Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5d7b0921-4787-3c44-afb4-168140ca0aa3.roa
File:                     5d7b0921-4787-3c44-afb4-168140ca0aa3.roa (raw, json)
Hash identifier:          AaKuVAgpfWyC+fpruZW+P2ByRg0Ecv3D9gNDDWgtToc=
Subject key identifier:   59:C4:F2:B2:7F:F9:25:8F:48:E7:02:EF:D4:74:33:4D:A8:CC:50:9F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858496E4989A50C62F8A8EA14BA00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5d7b0921-4787-3c44-afb4-168140ca0aa3.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     152700
IP address blocks:        184.174.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:89:a5:0c:62:f8:a8:ea:14:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=3753f617-10ab-4d28-92ea-d429375dd3ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:82:ff:1f:bc:7f:cc:e3:2b:d3:fa:f8:4e:6d:
                    09:7a:9d:cc:d9:d1:86:dd:52:fe:de:0b:da:d3:db:
                    60:8c:84:6b:7d:7e:bb:08:23:0e:2b:e1:e1:e0:11:
                    00:93:82:a8:e1:63:16:0e:e6:81:1a:67:59:fd:d8:
                    ab:da:a2:69:13:a6:5c:8d:8f:63:b3:70:9e:72:e0:
                    20:d6:87:44:9e:67:86:9d:41:ac:19:36:63:e4:0a:
                    f8:05:c9:27:b3:d7:84:11:4c:a0:02:a0:15:65:d8:
                    c4:dc:5a:67:22:57:2f:05:ac:52:27:2f:20:0e:93:
                    b6:8e:ca:f1:6f:a4:7a:2c:83:b2:93:ea:a8:41:47:
                    3c:9a:ce:1e:99:25:62:82:85:11:ad:8a:83:34:b3:
                    ce:da:d3:c7:4e:7b:39:43:4a:bc:e2:25:2c:24:58:
                    98:48:eb:fb:95:73:64:a3:e3:b6:31:49:3b:10:17:
                    88:58:74:c7:b5:07:e8:65:b9:83:4d:14:98:29:fa:
                    09:05:6b:f1:c0:46:ec:37:29:ad:ba:2b:6f:7e:2a:
                    9e:54:e1:ae:5f:41:2e:cb:b1:24:04:dd:13:11:31:
                    af:7e:d0:0d:42:69:2a:00:8b:94:83:2a:f5:c5:df:
                    23:23:43:6c:4d:58:23:2c:fa:0c:37:10:11:80:d7:
                    04:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C4:F2:B2:7F:F9:25:8F:48:E7:02:EF:D4:74:33:4D:A8:CC:50:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5d7b0921-4787-3c44-afb4-168140ca0aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:b8:e7:ab:8a:a0:5b:2a:c7:ca:2e:f2:b4:7f:7b:75:4a:03:
         9d:54:b8:a2:9d:23:86:42:76:68:2b:5a:6f:ef:54:9c:10:4f:
         1e:21:05:f1:37:69:9f:99:6b:5f:5d:89:6c:db:ed:c9:84:15:
         58:87:0d:f7:a3:72:83:8d:2f:1f:09:9d:14:52:52:d3:5c:ae:
         56:51:39:e5:50:7a:e5:e4:08:04:2f:37:c3:e1:7c:e9:f8:e1:
         07:d7:07:1b:1f:60:56:0a:af:da:80:c6:2a:4e:8f:5b:9c:3b:
         5e:a0:32:e5:5c:b2:90:16:1d:bc:fa:32:c6:8c:81:83:c3:d3:
         42:26:28:33:c1:85:16:96:e4:62:02:a9:e9:18:3b:9c:07:89:
         4d:a6:c7:48:1c:bd:2e:71:77:e3:05:6d:bc:50:92:c1:ec:c7:
         6a:37:9f:f4:08:0c:51:a1:65:8c:79:16:aa:de:b6:3c:da:6d:
         1f:e3:d7:31:f4:90:fe:cb:5d:a7:4f:d7:4c:c3:53:86:45:ab:
         59:6e:ff:5d:63:48:07:10:54:69:e3:3b:01:01:78:1d:cd:21:
         e8:ee:2b:b7:90:68:87:b9:00:0f:76:e5:46:39:72:b1:39:8c:
         07:9b:ea:80:8c:23:24:fe:b0:7a:d0:5a:95:b8:8e:c4:2e:09:
         05:7f:fb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:05:15 2025 by rpki-client