Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/05f41490-eb46-385a-b1c5-c75862aa15d4.roa
File:                     05f41490-eb46-385a-b1c5-c75862aa15d4.roa (raw, json)
Hash identifier:          jlwt1wuyRQOCq4U06RHNiqwGzVQcn+P4JaZ7W7S8RMA=
Subject key identifier:   02:7B:8F:C0:9B:FE:9F:0A:36:04:D4:8E:0A:26:84:93:A3:36:2D:8F
Certificate issuer:       /CN=cd7304e1-3bc1-43c1-b035-93ee027063db
Certificate serial:       010D0C9F43285848BBBB848798A8906F9D090B00
Authority key identifier: EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/05f41490-eb46-385a-b1c5-c75862aa15d4.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     48231
IP address blocks:        23.150.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:84:87:98:a8:90:6f:9d:09:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7304e1-3bc1-43c1-b035-93ee027063db
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=f4d17e55-60d4-44fa-92dd-dbebb314b810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e1:aa:03:5e:72:7f:a1:a4:82:4b:ad:b8:d3:
                    5f:e2:2f:34:33:73:73:fe:6d:41:c1:45:6c:74:42:
                    b2:ac:a0:26:36:d5:c7:66:ce:50:e4:67:6a:a3:15:
                    f3:63:c4:d8:ab:cb:36:3b:7e:22:31:3c:c3:2d:14:
                    18:ae:68:02:bc:b9:c7:d4:f8:b7:8a:ee:71:1c:df:
                    f1:b5:2b:b2:c1:65:d5:df:5c:b3:ba:0b:ad:bb:f2:
                    37:9b:fc:58:4c:85:32:a9:e4:40:07:82:9f:e5:c2:
                    54:42:05:84:09:a8:9c:b0:a6:bc:89:9e:13:b5:ca:
                    bc:c6:93:34:73:1d:1c:e3:7a:9f:93:a6:75:fa:27:
                    d0:c9:b0:bb:b4:3d:56:5b:a2:54:19:47:60:03:36:
                    ab:0e:41:8b:42:c2:d0:f6:34:dc:24:6b:63:2f:05:
                    07:55:8d:b0:7f:98:c1:bb:ff:61:63:70:c0:5b:47:
                    93:8f:34:e3:0c:5a:4a:ec:c9:b7:55:fb:4b:f3:f9:
                    db:a9:f8:13:98:45:d5:a8:e8:ff:0f:c3:88:a3:85:
                    58:13:5c:57:ec:a5:0c:33:f2:f8:a7:d4:e2:1f:f0:
                    43:1d:1f:40:df:ea:85:69:3f:2a:f8:60:a2:fa:3f:
                    3d:7c:00:62:91:77:93:d3:82:d9:cc:4b:44:a7:a0:
                    a4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7B:8F:C0:9B:FE:9F:0A:36:04:D4:8E:0A:26:84:93:A3:36:2D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/05f41490-eb46-385a-b1c5-c75862aa15d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl

            X509v3 Authority Key Identifier:
                keyid:EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:cf:98:e4:0f:4e:bc:5e:2b:ce:6a:59:dd:1c:0a:d5:0b:53:
         bc:9d:83:91:3b:03:ab:f3:d3:72:00:ff:15:1a:07:34:5b:5c:
         78:71:2b:b9:c6:94:37:6f:19:8b:18:1e:31:8e:4f:c0:2b:39:
         c5:08:5a:03:9d:a9:d8:2f:11:2d:4a:4e:a1:71:28:f3:d6:76:
         82:0c:09:65:db:94:75:bf:98:ff:e0:06:bb:a2:3e:59:97:b0:
         cf:2f:8d:93:87:76:6a:fc:d9:48:ab:ab:c0:96:cb:13:0f:77:
         6e:b2:5f:dd:00:61:5e:ba:e7:88:60:c3:22:23:f8:90:71:88:
         23:c0:4d:77:68:4c:b2:10:dd:8a:84:d5:54:c0:6a:68:c0:82:
         2b:9b:f9:e8:b3:86:b0:7b:ab:ee:c3:9d:a7:91:75:d4:c6:54:
         7d:3a:c1:a1:81:fe:64:e1:be:1f:6e:2c:76:6c:70:7e:7a:9c:
         7c:32:a4:5c:17:d1:a8:f6:51:ad:65:cb:25:64:a9:5c:0a:e9:
         d5:f4:28:4f:9c:19:62:18:d6:b9:37:b4:1f:15:7c:00:b4:ac:
         93:e9:0f:5f:50:a8:9e:8a:2f:10:04:c4:b7:8d:ad:4c:31:10:
         65:c4:08:b8:aa:4a:0c:a3:e8:19:54:fe:84:e0:ad:6a:04:58:
         b8:3a:a2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:05 2025 by rpki-client