Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa
File:                     98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa (raw, json)
Hash identifier:          jQs93i+G1KdIr57puz219ALJ3of/GnFpDtUDLvD2/3g=
Subject key identifier:   AA:B7:08:EC:B9:E9:B8:B7:ED:46:CE:05:ED:CA:C3:49:75:02:48:2A
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F43285849DF5A6D43E4AAF3FEDBE88500
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     19257
IP address blocks:        23.252.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:6d:43:e4:aa:f3:fe:db:e8:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=c3833e5a-cbae-40d3-a8a0-ef20dff398bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3b:a1:ba:9e:5b:2a:58:ed:37:86:aa:ac:19:
                    a5:89:84:33:8c:3f:ff:92:1a:08:98:61:69:0f:98:
                    ca:5c:85:88:04:b2:40:cb:98:a2:b8:80:39:f3:6d:
                    bb:ed:c2:2c:ac:1f:5d:1f:11:a2:59:a5:2f:bc:f7:
                    d1:ab:06:e4:2a:3b:e8:e8:b1:69:39:3c:2f:84:74:
                    3a:ae:66:37:7d:28:e4:e7:50:17:25:ee:c7:de:fe:
                    18:f7:fd:4e:df:23:c9:25:13:b0:bf:cf:14:d6:17:
                    ac:e4:24:13:49:04:18:63:cc:30:0a:41:b5:08:a0:
                    4d:d2:69:b0:f2:f6:4b:25:61:2b:c7:b0:1b:56:8d:
                    f3:9d:55:f6:ab:72:61:73:e5:af:6e:c1:3c:ab:b3:
                    d9:44:2e:e0:2f:b9:53:59:8f:99:53:21:4e:f0:04:
                    cd:79:c7:aa:40:27:24:1f:f7:39:cc:04:4e:0b:b2:
                    77:f2:ee:f6:42:7c:97:26:3d:48:dd:69:fe:c5:da:
                    4d:b7:a6:b1:8e:bc:83:22:9a:7a:0e:3b:4f:51:cf:
                    3d:10:1a:89:ca:c0:5a:78:66:22:cd:89:b5:31:74:
                    1c:74:0b:cf:b9:6e:b7:8d:d1:ba:3e:6f:74:17:2b:
                    56:b7:41:4a:2f:36:b0:1a:76:b8:b5:8e:3e:7d:80:
                    bc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B7:08:EC:B9:E9:B8:B7:ED:46:CE:05:ED:CA:C3:49:75:02:48:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.252.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:08:4e:31:30:3e:c9:2d:7c:1d:29:68:4b:84:41:c4:e2:a0:
         4e:c2:2b:c8:ad:ab:b4:4b:0f:96:30:09:a0:21:34:63:ed:41:
         14:ec:65:28:5f:6b:ba:48:b3:68:1e:c4:75:76:6a:7f:a9:f9:
         01:c4:9b:93:f7:bd:c0:64:41:b9:7d:43:bd:e2:a4:b3:d1:b3:
         d7:d9:aa:e5:22:54:67:54:9f:7a:47:fe:19:63:60:cf:85:aa:
         e7:7b:d6:30:84:31:03:24:41:ea:bc:5c:43:2a:0c:4b:af:79:
         23:3d:69:48:be:45:ef:37:22:d6:c6:b6:ac:39:3d:e8:c6:4e:
         7d:5e:67:1e:78:e0:0e:e6:76:6d:57:4d:bd:36:4e:6f:3b:4d:
         19:dd:03:80:04:c5:a1:ec:6f:c4:09:7b:f6:ba:6a:82:e5:15:
         36:08:74:b3:99:85:b5:33:19:94:c3:28:86:a3:84:71:86:5e:
         7f:e5:dc:fa:9d:3c:15:e5:57:d6:5f:6e:f6:c8:74:78:93:d6:
         77:4f:48:03:68:04:87:23:f5:ef:c4:22:d3:46:55:71:81:0a:
         00:19:22:2c:11:25:c8:40:fb:52:9f:94:7c:7e:a5:b8:f6:7e:
         14:26:90:ee:bb:9c:77:c3:80:ea:66:8f:85:fb:b7:0e:5f:ba:
         39:2f:1b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:48:48 2025 by rpki-client