Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/7c3bfe8f-9f9d-3fd1-93ff-7a5562a153ca.roa
File:                     7c3bfe8f-9f9d-3fd1-93ff-7a5562a153ca.roa (raw, json)
Hash identifier:          emoMNEbrZrXaDqlqiB8nxjc6ZAXa+QM9ywYhL9ExwYI=
Subject key identifier:   C6:E2:D8:A2:6A:E4:EB:95:32:41:4E:8A:64:30:42:5A:DA:E7:41:4A
Certificate issuer:       /CN=3acfcd76-bb9b-4114-8b36-da9eee99b6b0
Certificate serial:       010D0C9F43285848CC7B89037B941FB5D5C20EC0
Authority key identifier: 78:70:8B:1B:D6:A8:84:C2:84:A5:0E:C1:28:9C:26:4E:F3:D9:4F:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/7c3bfe8f-9f9d-3fd1-93ff-7a5562a153ca.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     27520
IP address blocks:        23.189.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:89:03:7b:94:1f:b5:d5:c2:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3acfcd76-bb9b-4114-8b36-da9eee99b6b0
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=64e02613-88fb-4650-b50a-9549beef37c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:87:91:9f:e2:be:85:7e:89:e2:de:e5:80:
                    e9:16:ce:ec:00:76:16:fd:a9:4d:70:df:79:b9:5a:
                    12:24:9b:a5:6e:03:ba:b1:26:e0:ea:26:0a:88:6c:
                    10:46:92:6c:24:e1:69:43:22:20:51:48:05:d3:e5:
                    95:43:d7:8e:5e:7f:5e:0e:7b:f6:0d:32:28:c5:24:
                    6c:3e:85:4e:8c:ae:ec:48:4c:5b:59:3d:27:6b:24:
                    35:08:cb:0f:1c:c1:5a:5e:fe:bb:97:fe:ab:b9:a6:
                    75:e4:b0:b5:bb:68:5d:24:e8:77:76:72:40:5b:85:
                    e5:70:65:e5:72:53:51:0b:4d:50:a5:0a:58:fd:f1:
                    38:8e:4d:9b:06:e3:92:ef:c3:99:8d:59:28:d3:14:
                    93:13:4c:23:57:67:be:88:0e:69:54:07:67:aa:c4:
                    77:1e:94:22:66:d4:e0:87:3e:d0:bd:fc:8b:ed:25:
                    d1:c8:da:fa:c4:11:d8:f9:82:f5:77:49:b1:ea:2b:
                    90:56:90:53:22:a2:31:ae:65:39:54:4f:b2:7c:d9:
                    1a:b3:0a:4a:31:fe:19:5b:ac:80:24:f7:e3:24:dc:
                    14:b2:6f:96:4d:ed:78:4a:da:6c:0c:46:68:3a:6b:
                    5e:dd:08:dd:e8:9a:b8:92:6e:ed:53:cc:27:31:69:
                    de:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E2:D8:A2:6A:E4:EB:95:32:41:4E:8A:64:30:42:5A:DA:E7:41:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/7c3bfe8f-9f9d-3fd1-93ff-7a5562a153ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.crl

            X509v3 Authority Key Identifier:
                keyid:78:70:8B:1B:D6:A8:84:C2:84:A5:0E:C1:28:9C:26:4E:F3:D9:4F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:3b:b9:43:e2:9e:ac:7a:c8:9f:25:f1:f3:df:dd:33:86:01:
         cc:0b:56:26:63:1b:3e:9a:a1:07:90:48:e7:c6:55:0e:b7:14:
         ee:fc:dc:72:7c:84:16:be:4b:cc:a1:e9:ca:61:66:ef:c3:d3:
         4e:a2:dd:5b:78:b4:29:9e:c8:2e:4a:a8:9f:a4:e3:b5:e1:f2:
         6c:66:fc:88:e8:46:90:f6:b2:d4:f7:7e:4d:86:47:ba:86:e0:
         b2:26:94:45:c0:39:fd:1c:d4:d2:8a:b1:c7:f1:a4:d6:74:74:
         ac:ab:46:62:03:47:df:53:56:af:f4:bc:46:2e:21:f6:3b:8c:
         9d:85:03:5c:c7:b3:61:c1:b3:8e:59:db:20:7a:0c:4a:56:a0:
         fa:28:42:2c:4a:78:bb:32:82:26:0a:58:71:50:0a:d3:2c:55:
         94:fd:ea:b8:4b:bd:73:bf:2d:13:2f:16:99:1d:d5:b3:36:68:
         cf:4d:20:88:7a:d7:da:d2:0d:f5:b9:38:6d:0b:d1:44:df:35:
         88:9e:90:5f:bf:54:75:d3:76:63:eb:27:6b:4b:16:92:a4:63:
         5c:2a:45:6e:8a:9d:b0:b1:05:3e:d7:ad:7a:f0:08:ff:78:47:
         d4:07:df:50:b7:43:11:a0:0b:f7:98:f3:72:49:63:c3:2e:73:
         60:d3:df:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:12:49 2025 by rpki-client