Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/db1d670d-f9e4-35a1-bd40-66bf6166ea15.roa
File:                     db1d670d-f9e4-35a1-bd40-66bf6166ea15.roa (raw, json)
Hash identifier:          34s/lhhdpXywSggHG3bZ922fTO8SvIIQBKWIZYywZOw=
Subject key identifier:   9E:E6:EC:85:6B:ED:E0:D5:44:AD:CF:24:9B:98:48:82:A7:E3:83:28
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F43285848143A7BF98D66B3987646D200
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/db1d670d-f9e4-35a1-bd40-66bf6166ea15.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     13335
IP address blocks:        23.227.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:7b:f9:8d:66:b3:98:76:46:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=67fda7bd-f0f5-42f6-9175-acb0dab14112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:85:2b:b6:af:8c:4c:3b:df:25:1f:41:65:
                    86:25:3a:33:8b:ba:4e:53:7f:92:d4:8d:a4:d4:bd:
                    f0:31:7f:07:7b:f6:da:2f:1b:e9:ac:5e:5e:9d:3f:
                    b0:48:b2:aa:fa:06:d6:74:09:ef:b5:e7:30:98:84:
                    10:73:fb:22:fe:92:7c:f1:eb:b1:bd:a1:23:6d:9e:
                    29:26:7e:26:38:df:21:a2:2b:2f:1b:7e:6d:92:88:
                    c1:22:15:ed:bd:28:cf:dc:3e:6b:0d:40:e3:21:5e:
                    d9:7e:7c:88:82:ff:99:94:4c:4f:50:d3:16:e6:9f:
                    3c:4b:31:1f:ff:36:2f:ea:2f:25:c4:2d:09:a2:25:
                    9c:1c:89:4f:de:6e:86:b1:8f:bd:e1:00:fa:97:d0:
                    c8:c7:95:ae:53:08:2c:68:26:e4:3f:01:6d:62:2c:
                    05:53:a5:0e:1f:4c:40:ba:bd:52:ae:62:a8:08:58:
                    b3:ba:34:2a:2a:0e:d0:44:8f:3b:22:37:df:93:30:
                    7d:5f:b1:3b:13:8f:3e:17:c8:8f:4a:7e:8e:b3:59:
                    6a:cb:2f:46:15:ec:a7:93:4b:b1:62:93:e8:eb:67:
                    cb:03:46:b0:a5:5b:17:ec:f4:bc:ec:7d:fa:e2:6f:
                    b0:a3:3c:6f:f0:bd:5a:33:a1:14:85:b4:c7:c5:2c:
                    fe:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E6:EC:85:6B:ED:E0:D5:44:AD:CF:24:9B:98:48:82:A7:E3:83:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/db1d670d-f9e4-35a1-bd40-66bf6166ea15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f6:ef:46:69:fc:6a:46:dd:0d:c8:8f:aa:af:f9:61:a4:8a:
         0d:69:a3:a7:04:9a:e2:5a:c5:3d:bb:da:2e:1a:d9:1e:5d:51:
         0f:d1:9c:5f:d7:88:eb:7d:e1:2f:26:78:f2:62:7b:22:5a:7b:
         c2:cb:45:5f:fa:c3:0a:00:e9:01:be:c7:04:57:05:97:40:d4:
         cb:f1:a4:e6:5c:c9:d6:d3:d1:52:b1:cd:36:34:c0:a8:4f:fa:
         eb:66:bc:3b:c7:9e:8e:0d:79:3c:30:be:e7:0b:2e:ce:53:dd:
         59:1c:96:6e:98:51:df:b3:57:05:93:8c:0f:f7:f1:b2:55:a5:
         b3:a0:3e:75:85:71:52:69:a2:1d:22:ea:fc:17:fa:79:84:59:
         53:11:ee:a9:66:e5:35:c5:77:30:39:97:e5:ca:0b:6b:a6:db:
         2a:e5:1e:31:06:86:1b:23:6f:6d:bc:7d:c3:12:99:99:97:e2:
         17:32:94:40:09:75:06:a9:12:56:f8:61:7e:63:3a:77:2f:ad:
         36:53:c1:8c:5b:e0:1a:91:8f:bf:ef:db:f8:ac:16:e8:b5:af:
         bb:f9:b2:05:f1:bb:fa:0c:fb:61:a4:4c:e0:ad:19:0f:b9:4a:
         3b:60:4f:94:5e:d3:d3:6c:f7:8c:72:6e:aa:ce:ab:96:7a:19:
         6c:5a:4a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:38 2025 by rpki-client