Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb561726-8c36-3ff4-9cbb-ca5fbe5169e9.roa
File:                     cb561726-8c36-3ff4-9cbb-ca5fbe5169e9.roa (raw, json)
Hash identifier:          hdY8HOqP0vKjuG7CRqP8pwzm66s0Yw0ah5AQQfZCPeI=
Subject key identifier:   75:97:E8:64:2E:7E:EC:BE:5A:04:44:7E:B6:D8:A3:DD:C2:A9:43:0E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858494733F2101E023EA17BB00B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb561726-8c36-3ff4-9cbb-ca5fbe5169e9.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     24203
IP address blocks:        23.201.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:f2:10:1e:02:3e:a1:7b:b0:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=7342efc3-e614-43d4-ad26-db9d21a7e746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:ad:42:26:cd:1c:27:d1:3d:84:6f:8c:16:
                    f8:89:e2:b8:72:60:53:cf:03:40:d8:b9:00:6d:0e:
                    f0:0f:6e:5c:7b:7f:c7:7b:17:f8:67:9f:e4:d2:b7:
                    32:bd:48:70:21:94:6a:8a:c8:7c:ea:73:20:5e:7b:
                    5d:18:54:53:ce:44:57:37:46:75:ba:9a:8c:4a:2b:
                    da:70:15:06:b3:c3:42:c2:83:4f:71:40:fa:22:83:
                    64:17:08:47:fb:d1:51:01:e7:a3:9b:a0:ec:7b:4b:
                    7f:dd:c2:8b:b5:34:74:7e:c8:87:a3:68:88:e6:be:
                    f3:8a:3f:d0:83:61:e1:4a:43:94:10:9d:c2:a2:88:
                    b6:27:fe:7f:26:63:74:d3:17:c7:45:b3:41:00:ec:
                    0f:fd:3f:8f:c4:ca:e4:ce:91:b3:46:04:21:e5:44:
                    bd:ba:a7:58:63:db:6e:a3:1a:25:65:2d:1f:2b:b4:
                    fd:c5:db:e9:0d:be:00:0d:5b:ab:aa:73:68:98:03:
                    f2:51:2b:6e:fd:b6:e5:7c:e0:20:c4:23:34:d5:a7:
                    07:8c:5e:09:99:f0:e4:9b:4a:88:50:7f:5f:91:ee:
                    07:57:2d:ad:90:a3:b4:4b:ca:de:87:81:46:76:a4:
                    2e:57:eb:7f:ec:e2:a9:57:38:d1:fd:ae:7c:30:98:
                    be:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:97:E8:64:2E:7E:EC:BE:5A:04:44:7E:B6:D8:A3:DD:C2:A9:43:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb561726-8c36-3ff4-9cbb-ca5fbe5169e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.201.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:72:30:8c:b9:10:e1:91:84:0a:b8:26:af:2b:1a:41:da:61:
         b3:43:0f:72:f1:cb:bd:e5:d4:87:c7:9c:bb:ae:8c:10:7c:45:
         55:b5:3a:ae:04:3f:75:66:39:86:be:ec:87:73:2e:9e:45:b0:
         72:e8:67:46:5b:5b:0c:3d:02:78:15:20:a2:79:b2:b3:9f:b9:
         9b:79:ec:d5:63:3e:99:f9:e5:10:46:a9:f7:65:de:94:de:0e:
         d3:5c:ed:02:9e:91:f9:0a:9d:3b:d6:98:fd:bf:ce:a9:76:0a:
         5f:25:1f:6f:fd:76:d9:58:c0:19:67:ee:bf:35:9b:77:6c:47:
         bf:c4:9c:21:4f:1e:bb:a4:55:11:73:79:50:2c:8c:c2:52:ef:
         6a:5b:a8:aa:f1:09:c0:76:87:e3:5a:27:5a:c6:02:3e:92:93:
         55:7d:6c:8a:c6:fb:59:be:ce:d9:1d:d2:2e:51:94:9c:19:07:
         8c:af:82:e9:13:fc:b1:cc:33:19:22:2e:b2:b3:b7:9d:14:5a:
         3e:e0:7f:14:d2:da:d0:01:c4:43:a0:7d:21:3f:66:f2:32:4c:
         a3:ed:c3:9c:67:31:37:17:39:bd:a0:7c:a0:77:db:04:aa:89:
         71:68:95:d5:c3:84:11:2b:67:c5:8f:1c:e8:b9:5a:db:38:96:
         24:72:34:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:57 2025 by rpki-client