Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/86486939-09ae-3b8e-9df3-248401e6ffe2.roa
File:                     86486939-09ae-3b8e-9df3-248401e6ffe2.roa (raw, json)
Hash identifier:          cYw7Fy/oc8U7Vc7r4w2YrGxjuXHs89NDf3UQDibaykQ=
Subject key identifier:   00:63:6D:2D:97:68:62:F2:6B:C4:3C:EA:52:C7:D6:FB:4B:91:B8:06
Certificate issuer:       /CN=dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc
Certificate serial:       010D0C9F4328584909E6977C1F54F6A63AC4A500
Authority key identifier: 73:C9:91:1B:7E:82:61:17:6D:2A:32:3F:97:9E:FB:9C:3C:E9:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/86486939-09ae-3b8e-9df3-248401e6ffe2.roa
Signing time:             Sat 01 Mar 2025 02:00:39 +0000
ROA not before:           Sat 01 Mar 2025 02:00:39 +0000
ROA not after:            Fri 30 May 2025 01:00:39 +0000
asID:                     400465
IP address blocks:        23.132.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:e6:97:7c:1f:54:f6:a6:3a:c4:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc
        Validity
            Not Before: Mar  1 02:00:39 2025 GMT
            Not After : May 30 01:00:39 2025 GMT
        Subject: CN=2b7a9ade-7b0c-49d5-a988-416e5a1d18cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:ba:c6:84:e2:88:0b:48:bf:1a:f1:2b:8d:
                    b9:13:fb:60:7a:ef:ab:49:46:6e:ff:ce:bd:6b:5f:
                    6a:40:1d:47:ca:dc:90:9a:6a:81:a7:34:f6:b1:14:
                    b1:8c:c2:4f:98:43:77:74:15:22:f2:78:c4:ca:8d:
                    a5:e0:2f:0c:6a:9d:0c:4f:16:f1:4f:e3:eb:e8:b5:
                    c3:5a:38:0c:15:aa:13:25:1f:a9:c9:5d:26:50:c1:
                    be:be:ef:1b:87:5f:54:04:73:95:d0:37:d8:50:6d:
                    e6:df:fa:ec:45:4b:11:e6:b4:62:3f:ae:5d:d2:10:
                    24:14:81:d0:dc:db:dc:ad:7a:2a:1d:fa:d7:cc:65:
                    0f:9a:3c:6d:0e:3a:fd:5d:99:8e:95:ce:10:6f:99:
                    0e:2d:98:a4:c8:58:32:e0:80:89:e0:83:94:26:a7:
                    e7:0c:d5:14:1b:43:84:a5:af:f7:25:81:8e:4a:aa:
                    1b:6d:f6:c4:38:53:d8:a8:ff:98:0e:4a:83:ea:20:
                    a0:02:60:6e:ca:20:63:1b:c8:ef:a1:f7:fc:01:8f:
                    2f:44:a3:fc:ba:47:68:aa:07:1b:7f:dd:42:38:34:
                    8d:aa:9e:b6:ac:88:ba:30:af:0d:bd:36:63:85:eb:
                    15:f3:9c:8b:97:aa:1a:fa:25:2a:6d:c9:ad:75:a5:
                    f8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:63:6D:2D:97:68:62:F2:6B:C4:3C:EA:52:C7:D6:FB:4B:91:B8:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/86486939-09ae-3b8e-9df3-248401e6ffe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.crl

            X509v3 Authority Key Identifier:
                keyid:73:C9:91:1B:7E:82:61:17:6D:2A:32:3F:97:9E:FB:9C:3C:E9:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ee:4a:24:35:f2:94:f4:70:9c:7b:1d:81:c9:3c:30:ae:20:
         3e:b9:9a:04:81:05:f8:ea:ee:71:be:d4:27:dd:5b:6a:2a:43:
         99:87:01:1f:5e:13:3e:86:b0:6c:6a:6d:8c:3e:42:3b:4b:4a:
         ed:46:43:1c:db:4b:9a:11:61:69:46:60:06:b6:a1:2e:38:c2:
         d4:f7:21:15:7f:ac:65:3e:5e:f5:27:1e:fd:1a:72:a9:7a:d9:
         96:61:e7:62:85:3a:3f:cc:b0:69:a9:e5:21:3a:7c:86:20:b7:
         c6:69:7e:b8:18:95:e8:f0:dc:e3:4f:88:20:e6:7c:b8:1e:ba:
         53:9c:69:b1:be:64:9a:29:3c:f8:08:8c:d5:a5:df:29:c9:75:
         b3:80:99:f6:6a:55:d3:88:73:e9:4c:ba:e2:10:36:36:c9:39:
         21:d4:64:1b:f8:ca:7c:7d:7e:72:c6:fc:ac:32:03:c5:21:50:
         a1:b5:79:e8:6c:6f:95:62:63:80:c0:c2:b2:0f:ed:1c:3b:0d:
         e5:bb:65:55:71:4c:d9:67:12:d5:29:fc:b0:3f:af:7b:40:2c:
         a2:7d:38:82:a0:8c:6b:10:07:4f:c0:fd:c0:f3:e2:2e:b6:f0:
         2d:0f:f7:52:04:17:8d:34:1c:a1:58:ff:66:f0:5b:c5:ba:d5:
         f9:bb:7f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:26 2025 by rpki-client