Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/784b12a8-c9d1-327f-98f0-5247603509be.roa
File:                     784b12a8-c9d1-327f-98f0-5247603509be.roa (raw, json)
Hash identifier:          FfDPCv4VUixIPA+Gq94iJnmOLbIEjirParLN54g5kEw=
Subject key identifier:   86:13:B5:60:00:40:83:2B:92:57:E9:3A:8B:8E:27:E6:22:20:04:93
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C431E82002E33816BA55C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/784b12a8-c9d1-327f-98f0-5247603509be.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        23.154.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:31:e8:20:02:e3:38:16:ba:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=164fc56e-958d-4651-af92-885a462ef988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:e3:b5:a5:e0:6a:1e:ed:b3:cf:58:56:2e:
                    fe:51:80:bf:75:2c:5c:32:2a:c0:b3:9c:eb:80:76:
                    96:49:7c:4c:2d:7e:18:5d:ff:9f:c2:f0:10:fe:c1:
                    a9:10:a6:c3:55:54:00:1a:0b:df:23:6c:ab:18:aa:
                    47:d1:67:e2:8d:d8:57:97:27:a5:bf:1e:93:b2:90:
                    61:ec:a0:ab:b8:e6:51:70:f3:bc:b8:a6:75:d8:55:
                    b0:00:1b:ce:e1:e1:fe:c8:0c:51:64:d0:78:31:ff:
                    27:4d:a4:c5:21:4d:79:b5:2d:3d:b9:82:b0:1d:5d:
                    fc:d5:3e:08:02:a8:5b:df:64:db:c6:fa:8d:6d:4e:
                    a7:2c:68:fc:7f:14:11:c1:e3:47:c8:40:d8:c6:e9:
                    7d:ec:da:a5:d9:2b:d1:7f:64:0d:c9:8e:ea:b8:b5:
                    e9:ee:98:a3:e5:04:b7:ba:ea:f1:c0:07:60:e0:18:
                    2b:59:eb:21:4b:68:5b:20:1e:89:bf:ef:db:56:da:
                    0a:bb:ca:5a:20:2c:81:d5:81:96:29:33:47:a3:09:
                    9e:1d:f7:71:02:83:97:b0:d2:46:6c:18:9a:ed:ca:
                    32:2c:55:a0:24:55:21:da:23:80:be:0e:3b:2c:2d:
                    97:dc:55:e2:28:ca:cf:72:c2:8d:46:98:09:94:5c:
                    eb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:13:B5:60:00:40:83:2B:92:57:E9:3A:8B:8E:27:E6:22:20:04:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/784b12a8-c9d1-327f-98f0-5247603509be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:01:7f:45:d4:41:08:96:52:e0:37:d7:a1:d7:f7:b4:5d:a7:
         e9:97:b2:77:97:f3:f5:fa:42:05:3c:09:e5:36:0f:71:0d:19:
         26:29:6d:9a:ea:39:0c:da:07:b7:fb:d0:9b:7a:cc:12:4c:c7:
         e3:24:f5:ba:67:9c:e4:d5:7f:fd:9f:cc:ad:b6:ac:4a:2c:7b:
         c8:55:4f:14:0d:01:d8:d0:89:de:58:fb:23:eb:02:86:03:3a:
         15:64:74:9d:8d:fd:9f:88:27:03:26:26:14:d4:90:28:24:9f:
         f0:60:ce:eb:3e:f5:81:f3:3a:ae:03:21:31:bf:fa:d0:d9:a5:
         de:d9:42:6e:0d:21:8e:c8:56:57:f8:2d:5c:18:70:7b:82:5b:
         0e:b0:c7:e8:8a:32:e1:cf:7b:87:d5:cf:b9:6f:48:a1:6e:11:
         52:09:ef:28:a1:5a:87:17:b9:b7:7c:80:3c:25:58:b6:3c:d7:
         a2:5e:67:a1:b5:04:22:3e:92:b3:52:f9:cc:d0:e7:63:41:de:
         82:11:f6:7a:b7:08:39:de:31:54:54:ea:94:01:f1:a0:4c:3f:
         c9:cc:84:3f:6e:9c:d6:ec:f8:e5:d2:d8:23:0e:4b:af:36:f3:
         1f:3c:53:a6:eb:86:cb:8d:6f:c0:57:70:f1:64:82:e0:8c:e6:
         31:ad:d8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 13:25:01 2025 by rpki-client