Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/b8d23e08-eb0d-3e57-9ffc-aa63eadf01d5.roa
File:                     b8d23e08-eb0d-3e57-9ffc-aa63eadf01d5.roa (raw, json)
Hash identifier:          eryxkkADND2IXys51GTlLeDvZRFJjWhfqAZ8tVAniRk=
Subject key identifier:   EE:E9:E0:51:0A:0D:6E:83:3E:5C:EC:1A:66:0A:05:B0:87:FF:CA:E3
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285848C581745AF2D00976AD8C57C0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/b8d23e08-eb0d-3e57-9ffc-aa63eadf01d5.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        172.102.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:74:5a:f2:d0:09:76:ad:8c:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=357a7373-6af3-405e-82de-db608dd95809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:5e:3f:13:49:89:bb:19:f6:98:f5:c7:f3:
                    4d:95:6b:ee:8c:6b:fb:a7:30:65:ae:33:74:e9:45:
                    2f:db:35:53:a8:a0:e6:7c:20:ec:4b:db:70:8c:16:
                    c7:02:97:57:59:da:58:a9:04:c6:da:6d:4d:33:8e:
                    ac:0a:13:8b:75:ee:c5:56:a4:47:d6:49:50:df:47:
                    8f:d2:94:32:aa:80:51:db:89:90:e2:51:6d:40:5d:
                    08:e5:cd:f7:a0:d5:17:65:00:85:9a:5e:43:1c:ca:
                    fb:7e:d2:73:c4:1b:2e:f1:72:8c:0d:8d:c0:78:ad:
                    ed:a6:b9:95:d0:e9:f9:3b:e8:d9:67:9a:1b:fd:27:
                    10:30:71:c0:ea:9d:0f:54:f1:74:e4:0e:63:dd:88:
                    db:12:59:e1:43:32:1e:90:7f:f2:26:18:46:e2:ba:
                    3b:83:67:03:c9:f1:04:f6:24:9a:17:01:1b:d2:9e:
                    57:be:99:78:d6:4d:1f:f9:a0:36:1e:38:15:28:e2:
                    0f:2b:18:08:e7:b2:62:b8:dd:86:ce:08:ae:37:87:
                    d5:8a:3f:73:04:8b:69:d3:e5:73:57:75:19:1f:24:
                    ba:97:6f:52:2b:ba:39:17:5c:80:a4:f2:dd:bb:f1:
                    b0:dd:1a:9f:26:ea:2c:50:fc:a0:17:89:63:74:3c:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E9:E0:51:0A:0D:6E:83:3E:5C:EC:1A:66:0A:05:B0:87:FF:CA:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/b8d23e08-eb0d-3e57-9ffc-aa63eadf01d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:67:3f:e0:f4:1c:74:c0:d1:10:96:8c:29:87:07:73:b9:db:
         be:89:8d:fc:b9:a6:0f:0a:5e:40:35:56:2d:b6:01:51:90:67:
         27:02:fc:c0:e0:45:08:ec:b5:7c:0d:a9:0d:78:83:bf:a4:f2:
         16:c3:e1:4b:3f:72:1d:ae:b2:90:8e:34:4a:4c:29:1b:b4:f8:
         29:b0:7f:b3:44:53:09:c0:af:90:cc:60:97:52:28:ca:36:fe:
         88:bd:da:e4:4d:e0:a3:83:c6:c9:82:7e:d0:d5:7f:36:70:04:
         c6:36:be:f6:28:b9:0d:43:a3:3a:25:bd:75:d5:c3:07:de:c9:
         0d:06:7f:e9:8a:eb:1b:d8:70:d4:fb:9e:73:aa:ff:1d:87:2c:
         b0:78:db:6a:0a:9c:e2:12:76:b6:a0:81:ad:4e:4f:2e:6f:3a:
         ca:0a:1e:a2:6b:9e:52:0e:37:58:07:4c:d9:49:33:07:9b:9b:
         14:e7:23:f7:ed:2f:95:e6:70:60:cd:b0:a9:08:9c:a2:cf:f0:
         f0:9f:d4:0f:99:93:9a:c4:9f:86:9a:df:08:4c:05:fe:61:56:
         f9:44:10:3f:c4:9b:86:d7:89:1b:c1:ce:da:f3:96:cf:82:76:
         21:d9:90:73:41:e2:71:00:c5:7d:cc:29:ba:f8:67:75:a0:6e:
         5c:89:5c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:23 2025 by rpki-client