Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/1e81c2c4-04a3-3e9a-98ae-869452feda65.roa
File:                     1e81c2c4-04a3-3e9a-98ae-869452feda65.roa (raw, json)
Hash identifier:          4lhHtFG4WMlL8JvrsDwMe21cGs18gqRIpbu8PUWb0VI=
Subject key identifier:   05:09:02:E8:07:42:1F:73:3A:39:33:99:90:5A:0C:8E:E4:7C:74:42
Certificate issuer:       /CN=fd7bd65f-83d2-4046-ad64-40ba458415a2
Certificate serial:       010D0C9F432858492CAE869759E32BE459997C00
Authority key identifier: 73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/1e81c2c4-04a3-3e9a-98ae-869452feda65.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     40153
IP address blocks:        23.132.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:86:97:59:e3:2b:e4:59:99:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7bd65f-83d2-4046-ad64-40ba458415a2
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=81287993-4063-4e3f-a101-fd56fe7ec450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:75:5c:0b:cb:2b:1e:2d:ba:bc:fb:81:f0:
                    69:94:bb:28:bd:91:50:34:03:12:ea:ca:09:60:7c:
                    d8:85:e5:05:e3:ef:4f:bc:90:b6:8d:e0:eb:8d:cc:
                    08:f8:32:27:b8:30:c2:2c:21:f8:8c:4b:21:c3:74:
                    0b:2c:97:4c:19:54:69:ec:88:33:72:e0:2b:5f:40:
                    c4:7a:15:a2:d1:a5:ae:ca:39:af:84:ea:bb:65:8b:
                    78:d1:ad:32:85:4e:dd:a7:ec:60:4f:f4:68:ee:57:
                    95:e6:be:f5:b9:f5:e3:d8:1f:8e:4c:22:eb:0a:bb:
                    3a:8c:af:9f:2b:28:a2:62:c1:d9:85:8e:a5:a8:1b:
                    9f:e1:2e:de:50:27:4b:8f:85:1c:3f:ee:b7:34:40:
                    5e:bd:57:c4:78:2b:ba:ce:9b:ff:c0:f9:ba:95:22:
                    20:98:b2:38:52:fe:bb:98:e5:9a:f0:1e:05:ca:a1:
                    1f:e0:08:15:b5:de:d5:c1:0f:3c:db:91:3e:76:f1:
                    8a:ba:43:01:3d:51:6d:34:ea:1f:ee:2d:7f:94:b0:
                    94:83:88:60:bc:18:ce:a5:ec:c0:56:0e:b0:0d:44:
                    c8:d6:41:30:d5:fc:70:02:2b:76:cd:32:a6:ba:e3:
                    07:48:5c:65:e1:2e:93:84:e7:f1:d2:be:5b:93:78:
                    a0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:09:02:E8:07:42:1F:73:3A:39:33:99:90:5A:0C:8E:E4:7C:74:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/1e81c2c4-04a3-3e9a-98ae-869452feda65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl

            X509v3 Authority Key Identifier:
                keyid:73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2c:4a:ef:8b:e8:a5:cd:5b:25:4e:a6:cf:e3:3e:c1:14:7f:
         f7:98:ff:ac:46:45:74:88:d3:cc:ab:9c:e8:87:52:09:ae:50:
         39:fc:25:6c:b9:0b:fb:66:7c:d8:0a:74:1c:eb:5e:61:d5:75:
         77:10:59:6e:06:2d:7c:21:45:05:bb:dd:03:e2:2f:87:1d:2c:
         a1:6d:db:81:69:ed:02:3b:d8:64:fb:33:d2:1b:c5:49:cc:19:
         6f:f5:c3:42:48:72:8a:cf:79:c5:d8:56:21:9a:02:8d:0a:54:
         87:b2:bc:68:f8:d9:38:89:d2:5f:6b:bf:85:fd:66:06:d4:63:
         f1:14:73:be:18:60:63:03:7a:c3:7b:f0:12:65:76:17:99:d0:
         e7:ba:05:88:a8:73:8d:48:29:3f:fc:c8:59:88:d9:f8:05:cb:
         c8:ae:f2:b6:e2:ef:8c:ec:44:b2:2d:27:a0:a3:39:cc:4f:c7:
         20:3c:6c:82:f4:72:a3:1b:e5:6a:84:90:e1:1d:6a:70:33:65:
         72:68:2b:a5:ca:9f:65:9b:51:8f:ff:46:1d:e5:8c:17:15:9c:
         cd:16:1e:c7:70:7a:2f:08:08:f9:d2:3f:e2:0b:8c:87:d7:c8:
         f4:bf:18:e5:ca:e8:82:ab:20:fb:fb:c1:74:3e:f2:47:5d:63:
         c8:9e:8b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:52:21 2025 by rpki-client