Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/f39d8138-9af7-3a44-97f6-668c0cfe35b4.roa
File:                     f39d8138-9af7-3a44-97f6-668c0cfe35b4.roa (raw, json)
Hash identifier:          VUycBOdax5fHFfg/h+m86DSAZsKW0QuRxoVinTAZ0f4=
Subject key identifier:   3C:DE:D9:DE:73:0C:54:DA:0B:D7:7C:6D:94:B2:B7:27:7C:52:13:3B
Certificate issuer:       /CN=53672676-56d0-4921-8e86-0b820202ef6c
Certificate serial:       010D0C9F43285849350EB154B59E1A004A7C8740
Authority key identifier: 7E:1A:39:BE:17:56:D6:2C:72:4D:1E:4C:41:C3:9C:00:0C:0F:4A:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/f39d8138-9af7-3a44-97f6-668c0cfe35b4.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     32913
IP address blocks:        23.174.232.0/24 maxlen: 24
                          207.90.242.0/23 maxlen: 24
                          2602:f944::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:b1:54:b5:9e:1a:00:4a:7c:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53672676-56d0-4921-8e86-0b820202ef6c
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=f49acf5e-f525-4c5d-9085-a19aba3757cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3f:8a:ee:34:3c:88:24:62:f2:7a:d4:d3:02:
                    a4:a3:1e:57:11:32:11:75:a0:d3:a8:87:b3:0f:ed:
                    21:45:ad:7c:b8:5c:3c:c7:fd:50:d0:e2:b4:e2:e3:
                    14:15:88:60:60:1e:32:76:3f:18:fc:45:25:29:09:
                    13:fc:6f:c2:2a:40:2a:79:e2:31:cb:fb:71:21:fa:
                    50:68:9f:9a:26:d1:5b:d4:08:97:f4:b8:71:8a:80:
                    ef:35:ba:ef:73:9b:e2:73:f8:11:cc:a6:26:b1:f7:
                    06:2c:f4:c2:c2:d3:3f:7e:07:e0:f4:5f:2d:ac:c3:
                    55:b4:3b:e9:60:53:86:1a:c7:cf:51:91:2d:43:6d:
                    48:7a:11:8e:78:6f:f5:39:df:32:2f:75:a1:05:84:
                    08:33:d0:c3:94:aa:b8:88:53:75:d2:6a:37:8e:2c:
                    98:c1:e1:20:db:4e:0c:f3:c5:11:c3:a9:30:68:a2:
                    e6:2f:b8:bb:ea:e5:bd:1f:c9:b2:db:52:9e:38:f6:
                    80:4f:13:9f:e1:25:54:9a:5c:58:06:0b:b2:7c:13:
                    4b:44:29:58:6d:a8:83:0a:8a:88:4a:db:2e:d0:9c:
                    50:b1:e8:51:02:08:2a:cd:88:81:49:10:7b:3d:0b:
                    f6:97:d7:93:5b:cc:cf:1e:1f:65:71:94:56:16:60:
                    ac:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DE:D9:DE:73:0C:54:DA:0B:D7:7C:6D:94:B2:B7:27:7C:52:13:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/f39d8138-9af7-3a44-97f6-668c0cfe35b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.crl

            X509v3 Authority Key Identifier:
                keyid:7E:1A:39:BE:17:56:D6:2C:72:4D:1E:4C:41:C3:9C:00:0C:0F:4A:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.232.0/24
                  207.90.242.0/23
                IPv6:
                  2602:f944::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:0f:a2:40:6a:c9:a8:58:0b:ee:4f:0a:54:2e:cb:0b:e5:be:
         e1:77:8f:bf:5f:89:9c:f4:57:13:89:fb:6d:a0:25:cd:2c:08:
         16:09:76:ca:26:79:ff:43:85:c4:a2:eb:a1:4c:2c:ea:38:0a:
         1d:5e:56:f7:a4:90:c9:bd:83:f0:05:15:1e:24:8a:12:c1:e3:
         fc:99:71:86:7d:f0:93:61:0d:a1:d0:ba:79:4a:f9:ba:7a:05:
         e1:26:57:c7:52:ba:71:4b:51:55:64:34:ca:dd:47:a6:a5:85:
         e9:ab:b5:f9:b3:2d:a4:cf:24:55:84:a7:c7:80:78:f0:4b:53:
         1d:86:1c:9b:2b:c2:06:4b:49:fe:5a:aa:2e:74:7a:30:b0:08:
         1a:8c:af:21:83:56:ea:00:03:6a:03:77:34:d1:4b:31:90:3a:
         6f:40:73:9e:fd:6d:24:21:b9:ab:1c:89:7f:e8:83:20:86:68:
         91:d5:e3:79:f0:3f:b9:54:09:81:81:6f:53:46:b9:37:c3:ed:
         84:a9:da:30:c3:bc:73:43:d6:a0:0f:59:41:c6:62:2c:b3:5e:
         bb:e4:48:5d:6a:ea:76:70:82:8b:31:cf:36:da:2d:72:97:bb:
         b3:f2:a2:1e:a5:4c:70:7a:e6:30:64:bf:f0:a0:84:37:b4:40:
         c3:9b:0b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:12 2025 by rpki-client