Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/e39310db-c681-3aba-a07c-e530ed598cdf.roa
File:                     e39310db-c681-3aba-a07c-e530ed598cdf.roa (raw, json)
Hash identifier:          iaFcg4HRHcXlYxxqCka5+IL97FlzAB3s9rBsJZuPCCU=
Subject key identifier:   C1:76:71:9C:3C:84:30:15:D9:3B:B1:05:87:22:25:8E:18:F4:45:6C
Certificate issuer:       /CN=d299820b-c679-4c6f-a4de-fc9b11c710bc
Certificate serial:       010D0C9F432858490CB1422CFA476A3482EF4440
Authority key identifier: 28:CB:33:A6:97:89:2D:35:5E:91:19:C1:60:78:CE:7E:36:7D:64:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/e39310db-c681-3aba-a07c-e530ed598cdf.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     401529
IP address blocks:        23.130.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:42:2c:fa:47:6a:34:82:ef:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d299820b-c679-4c6f-a4de-fc9b11c710bc
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=0947980d-2eac-493e-8f13-87c707f1b976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:73:ed:47:06:3c:86:33:89:53:1c:66:c8:0d:
                    1d:93:43:d2:7c:59:a0:b2:1c:81:40:aa:10:78:62:
                    94:2a:1c:73:ef:28:36:04:b8:8a:f7:42:b7:70:ee:
                    e4:0f:62:fc:93:c2:c0:a6:f4:f0:8d:eb:b6:d7:6f:
                    aa:9f:9e:3c:31:e1:a0:16:7f:b0:2b:7a:53:77:24:
                    3b:de:d5:a5:54:9b:5e:de:7a:a3:7f:90:78:50:65:
                    74:ac:1e:24:48:36:5d:d2:03:e2:d6:ea:3b:75:f8:
                    ba:f4:0e:ab:ec:29:57:ed:52:e6:17:01:17:e9:05:
                    27:09:54:78:e4:39:4e:2c:09:cc:90:65:8e:45:3c:
                    3e:35:85:75:90:90:bc:79:a1:72:d7:d6:0d:b7:23:
                    a4:a0:cb:fd:0d:3f:2a:be:53:de:41:98:95:51:e4:
                    ae:42:9e:2b:2e:e3:61:8c:d3:cc:31:44:7f:2b:e5:
                    8a:27:28:37:dc:5a:89:4f:9a:a2:ff:e1:8f:41:0a:
                    f4:c8:de:1b:dd:7f:4c:3e:44:95:8a:80:09:1f:e5:
                    67:0f:f1:09:17:b8:be:c4:f0:d2:c3:e6:fb:bf:e9:
                    68:de:07:cd:dd:87:59:b8:2c:91:f9:4f:dc:66:9f:
                    1c:96:37:2e:c5:c7:89:fb:da:07:5c:6d:a3:38:51:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:76:71:9C:3C:84:30:15:D9:3B:B1:05:87:22:25:8E:18:F4:45:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/e39310db-c681-3aba-a07c-e530ed598cdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.crl

            X509v3 Authority Key Identifier:
                keyid:28:CB:33:A6:97:89:2D:35:5E:91:19:C1:60:78:CE:7E:36:7D:64:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:52:fc:54:c8:ce:dd:cc:fd:20:20:4e:4e:92:9d:b7:4f:f2:
         65:62:53:35:46:ac:c7:12:d3:18:76:53:65:71:7f:94:44:69:
         ff:d0:21:c9:5c:cd:42:58:bc:f5:28:ed:b3:24:6b:76:e2:23:
         55:c4:6c:6b:66:a6:f6:ce:2b:60:d0:db:67:68:b9:2d:7b:db:
         e3:75:9c:9d:d6:2a:bb:19:93:3b:c9:99:b2:80:73:b3:4a:c2:
         2d:54:d3:6b:af:be:3e:bd:c5:7d:84:9a:0b:73:b4:2b:d3:21:
         d8:fc:64:65:d1:4a:80:9e:cc:82:18:a9:ca:28:3d:c4:6b:54:
         81:22:de:6b:89:a2:0d:01:6f:54:fb:6a:94:d7:f7:ad:a8:e7:
         3a:ff:15:8d:f0:6f:2f:1d:3c:8d:2b:aa:90:4f:a0:46:aa:a9:
         a0:eb:49:93:ad:39:0f:3b:5b:79:90:e8:3c:8e:26:f5:48:9b:
         3f:54:84:c8:ff:68:ed:ef:4f:d2:d5:b9:42:5b:c9:8b:64:f1:
         f8:ff:ca:e9:47:d4:0d:00:b8:44:a4:16:f3:d0:9b:ba:62:39:
         71:6d:b2:7d:31:2f:4b:93:fc:5f:4a:10:76:89:39:28:a2:bf:
         f5:f2:58:b3:4d:c9:93:84:cb:00:25:e5:55:51:2c:c6:3f:eb:
         19:5d:23:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:49:50 2025 by rpki-client