Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab51a240-8131-3703-947d-48e02f0ce40d.roa
File:                     ab51a240-8131-3703-947d-48e02f0ce40d.roa (raw, json)
Hash identifier:          RTxcVPppNoJ4CtrStwUdBolWkyb7Ba28g8DlD/IS8+4=
Subject key identifier:   73:12:0D:4B:22:09:DA:AA:F3:D6:F8:60:66:AD:F5:7B:59:AC:9B:61
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858495EEEF5286774E360BF6C1500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab51a240-8131-3703-947d-48e02f0ce40d.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        23.47.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:f5:28:67:74:e3:60:bf:6c:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=4b7aa9c4-e33f-4a94-8cb0-bd77afd4ec03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3c:e8:39:6b:5f:0a:8b:4f:90:04:37:92:25:
                    c5:aa:9d:70:de:27:36:af:4b:e8:7e:03:28:e4:a3:
                    3e:29:38:01:b5:98:10:08:32:fd:81:b2:a0:e3:ae:
                    ab:34:e4:a9:cd:28:8f:8e:1a:e4:fd:2b:cb:32:cf:
                    39:d4:3d:98:66:ac:ac:bd:82:23:25:d3:eb:40:8e:
                    bd:98:3b:83:23:69:84:8e:d8:20:91:87:dd:39:7f:
                    3d:67:89:30:93:b8:1c:0f:c2:31:78:c1:81:30:2d:
                    d1:29:2f:bb:35:f9:7d:76:2d:cd:b7:34:e4:c3:ee:
                    08:8b:75:89:bd:43:cd:8f:7a:0d:bf:18:60:71:0f:
                    0d:58:26:b2:28:d3:c2:48:81:b3:14:f4:16:55:88:
                    53:c1:07:08:64:80:b8:2d:32:5e:d8:cb:f7:89:23:
                    a5:df:c8:c2:01:f3:a5:52:32:2d:08:2b:87:3e:cd:
                    32:00:5b:2a:5c:aa:1e:71:b7:ba:20:17:ae:43:af:
                    3d:1d:bc:d6:a3:67:1e:3e:95:64:ba:fb:0e:38:7b:
                    da:46:55:27:eb:a9:46:d0:9a:de:e0:78:43:d5:2e:
                    9a:b3:2d:07:92:71:46:0a:5d:8e:22:eb:dc:19:76:
                    30:b0:ef:ce:87:22:39:1e:46:fd:b8:51:c7:c0:36:
                    7d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:12:0D:4B:22:09:DA:AA:F3:D6:F8:60:66:AD:F5:7B:59:AC:9B:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab51a240-8131-3703-947d-48e02f0ce40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:0a:29:8c:57:f0:ae:36:e5:a1:9c:19:7d:1e:e7:23:8d:c1:
         4a:37:e1:a4:b0:d3:7b:aa:c1:a0:a9:cd:17:1a:81:bb:d0:37:
         a3:e1:8b:e2:d9:1b:2a:ea:86:e1:28:1a:ba:34:c1:a8:f2:1c:
         d8:5d:c6:4b:ad:51:82:55:7b:a1:d9:ca:43:72:67:7c:58:d7:
         90:8a:eb:aa:c2:0e:09:d3:75:25:15:b1:4d:b4:38:7a:86:77:
         25:5b:78:fd:6f:b4:69:a5:a0:fd:ee:0c:e2:d4:87:7f:cb:40:
         4e:31:87:6d:2d:5d:d8:78:68:30:a2:6e:1c:0b:9f:d3:6a:4c:
         bf:bd:d0:ca:96:bb:06:6f:15:99:ae:d2:cc:88:ad:0d:60:d8:
         e0:e6:0b:0e:f2:6f:2f:02:21:d0:a9:00:c3:7b:2f:dd:31:6c:
         5f:9e:fb:cd:ef:f9:13:ff:6d:f7:da:c6:68:ee:3a:43:31:f3:
         39:4a:49:f1:44:7f:eb:b9:72:51:40:99:b2:a8:71:a4:07:69:
         aa:1d:92:e9:b7:01:95:c1:ad:d4:ac:23:30:1b:50:f2:e8:69:
         1b:90:87:3d:2d:e4:16:eb:d4:96:77:5e:ff:56:78:84:b9:0f:
         8f:25:51:9b:5d:a1:89:d9:21:3a:f2:27:b1:a7:65:b3:c7:b8:
         c4:8c:5c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:49 2025 by rpki-client