Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5db9e575-272d-3e10-953b-26aad7a2b5b8.roa
File:                     5db9e575-272d-3e10-953b-26aad7a2b5b8.roa (raw, json)
Hash identifier:          QeKsMlC4MXZ7jERLd5SaEjCknBEDTK15BzHAMYliMaE=
Subject key identifier:   6B:D6:56:DB:77:36:0A:9E:E7:9F:FB:E6:DC:93:B4:1F:A2:5F:53:A6
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584953C4485D223815B5652F2F00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5db9e575-272d-3e10-953b-26aad7a2b5b8.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     17639
IP address blocks:        8.45.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:48:5d:22:38:15:b5:65:2f:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=d691cdd4-47c8-40d1-bb5c-15c7e52508ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2c:4e:8e:55:e3:c5:50:12:2e:51:c7:87:88:
                    90:82:76:60:10:bf:76:e0:8e:d9:17:91:7c:bc:32:
                    12:91:b7:fa:5e:a8:3b:a3:13:9d:bb:5a:18:40:e3:
                    39:55:52:15:db:27:c6:10:07:77:0c:88:f8:c4:71:
                    65:8c:dc:5a:b9:05:5a:41:c9:b4:86:26:14:95:fa:
                    81:9a:e9:11:75:ed:1a:a7:6c:99:e5:02:98:b8:8e:
                    e1:6e:a9:d7:3e:ac:c2:b1:c4:0b:6b:5e:5b:83:0e:
                    7d:43:c3:ed:b6:26:05:ea:f3:95:03:4a:96:80:b3:
                    67:65:d7:07:52:22:27:d3:dd:ea:85:a1:a5:28:f2:
                    77:71:aa:8f:2d:19:1b:d2:2b:ff:cd:7e:b7:d0:ac:
                    a7:dd:b8:c4:35:93:37:bd:ed:09:24:27:c7:19:d0:
                    2e:ba:fc:5a:96:61:90:9c:ff:74:22:74:01:80:53:
                    ae:87:3f:03:2b:7a:7e:dc:29:d5:cb:3a:3d:cb:b8:
                    24:2a:86:eb:dd:6d:c5:b0:a7:f2:26:0e:c6:3b:2c:
                    c6:af:6f:b1:aa:3a:ac:19:f4:b1:66:8c:a4:d9:f0:
                    32:d8:70:3f:54:3e:92:2a:e6:56:d4:45:73:3e:b5:
                    e4:92:dd:2c:74:96:c9:55:47:8a:21:bc:97:35:96:
                    ae:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D6:56:DB:77:36:0A:9E:E7:9F:FB:E6:DC:93:B4:1F:A2:5F:53:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5db9e575-272d-3e10-953b-26aad7a2b5b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.45.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:9f:6e:65:57:fe:05:1a:45:9b:3a:24:b0:e1:ef:54:50:7d:
         f9:05:6f:f3:c6:82:3f:6f:57:c5:01:74:67:b9:01:fb:9a:e3:
         25:93:a1:ed:9d:7c:0a:ed:a8:9d:e6:a1:ff:de:39:f4:ad:da:
         f9:82:9c:e0:b0:28:aa:ed:16:66:80:55:61:4a:ba:7b:6d:d9:
         0f:d8:c1:7a:3b:d2:35:1f:5b:b4:9b:59:12:5c:d3:b1:1d:25:
         3d:26:c4:b8:82:30:4f:bc:a6:5e:6e:f1:25:60:92:5e:7a:66:
         2c:32:75:65:3c:62:ee:a3:cb:29:f2:54:2a:59:86:d4:40:c7:
         d2:54:4d:a5:c8:4b:e4:55:81:5d:ad:01:72:a5:f5:b9:3b:5f:
         fb:bd:8b:37:be:e3:a3:1a:67:1a:04:9f:7e:b4:cc:5f:86:0c:
         47:ad:6f:c7:d7:23:b8:6f:ff:05:91:dc:f1:b9:a5:f5:71:e4:
         47:93:bd:44:b3:3c:72:e5:d5:ca:23:94:5c:52:1a:e8:42:5f:
         58:5d:ed:b9:bc:1a:bf:c6:a7:94:3b:b9:20:00:d3:ff:56:5c:
         12:a7:9a:5b:d6:b7:a1:1a:e9:d3:b4:8f:f0:94:23:26:da:7c:
         ce:36:e8:f7:3e:fe:15:65:c9:49:d9:82:36:bc:58:38:e7:de:
         4b:43:59:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:19:09 2025 by rpki-client