Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/09a572b8-7960-3b89-a1a8-7f9e35951515.roa
File:                     09a572b8-7960-3b89-a1a8-7f9e35951515.roa (raw, json)
Hash identifier:          zCQmyzn3NJhp3BPPAbGW9hd/jbHV97DN+UbAaAR7lW8=
Subject key identifier:   9F:6A:D1:90:6A:E3:B0:CE:C2:5D:1A:03:D0:C3:B6:8B:68:39:66:4F
Certificate issuer:       /CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
Certificate serial:       010D0C9F43285849C904E6705A6AC1EA51527900
Authority key identifier: 26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/09a572b8-7960-3b89-a1a8-7f9e35951515.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     11831
IP address blocks:        23.111.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e6:70:5a:6a:c1:ea:51:52:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=233a53eb-c8d3-4db9-9779-6c64855b860c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2b:f6:2e:11:66:02:41:15:a6:01:cc:39:ef:
                    40:09:ab:e9:3a:ca:89:2d:36:1a:df:2e:3c:e7:7b:
                    b3:b4:18:24:4b:55:e4:94:47:41:d1:5a:7a:85:41:
                    17:a1:cd:96:81:93:95:38:87:ba:8c:d6:b1:fa:65:
                    37:e3:12:08:4f:97:c5:ab:0b:46:3b:b1:15:c4:f6:
                    b0:87:9f:dc:8a:0e:5c:4e:8f:5e:75:76:4f:4c:c3:
                    48:49:28:3f:2c:79:42:f7:39:6f:a6:5b:0d:c3:57:
                    bc:20:1e:87:3f:73:34:db:24:ba:fd:0a:8c:4b:fe:
                    97:10:74:ca:72:cb:09:19:03:a8:c5:89:6b:70:9b:
                    7c:62:da:a4:15:f5:be:48:32:31:2c:58:2c:ad:92:
                    23:59:97:ff:09:77:e1:97:41:73:f7:8e:eb:90:a1:
                    61:58:8c:3a:2f:49:0e:e4:20:f8:d7:02:51:05:23:
                    f1:dc:40:a2:2e:bb:f9:5b:07:00:41:c0:1c:b5:3c:
                    4a:5b:6e:04:51:23:c2:2d:bc:6e:86:26:a2:bc:2a:
                    db:43:15:c5:91:91:2f:40:2b:58:2c:bd:cc:5c:d6:
                    7d:43:a5:22:21:bc:16:b6:5a:15:d3:4a:79:4b:f3:
                    c2:4f:5d:d4:01:3a:f3:25:08:82:25:9a:97:79:9e:
                    b1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6A:D1:90:6A:E3:B0:CE:C2:5D:1A:03:D0:C3:B6:8B:68:39:66:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/09a572b8-7960-3b89-a1a8-7f9e35951515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl

            X509v3 Authority Key Identifier:
                keyid:26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.111.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:34:3a:96:e4:f3:38:e1:6c:75:c5:b9:27:3d:20:c0:5e:88:
         e6:c7:05:28:f1:c7:3f:c9:7c:78:e2:92:38:dd:a1:a6:4a:73:
         49:bb:e4:2c:47:26:c6:af:d5:18:98:f2:c8:21:d4:1b:86:42:
         cc:5c:8e:ba:54:61:e1:8c:c3:ba:83:16:05:1f:e4:1e:9c:6a:
         3e:18:5c:d9:5d:7d:7c:00:84:c7:4a:8d:93:89:08:de:14:12:
         7c:a7:aa:c6:43:be:e3:17:1d:d7:f2:7c:da:60:ca:d9:e6:0b:
         90:36:3c:d2:13:e7:38:c0:a9:5f:81:23:67:7d:24:5a:e4:36:
         64:67:27:ea:67:5d:3e:b1:43:d2:2e:6c:d8:da:86:a9:c2:c1:
         21:cc:ad:d9:65:20:e3:d5:60:19:72:4c:4a:3f:7f:c3:42:03:
         5f:5d:5f:a5:27:18:2d:f2:87:19:9e:24:b5:d7:d2:01:f5:df:
         6a:47:76:d4:73:73:0c:2b:b0:68:6b:50:cd:ce:51:1f:09:ba:
         bb:74:62:82:33:77:3a:37:9e:fc:89:9c:6b:7f:37:e6:41:3d:
         74:ae:d1:22:e7:74:31:71:eb:0f:f9:78:1d:f0:38:77:72:a6:
         19:8a:af:cd:86:30:cb:df:97:93:a9:11:21:43:30:46:a0:e5:
         64:61:8e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:39:11 2025 by rpki-client