Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/53cc0562-4bf6-374f-8035-b870a3aeeac1.roa
File:                     53cc0562-4bf6-374f-8035-b870a3aeeac1.roa (raw, json)
Hash identifier:          HaCbdWF0r7EgoSvb6bZpADtJGMHXcRJW74IGjhBGZqQ=
Subject key identifier:   8C:27:DB:48:65:78:46:4F:21:8D:61:07:2B:08:E0:3C:3F:EF:6B:07
Certificate issuer:       /CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b
Certificate serial:       010D0C9F43285849E2253661A39C2AA980438840
Authority key identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/53cc0562-4bf6-374f-8035-b870a3aeeac1.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     13696
IP address blocks:        23.130.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:36:61:a3:9c:2a:a9:80:43:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=58bb476f-7d08-4eae-a88b-a2bb203a4b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b8:96:49:08:a6:a5:fb:4e:ac:74:db:dc:45:
                    93:30:0c:bd:c0:5c:6a:e6:17:fa:b0:e0:53:99:86:
                    d1:3c:78:f6:24:49:b4:e0:9e:17:3f:d5:0c:e2:9b:
                    e8:d9:57:8f:aa:3e:aa:e8:bb:8f:eb:a0:73:56:2d:
                    96:a2:f7:ad:bf:13:8b:32:25:1e:d2:da:21:7d:d0:
                    f0:8e:00:5e:bb:1b:1c:91:4d:5d:da:54:ab:e7:fb:
                    1b:7b:d7:c9:03:3d:4c:32:aa:fb:ee:f4:ec:35:e9:
                    2f:a1:b7:78:76:b0:18:4b:64:71:6a:9f:32:d6:ee:
                    a0:44:34:ba:8c:5f:ef:c0:82:6e:72:f4:b4:4c:cf:
                    c6:64:b4:25:b2:4b:60:b6:b7:b7:60:33:03:42:17:
                    75:5d:3f:09:1d:5b:e5:c3:97:57:f4:dd:c8:fa:40:
                    9b:f1:e1:6a:10:ba:c5:0c:91:da:61:1a:bb:97:60:
                    b3:8f:fb:c8:1d:8c:c6:a2:f4:fe:e2:cf:41:e9:c3:
                    93:a2:e4:58:ac:13:7e:d9:e4:64:1e:2f:b8:27:be:
                    80:97:c1:eb:ca:f1:be:a3:0c:d0:f7:a9:7e:3e:c5:
                    f5:71:28:fc:8f:97:b7:d1:8e:18:25:b5:46:c8:be:
                    90:a7:7d:f8:f6:38:6c:a3:19:24:20:de:00:3c:fd:
                    e1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:27:DB:48:65:78:46:4F:21:8D:61:07:2B:08:E0:3C:3F:EF:6B:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/53cc0562-4bf6-374f-8035-b870a3aeeac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl

            X509v3 Authority Key Identifier:
                keyid:91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:89:a5:3a:6f:b0:fb:bb:f7:41:97:93:7a:a2:5d:e8:e2:fc:
         e9:e5:2d:67:6f:4e:d0:c0:7a:e2:d2:31:ec:9a:b8:2f:a2:0f:
         79:32:a7:f1:b8:81:e8:b1:c5:73:5f:20:66:0d:17:95:f7:48:
         c7:a1:50:b7:4d:a0:0b:7b:0c:d2:7e:9c:e1:ba:89:79:fd:97:
         34:d9:b5:6c:06:e9:22:5c:42:98:81:da:c4:3c:91:11:5c:16:
         48:70:80:e1:0d:92:e6:06:9a:81:3f:9f:40:f9:80:f7:ae:d1:
         83:7e:a9:6a:5c:0b:e3:66:e4:95:ba:6f:57:c5:01:09:c2:e6:
         96:55:04:72:2d:18:1e:ec:6d:d3:8a:8d:b0:ce:d2:a0:8e:75:
         06:a0:e2:9c:11:46:a0:1f:42:fb:0c:ce:f5:9c:88:22:b6:c0:
         03:b1:84:e8:37:5e:b3:83:e3:32:ef:ad:4c:29:6a:dc:8d:ff:
         fe:29:0e:b4:a6:f1:ed:7f:43:19:6f:62:fc:92:12:aa:12:53:
         57:02:cc:fa:ab:e2:41:8a:ec:17:b8:2c:b6:16:5a:c0:6f:47:
         38:98:4d:ad:cc:80:5d:a2:e1:62:3e:5d:17:1a:9b:30:23:6e:
         f9:34:a2:6f:d3:f3:b0:ab:a4:11:19:4c:93:4d:95:da:44:4e:
         a1:5c:95:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:00:11 2025 by rpki-client