Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/3fb18ef8-e0d1-3fb8-845f-5bfe1b526baf.roa
File:                     3fb18ef8-e0d1-3fb8-845f-5bfe1b526baf.roa (raw, json)
Hash identifier:          QrmqjmcSgBNzwgd9I5bBksd7yZbKfEiuJaI6SnuVBsI=
Subject key identifier:   03:2A:C5:A0:59:C6:0E:99:C2:4E:83:5F:EC:05:05:B1:4C:CE:48:E2
Certificate issuer:       /CN=81b6f65d-ba30-4275-b918-46ded7381174
Certificate serial:       010D0C9F43285849849EF7ADADAAAEEE84669C00
Authority key identifier: 08:25:94:36:E3:AD:01:5C:66:7F:0F:12:11:5A:17:49:47:B3:41:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/3fb18ef8-e0d1-3fb8-845f-5bfe1b526baf.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     399214
IP address blocks:        23.162.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:f7:ad:ad:aa:ae:ee:84:66:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81b6f65d-ba30-4275-b918-46ded7381174
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=ae71edc7-6f95-4ee1-a049-98958adb463d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ea:15:ae:5d:22:42:93:70:ae:c8:1d:e5:5b:
                    83:00:39:a3:e5:7c:1c:04:65:f9:c0:77:43:e0:11:
                    4d:60:72:3b:84:ec:d0:d1:85:04:e1:92:ed:a4:56:
                    6c:04:c4:73:34:43:5a:f6:86:bc:b1:34:04:9e:94:
                    6b:a1:03:7e:6b:2b:8d:0a:cf:f6:88:13:55:cd:fb:
                    22:2c:c0:72:af:ac:79:8f:e1:c5:5d:bf:ad:28:b7:
                    f0:08:44:76:88:74:0f:90:81:43:64:78:1e:db:24:
                    ea:0b:f9:de:24:99:6c:7c:42:2e:0d:3c:2c:60:ee:
                    cf:2d:b6:f1:ea:08:0c:c4:15:49:8d:6e:41:b0:11:
                    39:1d:a2:85:5c:55:f3:83:07:e2:a4:5c:f3:ce:92:
                    d9:51:1a:5e:3a:3e:19:75:f8:07:b7:22:9f:4b:96:
                    a4:4b:72:fc:2f:cc:05:e8:e6:e0:51:f6:07:e0:5e:
                    e7:c5:cc:c7:b4:8d:b0:14:4b:08:e8:52:8a:b1:42:
                    06:ac:60:4a:f9:6b:46:fe:b3:a4:1e:bc:8f:1a:61:
                    f3:0b:13:b3:c5:7d:1d:6b:41:3f:22:71:20:d8:71:
                    65:44:8c:de:d4:0b:fc:4b:9f:9b:70:67:0e:18:dc:
                    9c:74:e2:68:29:be:02:1f:05:60:71:24:8f:11:91:
                    78:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2A:C5:A0:59:C6:0E:99:C2:4E:83:5F:EC:05:05:B1:4C:CE:48:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/3fb18ef8-e0d1-3fb8-845f-5bfe1b526baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.crl

            X509v3 Authority Key Identifier:
                keyid:08:25:94:36:E3:AD:01:5C:66:7F:0F:12:11:5A:17:49:47:B3:41:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e6:23:95:47:26:a1:fc:14:43:b6:dd:6f:13:4a:4d:02:3c:
         fe:d8:c4:1c:7a:ae:a9:c6:b6:9a:41:ba:a0:18:7f:ee:34:0e:
         00:37:57:9e:79:fc:09:42:2b:8d:a4:31:25:cd:7a:1e:8f:cb:
         d1:45:ef:bf:ec:51:72:66:7c:e5:21:3f:a9:53:f1:4e:b2:97:
         4b:4d:e3:af:13:b2:ed:ca:60:94:60:7e:d7:6d:21:97:3e:0c:
         90:64:71:88:7c:96:21:a1:08:04:b6:4b:29:7a:ac:80:84:e6:
         bc:cb:ab:4d:c9:cc:b5:89:70:d2:b7:24:26:16:d9:ed:b0:dd:
         44:eb:08:eb:c5:0e:fb:af:88:7d:32:e6:91:62:21:c4:36:08:
         b1:cc:56:a5:4c:d6:78:8c:3a:3d:14:f5:7f:df:78:cf:2a:ec:
         a4:14:10:09:29:dd:13:82:32:15:4b:0f:5d:cd:f4:37:93:fe:
         db:0c:23:14:38:72:2b:c4:54:cb:21:c7:c6:de:78:0d:1c:5a:
         64:7d:1e:cc:96:3a:10:f6:c6:be:df:ab:b8:6e:e6:7e:43:0f:
         c0:fe:a7:f0:26:90:5d:b5:e0:c5:e7:7d:6c:0f:a3:73:e7:1a:
         79:ae:4b:85:3d:a8:ee:83:91:00:9d:2a:2c:a6:94:4b:4d:4d:
         ee:5b:3d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:44:44 2025 by rpki-client