Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/42c863cf-672c-3dba-b238-a9738d249ba8.roa
File:                     42c863cf-672c-3dba-b238-a9738d249ba8.roa (raw, json)
Hash identifier:          7/7RA4DDDVrQ8aawXuDREQpry6CL0Enj132rw7ExgKA=
Subject key identifier:   C2:9F:DE:DA:90:B3:55:AC:8D:43:A0:2B:7C:98:30:10:40:E9:FA:6F
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F4328584953C44A40AB8F4497EC705480
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/42c863cf-672c-3dba-b238-a9738d249ba8.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     210630
IP address blocks:        23.137.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4a:40:ab:8f:44:97:ec:70:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=63745847-9d65-44ef-a54f-227ce2a6bc23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cc:d6:69:9c:73:d2:51:f0:a5:05:7f:40:da:
                    1f:eb:61:70:59:66:38:71:dd:96:77:51:dd:ba:9a:
                    0d:6b:a9:2b:eb:fb:4d:c5:97:16:59:d9:bf:39:9f:
                    b8:3e:dc:d5:26:64:da:a8:d0:8f:f0:47:f2:ac:73:
                    d3:4b:2e:49:61:d7:a5:4d:76:44:cc:66:1a:7d:b4:
                    0a:3e:cd:e2:e5:c4:35:1f:41:ee:29:ba:44:a2:81:
                    d1:84:63:19:fe:db:4e:1d:52:e9:cb:3e:54:17:1b:
                    eb:26:eb:d8:76:49:f1:2c:0d:d4:72:44:c2:7f:c7:
                    96:e8:92:ae:1c:f5:ac:88:b2:31:fe:54:5a:a5:18:
                    e6:d1:3a:c5:4d:77:82:a8:e5:7a:a5:91:2e:80:30:
                    aa:d7:d5:93:46:38:82:0a:cb:f5:76:ce:6f:ff:54:
                    f9:31:02:18:c1:25:cb:ee:78:31:46:ac:1a:44:e7:
                    19:25:49:47:88:90:91:e9:8c:34:50:a9:e9:99:58:
                    68:ab:e9:b0:99:ea:d0:96:9a:de:05:4b:d9:93:49:
                    7e:0f:2e:80:a1:a1:6f:96:2b:71:44:15:f9:6c:88:
                    15:da:5d:c5:0f:ad:10:1b:d9:d2:53:b4:b9:2e:41:
                    83:5d:e5:d1:b0:b3:89:06:a7:3d:21:6a:fe:e5:fd:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9F:DE:DA:90:B3:55:AC:8D:43:A0:2B:7C:98:30:10:40:E9:FA:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/42c863cf-672c-3dba-b238-a9738d249ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ce:c0:d9:1a:49:98:d4:92:77:d2:b4:74:94:03:9c:aa:97:
         86:69:ef:b7:e4:44:e5:90:71:0e:65:a1:15:40:0e:fd:a8:d5:
         36:13:2b:fd:56:37:de:35:c7:dd:7d:fc:16:43:e2:8a:ef:7a:
         b3:44:48:19:d5:71:8b:a3:ec:8a:cb:25:fc:60:81:f1:95:c1:
         c7:b6:0f:f1:41:4a:b5:ce:3b:b4:fd:7f:17:da:a5:18:84:07:
         df:9e:d2:3d:c4:8f:21:4a:cd:cb:10:a3:10:5e:63:61:39:07:
         b1:41:a6:e8:95:af:d5:3a:1b:82:76:05:16:97:13:31:ba:61:
         73:e0:f7:cb:7b:a1:45:e0:9f:64:7b:6b:45:7c:87:29:2a:d1:
         40:a7:55:d8:01:a7:77:a0:13:d0:cc:ff:3b:93:82:b0:7b:de:
         34:f4:4a:2f:1c:f8:e9:f8:5b:ba:17:af:72:69:ee:f0:e0:f3:
         ac:1f:ed:20:40:49:a3:4e:1c:be:4a:6d:cc:29:0b:ed:5a:65:
         c2:08:b2:59:12:86:9b:ef:11:af:7b:83:e7:80:ad:76:f8:33:
         e0:bf:17:21:55:06:f9:72:f3:b5:ac:f8:a4:6a:b0:6d:6a:29:
         f8:14:51:f0:f3:fd:56:7f:54:3e:3d:4c:f2:6c:8f:1f:a5:9a:
         cf:29:35:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:01:37 2025 by rpki-client