Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/788635a9-958d-300b-b4db-634384ccc5ac.roa
File:                     788635a9-958d-300b-b4db-634384ccc5ac.roa (raw, json)
Hash identifier:          ho+kcPQ0QAWkfRrgTZxgCNzuVZWh5HVZg4c42GYzN6Q=
Subject key identifier:   C4:1B:DE:1C:55:B4:49:E9:76:20:A4:91:54:F2:DB:17:0A:D0:3A:1E
Certificate issuer:       /CN=81b6f65d-ba30-4275-b918-46ded7381174
Certificate serial:       010D0C9F432858498E64852473B14B328CC24D80
Authority key identifier: 08:25:94:36:E3:AD:01:5C:66:7F:0F:12:11:5A:17:49:47:B3:41:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/788635a9-958d-300b-b4db-634384ccc5ac.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     399214
IP address blocks:        23.162.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:85:24:73:b1:4b:32:8c:c2:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81b6f65d-ba30-4275-b918-46ded7381174
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=3e8ebc74-ad85-4c16-8b16-66bbe4546529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:05:51:2f:34:a7:ca:cf:0c:3a:79:ab:b8:b5:
                    7d:d9:58:f5:29:5b:32:f9:63:c5:23:2d:62:88:0b:
                    b6:79:a0:b1:ea:32:f3:f2:89:bd:68:76:77:be:47:
                    c7:b5:5f:ba:e1:5f:32:4b:25:15:b4:cf:65:90:62:
                    49:02:e7:da:f8:56:21:79:85:71:11:a3:aa:e0:b1:
                    03:7c:c9:5a:78:5e:c4:57:50:e8:b5:dc:c6:9e:26:
                    15:fe:62:d9:fc:a2:96:c9:f2:ac:39:bd:23:fa:43:
                    35:9c:e6:a3:c6:a0:24:e0:66:6c:e1:9a:ee:d4:0b:
                    8a:80:af:cd:0c:6c:72:39:8d:f5:cf:82:fe:8a:70:
                    cf:87:5f:3e:cc:24:e0:05:cd:96:4b:5f:85:c3:64:
                    8d:74:16:88:0b:23:ba:f0:a4:8b:7d:56:93:87:01:
                    ed:12:46:fc:94:f1:c6:7e:e7:c8:f8:0e:c9:49:f5:
                    ee:b2:eb:7e:f1:41:6d:57:c5:be:41:80:2e:c9:a6:
                    15:e6:72:5a:55:74:89:60:9b:84:bf:73:31:4e:72:
                    f3:a1:c1:94:d9:33:f6:ac:6b:8b:28:b5:d4:81:c1:
                    57:37:8d:48:50:15:d5:a1:68:8c:77:26:c6:7e:d1:
                    80:cd:b0:a5:5c:df:27:a3:07:0d:2c:59:00:dc:68:
                    68:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1B:DE:1C:55:B4:49:E9:76:20:A4:91:54:F2:DB:17:0A:D0:3A:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/788635a9-958d-300b-b4db-634384ccc5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.crl

            X509v3 Authority Key Identifier:
                keyid:08:25:94:36:E3:AD:01:5C:66:7F:0F:12:11:5A:17:49:47:B3:41:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:0f:d4:28:35:07:39:0a:4c:3d:a9:8f:1a:6b:a9:41:f8:20:
         97:5c:b9:9e:cd:ae:a0:5b:be:b4:3e:7d:d0:e9:cc:37:68:fe:
         aa:b1:21:0c:14:4b:f5:b3:1b:34:3d:f0:a4:5f:a9:8a:56:80:
         ea:77:b3:08:ea:dc:75:d6:2e:de:ef:58:e2:44:02:44:cb:c7:
         de:b1:2c:35:d6:6d:30:e7:3b:df:08:f3:df:8f:dd:2e:f2:82:
         ba:d7:a1:7a:b1:06:52:b1:1f:b6:a2:54:bd:62:64:e4:d3:9c:
         5e:df:52:26:ef:fe:eb:3b:85:b4:04:39:f7:78:d7:10:bc:8b:
         32:ce:e9:32:14:c1:36:30:87:fb:89:bb:32:58:4f:0a:69:9a:
         1d:b5:8b:a5:ac:c2:74:e8:18:ed:45:25:db:0c:58:09:07:85:
         8e:d4:d8:9f:b5:a9:0e:51:2a:16:86:ec:97:06:46:12:f9:ab:
         f3:a5:3c:2a:09:b0:f0:6b:ca:c5:0e:ef:06:69:4c:99:35:82:
         9a:eb:13:95:97:54:7f:6c:a3:58:dd:5a:72:ce:e9:f4:b3:3f:
         46:4c:ca:ae:59:0a:42:1c:be:0d:7a:ba:5b:f6:7a:7a:f2:51:
         e9:fd:bf:47:69:06:f5:98:67:e1:18:87:b4:9b:06:5c:c3:60:
         5f:a0:41:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:52:44 2025 by rpki-client