Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7530b61c-2925-3bc8-b134-3ce95544ceb6.roa
File:                     7530b61c-2925-3bc8-b134-3ce95544ceb6.roa (raw, json)
Hash identifier:          ShfRi4xiRlsbIgmO6rXMxlrgGK/BON9ezn3cSB1iuHA=
Subject key identifier:   E1:3B:80:03:0A:3B:67:9C:59:3B:B6:93:7D:7F:D2:3B:9A:B3:E4:5F
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848F65BE98C72771DC4BE09D9A0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7530b61c-2925-3bc8-b134-3ce95544ceb6.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     134351
IP address blocks:        23.19.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:e9:8c:72:77:1d:c4:be:09:d9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=eac5509d-f3f9-48f0-a296-0495d73e4b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8d:11:4d:16:4f:d1:73:ab:56:cd:2c:bf:cf:
                    e8:38:35:87:59:ef:b9:2f:78:b6:53:02:b4:55:22:
                    31:13:53:9a:17:cf:8a:4c:cf:60:ae:cf:ea:78:08:
                    59:fe:67:3e:33:8e:fc:a7:1a:f3:22:d0:be:5c:94:
                    00:34:6f:1d:39:34:5e:7d:e6:d1:cf:c6:04:76:2d:
                    e6:6a:b1:77:7e:3b:eb:e2:43:b0:11:01:17:29:42:
                    20:a4:42:be:d4:a7:1d:f4:18:83:a3:24:b2:00:1b:
                    34:6c:7e:b5:ee:92:49:0f:24:1f:03:75:64:b7:6a:
                    21:bc:dd:c0:af:3f:4d:eb:7d:f4:7a:07:c2:6c:b2:
                    cf:8b:cc:1f:43:74:a1:55:9d:39:e1:22:4b:71:fc:
                    c0:94:51:2a:ae:a9:e7:e3:71:f4:dd:fd:5d:66:21:
                    de:1b:e3:58:75:73:c0:72:c1:d3:f1:37:81:ea:4f:
                    46:a1:2c:6e:9c:42:6b:51:9b:0c:55:e7:eb:99:45:
                    31:40:05:9b:aa:25:e3:c1:df:41:93:3c:c5:0c:6d:
                    33:e8:1b:be:d8:37:64:68:a9:af:22:9e:e2:07:7d:
                    f5:af:97:7d:69:05:ab:c5:12:ff:b4:d0:b5:fa:78:
                    bb:07:e2:6d:f9:47:18:e1:41:e6:37:e1:9d:7c:7f:
                    20:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3B:80:03:0A:3B:67:9C:59:3B:B6:93:7D:7F:D2:3B:9A:B3:E4:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7530b61c-2925-3bc8-b134-3ce95544ceb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:95:bb:a2:8c:f6:c7:e3:23:7f:dd:47:71:ec:3e:c1:3f:62:
         ad:e9:1c:f4:1d:cf:16:9b:89:32:29:7a:c7:1c:cc:8f:aa:18:
         c4:5d:5e:60:41:c4:5a:c3:90:60:de:3d:17:ae:3d:1d:22:50:
         4a:9c:db:da:bb:a1:00:a9:1b:92:ef:c6:9b:9c:ce:d1:82:8c:
         07:64:2e:45:3d:29:87:93:6f:a2:02:39:df:c3:24:6f:d2:c7:
         b4:51:48:99:28:03:6a:25:c0:0b:06:0f:96:68:99:91:f7:f0:
         21:40:82:d0:a6:35:f0:16:03:81:37:4f:6e:f7:97:03:bd:de:
         47:b9:62:3c:8b:92:e0:6e:ef:3d:0b:ff:d1:6e:95:6b:57:03:
         54:d2:34:f5:0b:91:f7:21:2b:96:97:a4:bf:bd:3d:c1:e8:78:
         75:3c:67:bf:d0:fc:d0:da:a5:70:a5:ef:db:52:14:5d:11:93:
         b7:23:75:7b:d9:6f:94:38:ff:0e:fc:08:b2:a6:6c:ed:e1:df:
         27:2f:38:67:00:31:cd:f0:f5:a3:ee:a3:fb:c9:9e:b4:9c:e0:
         ac:b5:26:5c:11:e5:3d:e5:d8:24:c9:92:81:fd:6c:06:c8:a7:
         88:0b:97:fc:12:26:af:9b:ca:28:2b:e5:90:ee:7a:07:3a:30:
         e1:f1:d0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:20 2025 by rpki-client