Identifier:
                keyid:4B:FF:DD:B3:5D:E7:17:48:AF:51:A3:98:D0:AF:FE:9D:45:3B:D5:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.80.0/24
                  23.181.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:fe:ba:24:67:fa:ae:e0:cf:77:10:fd:00:fd:ad:43:1b:2c:
         e4:7e:4f:dc:af:c5:9f:3a:b8:34:dc:ad:3d:3a:86:20:09:cb:
         10:56:33:90:d3:39:8a:9e:3c:b9:08:bd:1e:fa:46:60:4e:ca:
         8d:8f:85:fa:9a:46:3f:9b:63:e3:06:4b:8c:a8:a0:26:ef:99:
         e9:18:0f:52:72:16:bf:35:c0:20:32:0c:20:a3:e7:be:a7:c4:
         eb:b8:58:28:b1:b8:b8:f0:73:35:67:60:b9:af:89:2c:99:75:
         04:cb:8c:0b:57:0a:dd:14:96:7d:c1:1b:ae:76:46:ba:ae:5d:
         6a:a9:7f:29:13:5f:d7:08:53:05:7a:7f:52:82:4d:ca:44:f5:
         f4:26:e6:b4:ac:db:45:e8:8b:bf:44:39:bd:c0:77:73:ee:32:
         d6:9c:ac:bd:32:bb:50:da:57:dc:c7:50:d3:9e:57:61:ab:20:
         27:86:b9:8e:61:d6:42:20:67:c3:53:91:61:61:59:19:b8:7d:
         f3:ca:4e:8a:bb:7e:79:98:41:0b:41:d9:f3:80:72:63:23:53:
         ed:c7:aa:5d:9d:6c:4b:8c:6e:69:2b:1a:82:44:55:37:de:7b:
         31:99:40:b3:a3:36:cc:8c:5c:4c:a9:e4:fc:44:38:2a:6a:58:
         0a:cc:51:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:33:59 2025 by rpki-client