Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/c9a67b93-189b-3a78-a08b-a944dbcd5319.roa
File:                     c9a67b93-189b-3a78-a08b-a944dbcd5319.roa (raw, json)
Hash identifier:          7auBcbqzFchSdylUTucSgkIq+QH8RSuH6ZERYt1cCuw=
Subject key identifier:   A0:5F:31:E5:F5:48:35:89:96:56:DC:1F:29:1F:14:13:3F:1C:7C:D2
Certificate issuer:       /CN=d651f6e5-66de-4793-8c12-2261d5e62118
Certificate serial:       010D0C9F43285848CC7B92C12785B7D23D682E40
Authority key identifier: 02:93:6E:0E:A1:47:CA:5E:AD:54:25:C2:72:EA:78:EE:DA:C0:3A:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/c9a67b93-189b-3a78-a08b-a944dbcd5319.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     26721
IP address blocks:        23.130.128.0/24 maxlen: 24
                          23.130.129.0/24 maxlen: 24
                          23.168.0.0/24 maxlen: 24
                          162.218.232.0/21 maxlen: 24
                          209.40.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/d651f6e5-66de-4793-8c12-2261d5e62118.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/d651f6e5-66de-4793-8c12-2261d5e62118.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:92:c1:27:85:b7:d2:3d:68:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d651f6e5-66de-4793-8c12-2261d5e62118
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=8485c8e3-910c-479a-a936-7ff0b03285af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:45:57:7e:f7:d1:b9:4c:ad:44:21:59:46:dd:
                    ec:0a:e7:9b:ca:6d:8e:d0:31:8f:ee:a0:6b:ab:49:
                    66:3d:99:6a:23:5d:00:68:81:ab:27:7a:fa:35:88:
                    2e:89:10:cc:03:c4:ae:58:d4:0a:f4:9b:9f:76:0a:
                    ed:bb:01:73:b3:0d:f0:db:7f:a5:bd:20:78:74:cd:
                    f8:72:f9:36:8e:72:b7:52:f1:1e:ce:34:04:be:33:
                    06:58:6c:2b:96:b4:f5:e3:e9:96:d6:15:2d:e7:20:
                    69:19:f2:32:28:2d:4d:65:22:f4:20:de:3e:49:8f:
                    ca:e2:3b:b7:a7:93:dc:d6:16:84:9d:2a:60:21:b9:
                    88:dc:b4:d8:7d:85:f6:1d:c3:5f:7b:98:14:cb:d2:
                    bb:80:7f:7d:25:7b:52:51:96:1a:3f:98:2b:5c:3d:
                    b4:80:44:b6:ec:88:9f:4a:b2:29:db:4c:10:33:a8:
                    b0:6e:3b:04:20:c9:34:24:2a:3d:d2:ff:2e:cc:c7:
                    26:90:f7:9f:ea:ee:5c:da:64:fb:e7:93:17:03:74:
                    ec:9d:16:03:98:20:75:1c:f9:2d:5d:a6:0c:4e:7a:
                    c1:60:90:2e:28:4e:6e:70:90:82:74:03:a0:a8:be:
                    51:38:ae:16:ed:21:25:7f:f3:7c:d2:09:05:f3:72:
                    1a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5F:31:E5:F5:48:35:89:96:56:DC:1F:29:1F:14:13:3F:1C:7C:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/c9a67b93-189b-3a78-a08b-a944dbcd5319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/d651f6e5-66de-4793-8c12-2261d5e62118.crl

            X509v3 Authority Key Identifier:
                keyid:02:93:6E:0E:A1:47:CA:5E:AD:54:25:C2:72:EA:78:EE:DA:C0:3A:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.128.0/23
                  23.168.0.0/24
                  162.218.232.0/21
                  209.40.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e5:0a:13:2f:34:c7:80:96:89:e3:13:1d:d7:34:e8:c5:a7:
         cf:e0:a1:96:98:fe:b2:b3:08:83:92:08:81:6a:9a:5a:2a:d0:
         9a:2c:96:37:60:f5:22:ab:4f:0a:28:25:0e:c9:47:3d:50:94:
         b4:c1:e5:bf:07:3d:75:61:40:94:0c:85:c7:7d:01:38:56:c2:
         ac:91:21:c3:53:22:f5:36:b1:51:f7:a2:e8:93:02:a5:e8:24:
         df:d2:56:7e:0d:88:92:08:1e:fc:1c:7f:2a:d2:57:1a:05:af:
         d7:df:d9:42:43:0b:ca:63:c5:93:d2:86:76:84:04:ba:90:e9:
         04:11:8c:5d:87:4c:52:5f:d5:bb:8e:bf:5f:f8:e7:f4:9c:a3:
         58:94:0a:f7:fa:ab:57:75:03:3d:96:73:08:8c:40:90:21:8b:
         82:be:f0:55:db:10:db:ca:48:85:4b:00:43:03:42:e7:98:b5:
         33:a7:7d:7d:27:b7:3a:aa:20:87:6b:bb:3d:b3:35:87:96:16:
         18:85:89:c5:ab:74:4e:2c:05:d6:7d:07:f9:c1:bf:27:b9:d0:
         46:4e:88:97:1f:cb:b3:72:95:b6:38:72:ba:d9:a8:07:a5:47:
         95:08:6b:b7:ae:91:ef:a9:5c:bd:80:42:0a:36:f5:b4:da:eb:
         01:1b:76:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:20 2025 by rpki-client