Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/d3304f17-035e-3d1c-9c51-29c9cd3a0ae4.roa
File:                     d3304f17-035e-3d1c-9c51-29c9cd3a0ae4.roa (raw, json)
Hash identifier:          XkD/4CJa2sqoTVW26nsTI59wrRvzcOG6o/s5cALoB60=
Subject key identifier:   43:5A:81:C3:BD:33:05:3E:D8:6E:03:53:05:43:A9:E9:FC:B5:93:8C
Certificate issuer:       /CN=2e8a2dcd-c473-4343-ab03-233f389ee575
Certificate serial:       010D0C9F43285849DC8F9D526123F3CC77BBBE00
Authority key identifier: E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/d3304f17-035e-3d1c-9c51-29c9cd3a0ae4.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     8079
IP address blocks:        23.133.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:9d:52:61:23:f3:cc:77:bb:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8a2dcd-c473-4343-ab03-233f389ee575
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=de8f71d7-e702-49ef-8ee8-e46d79741003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:18:3b:5a:20:a4:48:62:5d:ed:75:45:d4:7d:
                    5e:fd:73:ca:34:7c:d7:af:bd:82:23:be:1c:32:cf:
                    a5:08:60:06:78:83:04:43:ad:a9:30:e1:30:37:4c:
                    cc:cb:58:d7:c8:ed:38:b4:f5:5f:8c:4b:10:22:54:
                    27:f9:91:cd:e8:82:b4:c6:2b:83:39:ee:d2:93:33:
                    d4:57:b5:34:07:bd:18:a9:72:a6:88:18:a8:9a:86:
                    c0:cb:30:73:db:ae:7f:73:53:02:e3:f3:3a:ca:53:
                    05:7e:4c:a4:94:03:60:98:08:2d:f7:2b:58:12:be:
                    69:f9:e0:29:5d:c5:e9:61:a6:c8:a9:ba:87:09:d5:
                    89:a4:ae:25:b3:bb:f8:c4:01:8f:e4:90:36:40:15:
                    8f:a0:a1:88:fa:a8:ad:d7:88:ef:42:6b:5a:b6:93:
                    e5:2f:c7:90:b1:bb:e2:35:73:6e:a5:3d:98:2d:e8:
                    ec:83:7b:cf:ad:5c:6b:e4:af:19:33:a3:71:75:aa:
                    c6:88:b3:ba:af:1a:af:1d:70:30:87:8d:ce:78:6b:
                    be:20:b5:c0:ff:38:cf:1f:3d:61:dd:4b:fa:8f:50:
                    67:c8:47:c9:b2:5f:fe:58:d1:ab:90:8a:7f:5b:a4:
                    99:b1:92:02:08:91:85:91:02:0e:c7:c4:70:9c:2b:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5A:81:C3:BD:33:05:3E:D8:6E:03:53:05:43:A9:E9:FC:B5:93:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/d3304f17-035e-3d1c-9c51-29c9cd3a0ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl

            X509v3 Authority Key Identifier:
                keyid:E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c8:48:df:2f:6c:e2:29:f2:1e:89:86:23:7d:b2:d0:c3:e6:
         07:46:dd:42:22:31:9b:c0:d7:84:37:2d:0c:86:38:32:c7:7b:
         e8:b4:09:74:fd:eb:6f:71:e2:c5:1c:3a:52:ad:57:1b:48:b6:
         67:40:f4:32:4c:8f:ba:15:4d:dd:04:47:1e:d5:98:d7:88:13:
         24:52:0d:77:a5:5e:79:fb:a6:3c:ff:5d:2c:90:b6:ee:c2:c2:
         ff:57:e4:9b:96:55:ee:d1:47:65:e0:b7:41:5f:28:c6:ca:ba:
         1f:61:97:2c:b4:68:3e:bd:1b:7d:60:c3:cd:2e:89:0d:eb:0f:
         2b:7a:aa:2a:7c:d6:c0:76:c9:db:c6:ed:7e:44:38:b6:fd:c9:
         84:e0:3a:8a:a7:d9:f0:49:6b:01:31:45:c9:f4:2f:2c:5f:69:
         90:fc:85:7f:b6:a7:a0:8f:dd:a0:69:23:74:74:f8:d7:75:a4:
         30:d7:06:38:22:fd:cd:0f:2d:b2:78:6a:af:82:5a:a2:9b:fa:
         3b:cd:35:9f:81:a8:b6:72:8c:40:46:69:61:fd:12:d7:26:b8:
         c5:64:d5:bf:44:ee:57:40:15:97:3f:de:7c:93:95:48:19:d4:
         1b:83:c6:44:f4:b0:aa:b8:78:71:84:89:81:e2:4b:5f:50:cb:
         25:8a:12:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:24:23 2025 by rpki-client