Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/c9e260a3-4f16-354d-b555-1ee5c6db8fec.roa
File:                     c9e260a3-4f16-354d-b555-1ee5c6db8fec.roa (raw, json)
Hash identifier:          eIspSe0mJfTGXBgdKoJmLajUYkC2jIVtcRlh3A8yKWo=
Subject key identifier:   BC:16:95:A8:04:5A:B1:33:0F:B2:8A:DC:25:26:76:84:A9:CE:A6:15
Certificate issuer:       /CN=344c647c-2bcf-4b84-a292-fe7e96b86354
Certificate serial:       010D0C9F43285848BA56406D73ADE1E60CE50BC0
Authority key identifier: B6:11:09:F6:41:4B:57:A8:D7:2F:88:E1:72:4E:FE:DC:8A:AA:6B:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/c9e260a3-4f16-354d-b555-1ee5c6db8fec.roa
Signing time:             Fri 31 Jan 2025 14:00:51 +0000
ROA not before:           Fri 31 Jan 2025 14:00:51 +0000
ROA not after:            Thu 01 May 2025 13:00:51 +0000
asID:                     23470
IP address blocks:        23.187.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:56:40:6d:73:ad:e1:e6:0c:e5:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344c647c-2bcf-4b84-a292-fe7e96b86354
        Validity
            Not Before: Jan 31 14:00:51 2025 GMT
            Not After : May  1 13:00:51 2025 GMT
        Subject: CN=941e7ad5-1cd8-4861-8684-71c5cfa45e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:83:63:21:db:8b:19:07:85:17:37:a6:3d:
                    2f:6e:78:ef:3d:75:0f:74:b5:59:8b:f5:f4:12:c1:
                    75:e9:cf:01:50:35:a2:ce:9a:33:72:90:8e:0e:b3:
                    9c:ef:ed:c7:14:82:1f:06:e0:b4:77:08:e7:c8:e6:
                    a2:a4:fe:ad:e9:6f:d7:21:c8:54:e4:d7:a3:62:1d:
                    85:db:4b:fb:84:1e:c5:09:7d:7b:c4:4d:71:c6:63:
                    ca:9a:9f:bf:5e:86:8e:cd:20:73:78:e4:12:7a:26:
                    2c:f5:2b:80:02:68:94:fe:5f:4e:f4:1a:77:9b:00:
                    d0:ce:be:dd:f8:2e:af:24:81:62:de:39:81:8e:cf:
                    b4:8f:e2:2d:0b:4b:a9:b2:b0:f8:7c:7b:6a:33:d9:
                    cc:d7:df:33:bb:18:5d:8e:b9:2c:4e:45:0a:b7:b1:
                    2a:db:ef:2e:f6:54:f9:d3:ee:ee:fd:c8:a6:b9:6f:
                    0d:9b:8b:5e:87:6f:65:d7:7b:ab:63:3f:42:e4:9b:
                    ea:5f:a7:05:3f:0d:15:b6:15:2c:66:64:72:21:83:
                    4a:f7:59:87:f6:ed:02:e9:1e:35:0c:48:ee:ba:44:
                    91:c0:15:33:2c:46:c6:ce:d7:ef:71:57:5c:f3:c3:
                    12:a1:3e:22:8a:4d:f5:e0:48:47:35:bf:73:6e:21:
                    8a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:16:95:A8:04:5A:B1:33:0F:B2:8A:DC:25:26:76:84:A9:CE:A6:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/c9e260a3-4f16-354d-b555-1ee5c6db8fec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.crl

            X509v3 Authority Key Identifier:
                keyid:B6:11:09:F6:41:4B:57:A8:D7:2F:88:E1:72:4E:FE:DC:8A:AA:6B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:67:ff:64:32:0a:a7:0f:ac:4c:71:51:81:ac:bd:a7:3f:de:
         3b:a9:6a:37:bb:b0:09:04:64:98:59:b5:19:92:93:cf:18:76:
         17:a4:38:74:ae:9f:df:82:98:81:56:32:cb:cc:09:9d:9b:88:
         6d:1f:99:f3:01:4a:fc:c3:e3:88:c2:3a:a6:57:b1:77:b3:a7:
         9d:58:a7:86:06:92:b6:5e:be:cd:93:bb:fa:d6:e9:45:74:37:
         d8:d1:49:43:41:db:72:11:a2:6e:e6:82:e1:09:96:1a:e1:72:
         70:6c:74:e9:5b:1c:e4:12:90:f4:37:fa:67:a2:c7:8d:14:f6:
         ed:6b:33:c8:4e:2e:e1:1f:da:01:5d:af:36:68:26:96:04:71:
         e3:3a:7e:ec:7a:78:ac:46:ba:19:e4:b8:70:da:ae:cb:04:53:
         b0:cf:07:ed:12:c0:30:4f:76:21:0a:65:45:d0:09:6d:cd:d5:
         5e:b1:f6:4f:36:ca:ed:32:fa:77:2b:ff:d4:cc:a9:4e:5f:d3:
         bb:5e:3c:6c:6a:41:97:13:59:4a:3b:1b:b4:e5:95:21:63:18:
         2e:4e:a0:b2:02:f9:cf:f3:cb:47:4e:c8:12:25:7f:e5:ca:41:
         20:5c:38:65:33:ec:1f:6e:01:b6:ad:46:dd:11:c8:83:b8:19:
         e6:c1:ae:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:27:57 2025 by rpki-client