Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9a073a60-dfde-4b63-8f3f-dea405cba074/b6480112-9f7c-3ce2-ba40-9628d509bc13.roa
File:                     b6480112-9f7c-3ce2-ba40-9628d509bc13.roa (raw, json)
Hash identifier:          Bq+SkHVmzihCS/KWVlikLyY1hpZHWhnMSWX8l2ENLPE=
Subject key identifier:   50:88:8C:2C:B7:25:58:80:01:CF:55:F1:24:39:E8:01:69:D6:61:41
Certificate issuer:       /CN=9a073a60-dfde-4b63-8f3f-dea405cba074
Certificate serial:       010D0C9F432858495B9777D1C982A3FEEA345580
Authority key identifier: 3D:6D:02:82:06:94:5E:A8:D4:34:9C:71:FC:30:68:A4:CF:46:15:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9a073a60-dfde-4b63-8f3f-dea405cba074.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9a073a60-dfde-4b63-8f3f-dea405cba074/b6480112-9f7c-3ce2-ba40-9628d509bc13.roa
Signing time:             Sun 30 Mar 2025 08:17:34 +0000
ROA not before:           Sun 30 Mar 2025 08:17:34 +0000
ROA not after:            Sat 28 Jun 2025 08:17:34 +0000
asID:                     8095
IP address blocks:        23.180.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9a073a60-dfde-4b63-8f3f-dea405cba074/9a073a60-dfde-4b63-8f3f-dea405cba074.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9a073a60-dfde-4b63-8f3f-dea405cba074/9a073a60-dfde-4b63-8f3f-dea405cba074.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9a073a60-dfde-4b63-8f3f-dea405cba074.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5b:97:77:d1:c9:82:a3:fe:ea:34:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a073a60-dfde-4b63-8f3f-dea405cba074
        Validity
            Not Before: Mar 30 08:17:34 2025 GMT
            Not After : Jun 28 08:17:34 2025 GMT
        Subject: CN=a443a29b-f9a7-40ae-9903-9a95c2d0c9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:67:b2:3d:92:52:22:1f:e6:5e:e5:44:d5:86:
                    d3:cc:68:94:a0:65:c4:20:dd:c1:96:39:ac:b4:b2:
                    38:6f:96:d7:3c:ac:7e:24:74:c3:d6:67:f9:96:a6:
                    dc:64:08:98:be:a6:25:8a:06:a0:c4:4b:10:58:fc:
                    c3:76:77:87:c6:dd:29:eb:eb:0c:cc:02:98:b0:6d:
                    5c:a0:14:d3:e4:fa:46:87:e2:56:31:5f:4a:43:47:
                    90:5f:be:fb:4c:d5:d2:1b:83:1d:ec:96:de:62:c1:
                    4e:fc:f7:ad:75:f4:14:3d:8b:a4:b4:c2:ad:6a:20:
                    d6:08:b1:f0:4c:96:df:0a:45:63:ac:76:14:00:ab:
                    96:2c:34:0a:58:2b:3d:98:8e:30:a8:57:34:a9:ad:
                    6b:bf:b1:cc:29:90:c8:f9:c0:42:e1:a7:6d:6c:ca:
                    5b:19:97:98:60:3f:70:33:7f:0e:ce:f7:cc:b7:c8:
                    bf:22:11:2e:53:a4:85:17:49:81:f6:80:d7:46:53:
                    a9:5d:91:47:21:b9:67:3c:7b:91:1f:24:a7:7d:dc:
                    35:10:73:d1:dc:67:d8:bc:d6:49:49:c7:85:5a:11:
                    15:a3:e3:38:3b:09:6c:d5:06:b2:c7:1a:98:ed:90:
                    cc:44:fc:56:f2:31:99:f4:d3:bd:4d:8d:b3:67:6d:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:88:8C:2C:B7:25:58:80:01:CF:55:F1:24:39:E8:01:69:D6:61:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9a073a60-dfde-4b63-8f3f-dea405cba074/b6480112-9f7c-3ce2-ba40-9628d509bc13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9a073a60-dfde-4b63-8f3f-dea405cba074/9a073a60-dfde-4b63-8f3f-dea405cba074.crl

            X509v3 Authority Key Identifier:
                keyid:3D:6D:02:82:06:94:5E:A8:D4:34:9C:71:FC:30:68:A4:CF:46:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9a073a60-dfde-4b63-8f3f-dea405cba074.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:61:be:f0:2a:4c:d0:dd:25:61:42:bf:8a:20:b9:2d:7d:c0:
         6c:ea:05:44:eb:e4:61:3f:36:bc:35:db:34:c8:b5:36:e5:28:
         91:d2:e5:02:b8:75:25:6b:85:9d:c0:51:fe:f8:9e:e1:3d:fe:
         74:63:5a:05:e5:bc:9c:a5:15:68:5e:36:2d:fb:37:0e:5a:4b:
         28:e6:70:16:fa:01:25:a2:cf:04:78:35:42:35:49:28:c6:eb:
         3a:5d:88:34:cf:81:c3:62:6c:11:d3:4c:f6:02:79:1e:da:26:
         c2:71:97:cf:c2:69:27:38:41:45:d2:10:c3:c9:d5:80:97:a3:
         44:c6:3e:3f:ee:7e:92:00:82:32:c2:81:03:c6:dc:ac:61:9e:
         3b:5d:23:fb:dc:d2:e3:b3:e2:7d:41:c2:63:3a:84:92:56:92:
         a4:9d:fc:29:42:41:2c:c7:d3:95:e9:61:c7:3f:ea:43:71:28:
         4b:48:d8:bf:ca:fc:da:8b:65:8e:11:b0:c8:ad:97:14:d3:2b:
         fe:4c:1a:c6:71:b8:45:7d:ef:e6:1c:a4:c4:b7:39:69:ab:c2:
         94:35:cf:43:67:a2:ba:32:f7:16:5e:37:3b:eb:d7:cb:72:54:
         00:4d:1c:16:01:c6:40:5d:42:d4:f3:fa:ab:57:37:3f:1a:8b:
         0e:b0:1a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:01 2025 by rpki-client