Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ac50f5e8-2d78-3982-93d0-675289c57166.roa
File:                     ac50f5e8-2d78-3982-93d0-675289c57166.roa (raw, json)
Hash identifier:          XpOB+jfzSQNo7oS9JHMMd9x7Vfsq4q1slhC9lyNKZNc=
Subject key identifier:   C6:34:62:1E:6F:1B:B1:99:F0:08:A4:7B:8B:8C:82:47:A2:CB:25:71
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285848EF6132D0145618517CFDB700
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ac50f5e8-2d78-3982-93d0-675289c57166.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     26114
IP address blocks:        8.30.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:32:d0:14:56:18:51:7c:fd:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=82b7f8f2-fc0a-45e4-afb1-7a5ce5195d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2f:e1:7c:a3:ab:c8:50:30:3a:3e:d3:d7:c2:
                    c2:f9:bb:7f:8e:ab:fa:ab:34:5b:e4:78:38:45:ab:
                    57:35:02:f9:7f:58:bf:10:2c:d6:83:fb:ca:c8:0b:
                    8e:e8:57:9d:d6:36:e6:8e:67:7e:51:1d:96:18:a1:
                    df:31:e3:f0:de:68:6d:08:54:ef:af:9b:b1:f9:5b:
                    94:52:f2:3d:70:b8:c6:83:8b:b6:60:00:6b:be:9d:
                    c3:e0:89:9d:02:2a:ad:f4:c9:9c:b6:a0:28:2d:8c:
                    21:92:dc:2e:ef:89:86:00:62:a2:4e:f4:a2:21:55:
                    3b:3b:8b:d6:74:70:78:cb:f8:f8:bd:c5:96:9b:0f:
                    95:d5:b2:90:97:4c:03:dc:d0:28:1e:37:9b:81:bd:
                    25:3d:2e:32:4e:c3:b2:ea:66:00:df:e2:41:74:24:
                    4f:f5:f8:b3:c0:a8:38:09:fe:7b:62:35:ae:d3:6f:
                    ed:a5:c8:9a:df:99:0d:fa:d2:2e:67:06:16:c0:02:
                    31:85:2d:7f:2f:71:60:49:dc:16:d7:bc:cc:1f:be:
                    14:70:a0:62:a2:54:30:6e:4f:32:6e:3a:6e:53:60:
                    7b:f8:ed:1b:b3:a7:a8:cc:03:27:99:d1:0e:d8:6d:
                    ed:53:d2:2f:d0:42:42:91:0f:9f:d0:af:93:e1:12:
                    61:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:34:62:1E:6F:1B:B1:99:F0:08:A4:7B:8B:8C:82:47:A2:CB:25:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ac50f5e8-2d78-3982-93d0-675289c57166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.30.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:7a:13:46:81:bc:cf:34:e9:87:5e:4f:78:5e:b2:13:5a:25:
         8c:6b:bd:99:56:48:1c:1d:58:ed:ee:cd:3c:7c:7a:9a:b9:cf:
         60:75:b9:e3:9d:39:8c:34:b0:a5:f5:6b:3b:3f:93:d5:df:8f:
         bd:2e:d1:f6:43:52:5d:dc:f9:c0:5a:b0:93:b0:85:63:67:4a:
         ad:b5:cf:3e:1a:b7:cc:71:7e:aa:3a:2c:e5:99:24:98:7b:78:
         c7:04:2d:cf:c9:21:67:a7:4a:ad:37:1d:63:da:70:7d:23:bf:
         2c:14:40:9e:da:f0:68:d6:20:97:bd:4f:85:8f:11:0d:85:6b:
         86:28:25:66:5e:50:75:ea:ac:34:c4:52:e8:ca:02:0c:0b:95:
         c9:6b:06:f5:81:41:aa:57:fe:6d:1a:ec:d0:3b:f3:30:89:3b:
         ca:44:ab:e5:70:27:4b:d0:05:76:05:e9:12:72:c3:60:00:37:
         10:1f:b3:b2:a4:c6:cd:8f:35:d3:b8:a6:45:83:75:5e:e6:87:
         38:4a:d0:e5:99:ae:b3:a4:00:17:5a:45:af:81:4e:50:29:bf:
         03:f3:48:79:92:39:58:76:0d:9d:41:92:c0:38:98:b2:3b:4f:
         fb:2c:70:de:78:8e:ab:19:4b:bb:1c:1e:d3:b9:c5:d8:93:33:
         c8:80:f3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:15:05 2025 by rpki-client