Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/e8614bbb-756c-3bc4-9679-b63272c6be61.roa
File:                     e8614bbb-756c-3bc4-9679-b63272c6be61.roa (raw, json)
Hash identifier:          qq/B65trgMe+SyYuMCg+PGf54Jv71+3iVG6i+bqXut0=
Subject key identifier:   CE:1F:FC:AC:A7:7E:60:B0:2C:0C:6A:C6:73:24:5A:FD:25:3D:F9:87
Certificate issuer:       /CN=497813be-498e-4129-a627-225f97d0e2b5
Certificate serial:       010D0C9F43285849FE0FF1D1577C58E27A819500
Authority key identifier: B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/e8614bbb-756c-3bc4-9679-b63272c6be61.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     399606
IP address blocks:        23.190.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:f1:d1:57:7c:58:e2:7a:81:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497813be-498e-4129-a627-225f97d0e2b5
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=877ded79-39cc-4484-aeb4-3ed1db1b19ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:89:c2:f9:f4:55:c0:b2:73:5d:2b:64:5b:
                    9f:4f:6f:92:90:7d:0e:ce:46:7c:26:4e:2c:59:02:
                    7f:aa:ac:15:0f:67:90:0e:f1:22:c1:2b:d5:9f:ef:
                    9b:fe:13:92:dd:de:13:da:3c:b8:84:21:a8:11:cb:
                    1c:a4:a7:2c:47:fb:02:28:22:6f:0e:9c:29:b4:c7:
                    e4:b7:31:1e:e8:ed:0f:a6:8d:0d:ee:8b:03:02:bd:
                    ba:00:1a:e9:b8:36:5a:9e:a9:e2:47:2b:5f:47:68:
                    94:b8:a7:3a:ca:a0:ec:ce:60:cd:0e:71:14:df:aa:
                    fa:65:fc:7b:ef:65:78:c9:cc:93:cc:b6:ac:2b:a8:
                    47:e3:2f:98:ef:7c:c1:08:9c:b7:12:f1:39:75:b7:
                    fd:e4:80:f2:d6:36:07:b7:45:ff:0d:e9:88:28:ec:
                    0b:13:ef:69:93:55:5b:1d:6c:9a:17:3b:2f:7a:d1:
                    0f:33:5e:fb:6e:a4:e1:82:13:d8:9b:ca:0f:96:5e:
                    94:bd:a5:b7:43:88:ee:3d:a4:87:d8:6b:3f:4b:bc:
                    20:f2:de:96:9c:f7:e7:a0:c6:e4:c5:47:9e:a9:27:
                    2b:61:93:4d:ed:cb:f2:ba:a7:1a:d2:92:ef:fa:8c:
                    95:11:a7:8a:56:c5:83:3b:c5:ea:72:95:33:83:9f:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1F:FC:AC:A7:7E:60:B0:2C:0C:6A:C6:73:24:5A:FD:25:3D:F9:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/e8614bbb-756c-3bc4-9679-b63272c6be61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl

            X509v3 Authority Key Identifier:
                keyid:B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:7e:27:0b:ea:5b:2c:9e:d3:a6:a0:d1:be:7b:b9:02:29:8a:
         ff:e4:d7:3c:d8:77:0c:51:f1:00:4f:4f:d3:93:e2:c8:e9:eb:
         de:50:51:2b:26:1f:4e:6c:d7:e1:56:57:b6:b1:ca:bf:90:3c:
         80:50:88:c7:48:79:b4:4f:70:56:85:5d:af:94:05:e5:20:e0:
         2f:0b:d7:ab:71:62:58:55:25:b8:1b:27:10:c6:46:84:2a:a1:
         ff:6c:49:6d:2b:13:3d:5c:ca:ac:c2:e8:aa:25:d6:44:46:1d:
         d1:af:22:c8:a6:80:fd:9e:06:c8:73:57:8c:94:0a:9e:93:a0:
         7b:f8:43:48:b3:0c:d1:0d:a5:44:de:fb:b6:9b:5d:6e:03:b6:
         d2:8c:57:be:ed:b1:3d:51:77:67:00:f6:50:f3:54:45:dd:73:
         52:8f:2f:49:8b:94:55:0c:b5:0e:23:d7:59:e1:45:7c:38:cf:
         1a:bd:eb:e3:8d:aa:e8:0f:92:a3:09:d8:31:2c:00:4d:90:16:
         8a:a6:a3:b5:51:a5:b4:1c:10:0b:54:ac:5e:84:93:7a:ac:d2:
         f2:90:eb:ae:9a:bb:00:97:7c:bf:12:07:c2:fa:02:81:35:3d:
         e7:b4:54:ba:9f:61:36:3f:28:94:5e:d5:51:f4:95:8e:84:b5:
         b3:8c:53:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:58:56 2025 by rpki-client