Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa
File:                     3a603485-8119-3bb4-9449-4eb447f559ba.roa (raw, json)
Hash identifier:          pwzyEOXm1Q9MOTABm6JRi+c2kqspzgqh9mfwZu1ilzw=
Subject key identifier:   10:AD:73:BF:3F:63:53:89:DE:D0:90:FA:2F:6A:B0:76:03:C9:70:68
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848F65BEC3A375714B655983380
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     59253
IP address blocks:        23.19.197.0/24 maxlen: 24
                          2607:f5b5:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:ec:3a:37:57:14:b6:55:98:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=36983ee4-62d9-4e0c-a8ec-8be6ee1cae99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:49:44:0f:93:06:2e:d8:b1:57:0c:43:5f:
                    9b:bb:3c:6d:6f:0f:60:5b:65:0e:12:c2:08:d9:35:
                    ea:b5:cd:30:c4:3a:87:83:21:0f:eb:ac:60:c6:ee:
                    0b:d3:a2:8b:9f:3d:07:a6:b5:fe:da:85:44:4c:42:
                    ff:d4:a1:75:c4:65:6e:ea:13:b1:ad:ad:29:78:fc:
                    bc:39:fa:c9:e8:b0:a1:4e:39:75:a3:2a:2f:38:17:
                    48:40:9d:98:3b:8c:24:b5:88:6d:1e:e6:b7:c2:a3:
                    98:2b:3f:52:b2:3f:b8:d7:d8:bb:55:49:90:4e:2f:
                    fb:7f:42:1c:e7:33:67:ee:f4:d0:4e:36:65:84:e6:
                    0f:90:e4:be:d9:5a:29:a6:2c:db:f3:82:cc:17:e3:
                    a7:98:9c:17:1e:a0:5d:b0:4a:18:fc:18:95:47:8b:
                    11:0b:e9:10:f0:e3:97:3d:6d:33:ae:a3:4c:f8:0e:
                    dd:0e:fc:6c:7f:b1:33:ac:7c:f8:01:98:78:1a:ae:
                    a2:f2:b2:db:91:1a:63:d2:cc:4e:82:9d:e4:c5:88:
                    9b:04:c0:8c:67:d3:40:9a:35:26:53:d3:4a:ba:d9:
                    91:92:50:91:4c:5f:2f:92:08:58:38:e8:1d:fd:e8:
                    0e:4f:ab:cb:91:89:1b:52:e5:4c:a8:c7:81:65:96:
                    1b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AD:73:BF:3F:63:53:89:DE:D0:90:FA:2F:6A:B0:76:03:C9:70:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.197.0/24
                IPv6:
                  2607:f5b5:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:0b:86:6c:2f:fc:55:48:90:19:ea:7c:16:83:52:3a:48:19:
         70:81:7f:b8:4d:0b:44:9d:e9:ed:fa:e7:38:18:db:06:1c:23:
         1b:3d:a5:4b:3e:0e:1c:7f:b8:e4:e0:18:0c:27:b6:a0:72:38:
         bc:2f:85:cc:ee:88:df:9d:32:9a:f8:55:1b:57:d2:c4:fa:17:
         fe:60:2c:ef:d3:63:ae:50:59:d6:0a:8c:50:c7:cf:75:45:23:
         4e:3d:14:31:12:cb:6e:d3:cf:0e:47:98:3d:50:64:f7:bf:c5:
         e8:78:23:34:b6:65:79:5b:db:a3:af:d7:9f:94:c4:f3:a8:68:
         c1:33:40:44:c9:c9:33:f9:81:83:fc:4e:30:9d:71:87:61:50:
         c3:46:a7:bb:94:2d:a4:38:5b:0c:e8:4d:48:b8:0b:d4:39:2f:
         c3:58:36:53:c6:04:3f:fb:7d:27:82:2f:65:83:4f:14:85:a6:
         60:ba:9d:11:86:bd:2e:af:d2:86:67:38:2e:88:c1:cc:1d:99:
         48:02:c5:84:15:71:55:af:07:76:ea:78:fa:d7:5f:c8:a2:4b:
         2c:c7:4a:0e:54:33:31:d3:74:26:fb:6f:47:3a:56:2d:f3:38:
         f8:74:81:14:b2:c2:ce:a1:78:fa:34:22:42:80:f4:9d:f5:3a:
         25:60:df:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:54:59 2025 by rpki-client