Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/fab2f261-0378-348c-b086-262b8fe1aeba.roa
File:                     fab2f261-0378-348c-b086-262b8fe1aeba.roa (raw, json)
Hash identifier:          Ik0H6F1JyMAHE/1gUmvGxw+PsRS3FX4HvJEwv+5e0SA=
Subject key identifier:   0D:2C:34:E2:E5:3F:EF:01:9F:2E:31:14:5E:0D:86:9F:B1:DA:6C:0B
Certificate issuer:       /CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
Certificate serial:       010D0C9F43285848E86663ABED0BE5CCA68A5E40
Authority key identifier: 8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/fab2f261-0378-348c-b086-262b8fe1aeba.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     133073
IP address blocks:        23.155.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:63:ab:ed:0b:e5:cc:a6:8a:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=1f385b0e-94c8-47d1-8a66-33899b43a104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a3:f6:ee:cb:0c:59:d7:16:8d:b8:e0:c6:6a:
                    9f:9e:e2:05:36:75:6c:23:f4:bb:67:ce:0d:b8:c5:
                    0b:be:e7:da:2c:7d:ce:5f:47:00:26:44:71:c7:16:
                    22:e8:e4:16:3a:ab:6a:89:d2:af:3c:40:2d:a0:25:
                    02:61:dd:2b:1c:5c:9e:1f:28:e9:4d:46:61:8d:96:
                    17:0d:34:d6:3a:25:5d:20:73:41:55:46:06:17:92:
                    12:fc:e7:d3:fc:4b:0f:16:a0:97:da:77:a4:98:75:
                    8f:55:33:ba:41:91:07:85:ed:a6:e3:ef:01:27:5f:
                    fd:f5:07:d0:7d:88:9b:df:30:f0:1f:9c:5c:a6:4a:
                    e6:03:fa:aa:f0:4a:fb:33:3e:0b:d5:24:60:d9:d8:
                    8e:e7:6a:c4:5e:da:0b:3a:17:ca:86:b0:ce:ee:85:
                    fc:d6:21:37:4d:33:e6:ca:22:a0:6c:61:01:45:d1:
                    f1:30:6c:6d:2e:6e:d5:e7:2a:3d:ce:34:f2:d6:b7:
                    e4:4d:0e:6d:8a:82:98:d2:5d:81:81:8f:10:dc:f9:
                    76:1a:8d:54:95:e4:82:ce:fd:5c:ff:17:6e:19:a4:
                    a4:37:16:8d:31:51:3f:11:44:c3:3e:58:76:89:f1:
                    94:ce:a8:5d:80:31:fd:9c:c7:e0:f9:74:19:b8:bb:
                    c2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2C:34:E2:E5:3F:EF:01:9F:2E:31:14:5E:0D:86:9F:B1:DA:6C:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/fab2f261-0378-348c-b086-262b8fe1aeba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.crl

            X509v3 Authority Key Identifier:
                keyid:8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e7:b1:f9:fa:37:e8:6b:4a:6d:f3:fd:9f:37:d9:4b:8a:cf:99:
         67:20:6b:27:40:3c:28:b9:af:38:79:39:12:f7:28:5a:0c:70:
         a9:db:80:11:d7:ce:77:57:16:bd:1c:66:1c:81:13:ca:98:a9:
         47:37:c0:c6:5d:e3:79:47:67:df:e0:f1:79:a6:f9:b6:1b:e6:
         69:fa:c3:47:2d:2a:48:eb:31:0f:c6:33:87:3b:1c:be:af:b0:
         c0:0f:7c:7f:3c:d3:09:4b:16:d9:a0:96:52:f2:22:f7:ba:da:
         55:f5:37:41:47:fd:05:ac:ae:f8:7f:21:06:d9:90:31:51:ad:
         fb:0a:5a:b5:68:d1:a9:e4:84:fb:00:29:cb:db:91:9e:a1:88:
         22:9c:c1:63:67:73:3c:01:50:f8:b5:96:a8:a5:e7:d6:0a:1f:
         75:2a:a5:09:e0:74:62:7c:58:66:a8:62:f3:d3:7c:c4:79:99:
         b2:be:16:f9:73:dc:58:48:f5:a7:05:67:1e:60:ed:1a:17:d8:
         a3:cd:a3:a7:6d:67:60:9d:eb:46:a3:14:63:83:19:cf:09:41:
         f4:7c:b3:94:ee:4e:d9:26:a6:f0:1a:ee:fa:cf:47:41:d6:de:
         41:ce:c2:12:9b:23:9b:15:f4:3e:b7:1c:91:b4:7c:0d:16:e7:
         0a:0e:52:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:35 2025 by rpki-client