Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa
File:                     2c9db57d-cb56-3111-ad11-10c62203b5ca.roa (raw, json)
Hash identifier:          tf4sZuIR50+CWgPfIY9ygdJnL/NV13fUEYjQZi/JFxg=
Subject key identifier:   F2:72:B9:86:2C:0B:C3:B0:0D:44:87:EA:BE:2F:EB:10:00:36:36:FA
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F43285849DF5A6D89D28171E43793F580
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     19257
IP address blocks:        23.252.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:6d:89:d2:81:71:e4:37:93:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=185d8f22-62cf-4f2c-847f-325e53e4843f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:0c:bc:d4:2f:13:82:b2:a4:fb:c0:61:c9:
                    d3:7e:9f:f6:5b:2c:ea:dc:3c:bc:10:4a:2e:e7:97:
                    74:60:ed:82:8b:c8:77:3c:e3:4d:cb:bb:8d:34:27:
                    9d:0f:02:7d:81:27:24:bc:e9:5f:2a:4c:7c:1f:bf:
                    43:de:e8:15:59:6f:c5:0a:f7:0f:f9:f3:4e:ca:d5:
                    76:37:af:58:97:10:45:9f:8d:53:cb:c9:ee:c0:c2:
                    7b:d4:65:7f:f5:42:d1:b4:85:c2:3a:ca:ef:9d:7f:
                    00:3c:94:5e:72:d5:44:b5:c8:e6:47:2b:08:91:c1:
                    15:1f:97:d1:cb:8f:d5:0a:a8:13:95:0c:45:ec:e0:
                    6f:73:29:aa:a4:82:3f:e3:cc:b7:36:4f:34:56:2b:
                    d7:6b:20:c6:40:21:9a:a5:1f:1f:89:73:c4:21:20:
                    28:37:5a:b0:12:ba:0f:3d:a0:6a:fb:f8:7e:30:d6:
                    c9:57:bc:d8:85:6c:b6:10:83:70:13:4f:69:e5:31:
                    b2:54:68:e0:6f:67:af:f1:f2:95:20:c0:a8:0f:93:
                    f7:25:5d:19:9a:aa:3e:2a:17:9f:35:e8:8a:81:16:
                    28:6d:e8:b9:1d:00:b5:36:c1:58:09:23:7c:2a:93:
                    ec:fe:e3:de:3f:7c:9b:d7:c4:65:02:7f:cc:52:c4:
                    03:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:72:B9:86:2C:0B:C3:B0:0D:44:87:EA:BE:2F:EB:10:00:36:36:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.252.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:35:46:28:23:27:a3:c7:ed:75:5e:34:a8:70:57:1d:c8:27:
         72:aa:f3:79:eb:a2:62:54:aa:16:e4:98:53:08:69:cc:f7:69:
         11:9a:4c:31:f7:6d:65:3f:dd:d1:f6:e7:fb:d5:2d:63:99:b1:
         3a:89:02:e2:bd:82:f1:06:14:a8:7d:82:d4:28:67:2b:dc:39:
         b3:2c:70:1a:50:dc:ed:d2:07:0e:6d:5a:70:28:d6:2f:af:7b:
         ee:4e:ca:71:71:4c:6c:36:dc:8a:e1:e2:be:7a:9e:f6:08:c7:
         69:69:3d:d0:60:b6:21:89:fb:29:c7:43:2a:53:2b:78:12:c7:
         81:88:63:ba:ec:ac:0f:ac:40:28:36:1d:96:bd:fb:15:8a:19:
         b9:83:d5:a9:6a:af:c3:d6:4f:e4:51:50:56:9c:cf:0d:f8:99:
         18:92:ce:f9:c1:fd:29:26:9e:0f:57:fa:07:c3:d1:dd:d6:97:
         e3:e6:fc:6c:46:d3:94:a9:81:8c:48:25:e5:aa:7c:b4:ce:d2:
         5c:4f:f4:13:a9:6c:6d:8f:80:a5:10:b5:ce:10:69:9b:24:57:
         f2:a5:05:a3:1f:7a:fd:d1:25:c2:05:47:8e:af:89:dc:d8:46:
         81:f8:9f:fa:a3:7a:65:e7:9d:7d:0d:3e:ea:2b:68:26:20:f1:
         01:d9:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:59:34 2025 by rpki-client