Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/8b8fc74f-dd0a-3adf-a7b9-e172866a9fb1.roa
File:                     8b8fc74f-dd0a-3adf-a7b9-e172866a9fb1.roa (raw, json)
Hash identifier:          RFpt24sKJ0r/vjwegdQN2WPCtuzzC8pSy487RVIkmc4=
Subject key identifier:   9B:DE:76:7E:5C:0E:6F:1A:F1:0C:67:7F:1D:C6:0E:D6:BD:14:4A:03
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F43285848960B51843E83C0AC4FBAA100
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/8b8fc74f-dd0a-3adf-a7b9-e172866a9fb1.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     398395
IP address blocks:        23.133.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:51:84:3e:83:c0:ac:4f:ba:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=51cd6aff-eb23-4dc5-bef9-158860f04132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cd:4a:93:1f:35:61:e7:a4:13:31:fa:f9:fe:
                    54:e4:7f:d7:d7:88:7a:27:b9:f5:50:be:cc:bd:69:
                    b1:1a:53:74:a5:b5:f4:98:22:e8:74:8e:03:e0:14:
                    cd:7a:ae:30:8f:85:46:64:16:5a:a0:00:b8:e1:83:
                    14:c4:54:bc:41:b5:1f:4f:81:67:bb:6b:39:7f:46:
                    2e:a1:9b:81:cd:6f:48:44:e9:8b:9e:e6:06:a2:7a:
                    fe:58:4e:e6:65:e1:5c:09:bf:79:c2:15:c7:12:50:
                    07:88:3c:18:b3:3d:59:ab:1b:c1:29:16:2d:db:72:
                    48:22:30:8d:de:6c:fb:50:73:de:a3:ab:27:e0:d3:
                    c5:26:57:7e:fe:c8:1d:3e:73:bc:df:c0:27:01:81:
                    bb:f9:de:fe:25:f8:e4:eb:89:e4:03:61:1b:8f:7d:
                    25:bc:51:82:da:37:c4:60:f3:f3:b8:76:07:ca:15:
                    f0:ba:f5:55:85:27:8c:b4:55:91:b8:f1:a2:80:08:
                    96:bd:33:68:ef:ff:ab:7a:a1:d0:bc:ad:ff:71:02:
                    14:b3:d4:be:e2:15:ff:fc:0c:a9:53:ac:78:69:85:
                    a6:51:6d:e2:b8:a7:82:eb:42:6b:d7:41:79:51:b1:
                    b5:d7:e6:bd:0c:8f:63:b4:d1:de:a8:92:7e:1a:10:
                    33:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DE:76:7E:5C:0E:6F:1A:F1:0C:67:7F:1D:C6:0E:D6:BD:14:4A:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/8b8fc74f-dd0a-3adf-a7b9-e172866a9fb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:3e:32:05:21:c6:a3:ad:da:ea:c5:6b:7d:95:1c:39:82:3c:
         f6:63:38:f9:9c:1c:29:e6:06:44:40:93:dd:90:da:01:00:ef:
         db:ca:d4:df:14:41:22:67:80:25:64:77:77:a3:e3:c2:25:79:
         fe:f7:54:76:a1:82:6a:09:d3:63:83:1a:74:b3:b2:4f:7d:0f:
         70:19:8f:3b:8f:94:2f:1f:53:a8:af:85:14:67:13:6e:05:a9:
         8b:06:54:51:92:ac:9e:9e:16:07:11:75:89:c0:48:d4:58:76:
         b8:05:2f:a0:98:04:34:41:fa:9d:8f:1a:4a:0d:d5:b3:2a:92:
         88:ab:f5:d2:3d:8e:10:12:eb:f2:17:66:9f:70:83:28:a5:20:
         eb:d6:b5:06:b6:16:23:f1:fa:fd:16:9a:68:15:53:bb:46:a7:
         ea:6a:e2:00:a9:13:2d:39:a7:18:5c:79:06:5c:20:88:6b:e9:
         00:55:99:ba:65:ff:05:33:e1:3f:d2:4a:40:8d:0c:67:f9:67:
         7a:39:c2:75:9f:86:25:bf:32:48:8a:6b:29:56:d6:7f:a7:8a:
         7b:42:6d:6b:12:e6:07:99:f8:73:dd:07:cd:4d:41:37:89:59:
         8c:39:dc:8f:6c:ff:4a:c1:36:3b:55:52:1c:20:f9:06:0e:4b:
         99:a2:56:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:27:53 2025 by rpki-client