Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/335be716-cf01-3825-bfab-8258026b8d98.roa
File:                     335be716-cf01-3825-bfab-8258026b8d98.roa (raw, json)
Hash identifier:          Pp2prYNvWBMg9P/rV937EGQ0ZytsF/e7/dmKYSIfl0A=
Subject key identifier:   A6:42:76:81:F0:50:C4:C7:F6:FC:D4:99:67:3D:40:78:CB:FC:E9:44
Certificate issuer:       /CN=17ca7b45-83e1-4a1c-8713-317adea0e270
Certificate serial:       010D0C9F43285848960B55D24BAB8D8EB031B3B8
Authority key identifier: 5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/335be716-cf01-3825-bfab-8258026b8d98.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        23.144.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:55:d2:4b:ab:8d:8e:b0:31:b3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ca7b45-83e1-4a1c-8713-317adea0e270
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=5227cb15-e493-4401-aba3-adc3552d6bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3d:37:85:bd:57:55:55:71:7f:cf:32:10:34:
                    f1:92:71:d8:84:73:a5:93:f8:11:3f:ca:5b:2e:c0:
                    75:bc:0c:b2:79:b1:c9:5c:f0:33:28:5e:90:49:81:
                    11:64:de:3d:55:e5:c0:c2:25:8e:2e:d3:24:cc:5e:
                    33:23:76:e9:3d:dc:29:35:ab:76:94:26:79:6c:26:
                    78:16:df:74:cc:94:2f:55:2e:17:26:74:38:e6:3f:
                    60:d5:3f:e3:64:31:22:8c:f7:00:50:af:9f:0d:27:
                    21:1c:f2:25:a3:0c:0b:86:bf:96:39:55:99:eb:2c:
                    83:30:85:43:73:d7:15:e2:29:1f:ed:ed:ee:73:dd:
                    c9:93:f6:34:57:82:04:31:71:7b:c7:c4:2e:b2:f9:
                    eb:27:ed:4d:8e:d6:dd:d8:b4:5a:98:23:05:3b:d2:
                    8f:9c:a3:1c:35:49:fa:4a:44:8f:61:98:e1:fb:83:
                    69:16:e3:ed:ec:3f:79:85:b0:7b:3d:41:c6:e7:1c:
                    2b:4e:9e:12:71:45:96:8b:54:83:ff:c6:b7:fd:7a:
                    7f:6a:72:91:5d:55:15:93:e1:75:e4:12:97:fb:70:
                    1d:19:73:25:9f:21:ad:9b:a8:32:aa:75:f8:dd:6d:
                    a7:44:36:ae:b4:f4:54:6d:be:2d:8e:85:34:10:84:
                    66:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:42:76:81:F0:50:C4:C7:F6:FC:D4:99:67:3D:40:78:CB:FC:E9:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/335be716-cf01-3825-bfab-8258026b8d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl

            X509v3 Authority Key Identifier:
                keyid:5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a3:7b:e3:c8:ef:95:f9:70:c9:2f:4f:d9:47:c0:f1:ec:01:
         75:a7:0a:48:a4:e6:db:80:48:e1:db:06:f7:02:ee:84:fe:f8:
         e0:60:77:49:aa:b4:3e:0a:20:48:a0:6c:fb:d3:3d:d3:60:68:
         ad:13:39:a8:1a:8b:4c:dc:27:95:c0:7f:8d:29:6b:14:7c:98:
         11:e1:fa:9b:07:3c:9d:9a:32:e7:19:ec:ed:1b:2e:3f:40:5f:
         1f:2a:c4:12:a5:4d:aa:1a:00:e3:6f:01:0d:71:95:a0:dd:95:
         df:28:49:a1:ac:ac:27:6b:01:1f:f6:f2:16:22:62:98:29:0a:
         e0:b6:d0:38:32:41:b1:b8:41:c1:12:76:d2:4c:ed:ce:67:77:
         51:15:62:3c:c1:56:88:18:29:34:8f:7a:56:0f:b0:ef:f4:30:
         05:23:f6:04:e7:09:68:7d:0f:99:c3:3d:c0:d3:4e:cb:93:33:
         1c:a2:43:fb:65:ef:9a:53:00:6b:09:6b:a3:2c:0c:3f:98:22:
         f7:3f:76:62:be:f3:7b:2f:51:af:90:6b:30:6d:2a:b1:25:b1:
         66:fb:67:54:05:43:4f:e0:fb:4c:84:d4:9d:ae:aa:60:91:8a:
         8b:a6:f1:94:a3:d9:ca:bd:69:44:76:d9:08:2b:96:91:89:45:
         43:15:62:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:10 2025 by rpki-client