Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/27d1b91f-cb2b-459a-b28c-445a2959f250/54c05f7a-5f49-320e-bf50-957118f05524.roa
File:                     54c05f7a-5f49-320e-bf50-957118f05524.roa (raw, json)
Hash identifier:          Ec+VsaviiUB5L9gj25p9+JZTN/8kyKGhOFG7f15Fpnw=
Subject key identifier:   B1:5A:A0:54:AC:18:1A:AF:F4:4B:35:2C:90:78:D5:A7:ED:24:B6:50
Certificate issuer:       /CN=27d1b91f-cb2b-459a-b28c-445a2959f250
Certificate serial:       010D0C9F432858496484407E67E198AB9F7C4B80
Authority key identifier: 1A:EA:2B:68:5C:44:A6:1A:3C:AF:46:FD:AC:03:21:30:4D:9B:DC:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/27d1b91f-cb2b-459a-b28c-445a2959f250.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/27d1b91f-cb2b-459a-b28c-445a2959f250/54c05f7a-5f49-320e-bf50-957118f05524.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     395918
IP address blocks:        23.147.216.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/27d1b91f-cb2b-459a-b28c-445a2959f250/27d1b91f-cb2b-459a-b28c-445a2959f250.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/27d1b91f-cb2b-459a-b28c-445a2959f250/27d1b91f-cb2b-459a-b28c-445a2959f250.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/27d1b91f-cb2b-459a-b28c-445a2959f250.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:40:7e:67:e1:98:ab:9f:7c:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d1b91f-cb2b-459a-b28c-445a2959f250
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=917f14b4-9ac9-4bcb-8349-283395dc6724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:a8:03:08:32:71:65:b3:33:20:c3:07:91:
                    49:ac:f3:da:70:06:6b:0a:87:93:b7:bc:7e:90:02:
                    65:b8:7e:e4:63:09:e1:71:f5:6d:7e:9b:09:9b:fa:
                    8e:43:1f:cc:89:8d:d8:74:ff:44:22:90:90:e8:14:
                    c5:6b:88:cc:d9:51:7f:dc:33:af:fa:0f:2b:46:f6:
                    87:a6:31:08:59:1f:2e:53:93:f5:fc:17:62:0b:70:
                    70:f8:a1:3b:f3:24:9f:8b:6d:a1:ae:4e:60:8e:8b:
                    ea:e8:37:bc:55:a5:fa:3d:99:c6:ef:87:f2:ea:86:
                    43:3f:95:e9:8e:ce:dc:7e:40:ae:da:09:25:59:f3:
                    be:03:c2:f5:e7:e2:6b:77:ba:71:38:ef:5d:6f:59:
                    4d:89:f7:99:e3:a8:ca:1e:12:e4:9a:ec:22:27:30:
                    e8:eb:42:0e:67:cd:7d:8e:1f:75:a0:38:13:d0:2c:
                    5a:eb:c3:f0:b7:42:de:d6:8c:d6:73:d7:70:ca:ad:
                    dd:09:28:ad:48:f6:9a:2b:73:5b:21:4c:95:1b:b6:
                    f7:bf:ea:50:4c:2c:d4:33:ba:7a:e2:8b:3a:39:a4:
                    5e:5b:87:cf:62:c1:98:aa:24:af:3e:4c:86:25:aa:
                    16:a2:f1:7e:52:f6:3a:b9:c1:43:87:17:94:1e:43:
                    3f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5A:A0:54:AC:18:1A:AF:F4:4B:35:2C:90:78:D5:A7:ED:24:B6:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/27d1b91f-cb2b-459a-b28c-445a2959f250/54c05f7a-5f49-320e-bf50-957118f05524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/27d1b91f-cb2b-459a-b28c-445a2959f250/27d1b91f-cb2b-459a-b28c-445a2959f250.crl

            X509v3 Authority Key Identifier:
                keyid:1A:EA:2B:68:5C:44:A6:1A:3C:AF:46:FD:AC:03:21:30:4D:9B:DC:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/27d1b91f-cb2b-459a-b28c-445a2959f250.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:95:fd:ee:52:ba:a7:66:b2:be:34:c9:cb:af:e9:9e:aa:bf:
         ed:b1:4e:c1:91:1d:8c:35:3e:ad:c6:1b:e1:9d:69:d0:4c:ec:
         b3:1c:29:7e:d9:c9:be:c8:0f:ff:18:5d:9e:52:b7:00:e0:2f:
         32:65:99:42:64:c1:22:b5:31:a5:3a:98:20:8d:9a:8f:fe:28:
         e4:08:34:ed:71:7e:e3:c8:5f:f7:a8:b2:b8:c1:e0:e6:86:33:
         ae:94:42:3d:fd:7e:81:f8:93:cf:dd:7e:d8:1b:09:4e:49:b6:
         8d:c4:52:ec:0a:77:e6:c1:7b:a7:27:98:74:c7:ac:7f:77:12:
         52:ad:a1:c4:e0:f1:e2:d8:ec:0c:1d:67:43:47:7d:65:bd:ba:
         b6:00:ec:8a:fb:9d:30:ca:7d:a3:79:34:5d:51:36:df:bf:f0:
         59:43:81:d2:29:2c:77:4d:7e:c1:59:bc:e8:80:e6:93:57:f6:
         b7:d4:da:68:8c:e4:d8:20:27:fc:7f:1c:92:76:cc:64:b5:d9:
         62:93:41:9c:7a:1c:6b:49:c3:a2:4f:8e:97:2e:7f:ee:48:4c:
         4a:a6:26:ba:0d:f2:3e:d3:57:d7:01:7d:1e:49:93:18:e0:1d:
         10:d0:4c:1e:22:84:ba:55:d1:88:4f:bc:b9:25:7a:62:e1:c4:
         95:d7:f9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:24:13 2025 by rpki-client