Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/77cdf805-665a-3e8f-94c3-58e2cb293bb3.roa
File:                     77cdf805-665a-3e8f-94c3-58e2cb293bb3.roa (raw, json)
Hash identifier:          KX+bU227e2fWPDdqojk4XUuA3UiPBjeb7nCYiyaqtU4=
Subject key identifier:   7D:CE:CE:02:83:E6:75:7F:98:CD:5C:4D:B8:D8:BD:57:5B:08:8C:D8
Certificate issuer:       /CN=d70b978a-944a-401c-aa25-2ebbd4d58340
Certificate serial:       010D0C9F432858488DAB401D114172D2B580DAB8
Authority key identifier: 73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/77cdf805-665a-3e8f-94c3-58e2cb293bb3.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     395231
IP address blocks:        23.143.8.0/24 maxlen: 24
                          2602:27c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:40:1d:11:41:72:d2:b5:80:da:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70b978a-944a-401c-aa25-2ebbd4d58340
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=8275b75a-ca4d-4e32-8daf-d938b2b0a73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:db:4a:c2:96:01:db:90:9f:6c:f3:69:8a:
                    09:0c:df:ce:37:e4:20:42:49:e6:a7:a9:7f:84:ce:
                    25:17:15:d1:01:63:b0:8e:06:bd:ba:db:6b:f0:57:
                    23:13:92:f4:0c:a9:73:4f:b5:33:84:12:b3:f1:1a:
                    af:db:76:53:56:f0:2f:ea:15:f0:8e:32:03:fe:85:
                    71:6e:10:98:2e:9a:49:b0:d3:4c:3f:ae:3d:0f:e0:
                    bc:e6:f7:41:07:9b:69:12:d3:46:23:78:02:f4:a5:
                    13:81:d5:5f:9a:7f:aa:07:bb:ce:9d:9a:06:a2:c0:
                    29:0b:15:2e:ee:7f:a1:a7:65:f2:60:0f:66:5f:1d:
                    7c:cf:28:18:b8:03:16:20:5f:6b:37:23:93:2a:28:
                    05:ba:14:de:98:10:52:72:a1:8a:c9:82:ae:1f:ce:
                    20:18:0b:d7:66:67:7d:0e:24:74:77:a7:15:8c:21:
                    9e:28:7c:d5:0b:98:72:cd:aa:7e:a8:63:5d:b1:05:
                    99:a8:b0:1a:1c:e2:6c:dc:0c:aa:f4:d6:b2:71:59:
                    16:aa:8e:fa:bd:0b:64:14:c0:19:a9:29:ee:63:28:
                    e0:be:34:e4:5e:a7:a4:9a:66:62:cb:12:45:fa:8f:
                    f3:1f:d3:c5:21:4c:99:e5:d2:17:17:e2:26:26:df:
                    18:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CE:CE:02:83:E6:75:7F:98:CD:5C:4D:B8:D8:BD:57:5B:08:8C:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/77cdf805-665a-3e8f-94c3-58e2cb293bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl

            X509v3 Authority Key Identifier:
                keyid:73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.8.0/24
                IPv6:
                  2602:27c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ae:4d:91:db:17:cd:ed:6f:66:db:75:37:e8:b2:7b:d5:37:
         34:01:58:15:88:4f:25:9a:19:bb:20:97:2e:b4:57:b0:c4:16:
         39:52:ad:66:c0:68:e0:cf:18:98:1e:cf:36:1f:83:7b:98:09:
         33:7d:98:5d:f1:5c:5c:e0:c0:cd:7e:3f:87:2a:b7:17:58:d8:
         b4:0a:d3:e0:73:8a:dc:d6:18:31:46:3a:8c:d6:41:13:4d:51:
         6f:ce:01:5e:65:88:09:96:7e:88:8e:6e:1e:34:fb:31:d7:59:
         8e:12:6f:25:8d:08:70:de:d6:d0:42:41:9c:05:2c:33:5e:b2:
         25:f0:4b:a8:c0:83:06:47:75:45:c1:91:03:3f:c0:0e:bb:03:
         f7:7b:8f:57:78:f7:d4:5f:82:b8:db:46:bb:45:76:0e:5e:99:
         de:0c:a4:1b:57:42:1d:0c:30:ea:3b:ad:cb:b5:d5:27:c5:7e:
         0b:d9:f1:2f:df:33:aa:6e:99:12:8a:bb:b1:71:1f:7e:88:e3:
         82:ed:8f:eb:de:df:ce:e3:2a:03:89:24:ef:50:58:74:45:38:
         61:c5:b1:76:de:2c:65:e6:92:6b:4e:43:e5:aa:0e:ba:f2:44:
         24:05:2e:ed:32:0e:83:bc:e4:0b:12:65:ff:90:e5:75:cc:ea:
         24:26:8b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:28:25 2025 by rpki-client