Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/724eaedf-d166-39d4-84e6-c3434f2a41dd.roa
File:                     724eaedf-d166-39d4-84e6-c3434f2a41dd.roa (raw, json)
Hash identifier:          PG9Sy6v4SHdMjva/n15ayWBlKAZww6eKla5Bv2R2wds=
Subject key identifier:   2C:9A:EA:29:44:2A:61:13:2F:FA:8B:BC:6C:59:C5:45:9F:8A:F0:E3
Certificate issuer:       /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
Certificate serial:       010D0C9F43285848F22C63749AAC2D3B78FB1E80
Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/724eaedf-d166-39d4-84e6-c3434f2a41dd.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        23.29.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:63:74:9a:ac:2d:3b:78:fb:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=98c922f7-09e6-4df2-8020-94ed232bfd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:97:73:2f:bf:41:e8:28:ac:b9:bf:5e:8c:d8:
                    a4:25:da:e1:68:ba:c5:f3:91:c0:65:e9:51:d4:1d:
                    6e:6d:8f:3f:4f:df:b9:c2:b3:5d:bc:44:29:1a:bf:
                    bb:2a:6a:42:1c:cf:75:f5:0a:de:3f:23:c7:7a:79:
                    e3:c0:f0:8c:e3:70:98:11:fd:2a:ee:ce:53:71:96:
                    c2:ec:06:df:03:a3:63:37:36:a8:e5:82:3f:8d:3e:
                    dd:1c:62:76:3a:75:b7:7c:f7:ba:47:40:0f:76:2f:
                    a7:d2:1d:25:80:0d:51:66:33:59:ca:02:1b:41:86:
                    13:44:56:2f:bb:64:1c:ba:e9:be:4b:f0:e4:cf:62:
                    10:d1:9c:80:a1:6e:84:4a:3b:e2:50:bb:ae:fc:b3:
                    57:f4:54:4c:54:46:87:9e:a9:e0:63:84:68:67:bf:
                    87:57:65:d7:fe:d6:e1:16:76:28:e0:05:99:37:34:
                    6c:58:6e:44:64:30:20:5d:ab:c9:df:d6:9d:be:8f:
                    6f:22:52:95:7d:d2:ea:c4:f6:26:d8:da:c0:29:6d:
                    a4:83:11:80:c5:c3:71:24:1c:21:f5:0a:88:6c:9d:
                    7a:a5:8e:7b:2e:00:d3:b1:1f:07:3a:aa:05:73:27:
                    bd:5b:79:62:a7:75:96:20:c6:0a:1e:1f:04:22:07:
                    e0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9A:EA:29:44:2A:61:13:2F:FA:8B:BC:6C:59:C5:45:9F:8A:F0:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/724eaedf-d166-39d4-84e6-c3434f2a41dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl

            X509v3 Authority Key Identifier:
                keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.29.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:3b:7a:24:8b:6f:19:4c:5a:56:62:91:cd:50:46:0c:a5:8d:
         17:e0:79:73:00:21:33:bd:23:3d:fa:9a:b4:7c:8b:2f:f2:51:
         5a:7d:02:8a:79:45:ef:41:7d:2e:98:7d:55:f5:dc:56:83:f9:
         83:83:04:c9:4c:63:e8:68:d5:5f:90:de:d1:c0:34:ff:33:23:
         99:f3:10:8b:f4:3f:b7:d8:30:6f:c0:b2:7a:23:a0:23:00:f9:
         b9:7b:31:30:d7:83:52:d2:78:bb:fb:c7:e2:bf:a6:9b:51:a6:
         a0:ed:f0:7c:a3:a1:6d:f9:ed:0a:18:ac:12:83:af:13:db:f3:
         4d:f6:1d:35:25:f4:9b:11:80:62:88:3a:48:85:3e:7f:73:de:
         fb:90:d0:6b:30:03:e9:c2:b1:c5:28:66:13:7e:48:8c:55:45:
         25:e7:3c:45:ea:aa:39:b7:8e:e2:f9:16:8f:d1:c6:26:99:a3:
         8a:7f:6c:7f:29:bf:6d:e8:7a:1b:40:42:8c:d5:7c:e0:23:4f:
         21:1e:dd:bf:b6:ec:51:93:97:de:2f:df:5a:cd:f1:4c:8b:b6:
         56:27:3e:69:11:fb:ad:fb:c8:a4:18:a8:2b:bc:64:aa:18:dd:
         03:48:7f:98:74:eb:d1:4b:31:10:b8:26:41:ca:65:9c:93:30:
         c9:77:58:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:35 2025 by rpki-client