Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ac7cb03-1909-329d-8fee-d0e6bf3dc671.roa
File:                     8ac7cb03-1909-329d-8fee-d0e6bf3dc671.roa (raw, json)
Hash identifier:          1C8d0TEEGO7I3ApMuZwNf/4JAWjhKOH1eFMPlkHzIlA=
Subject key identifier:   E5:DC:8B:50:EE:E4:7E:15:9C:E2:6C:03:E7:F2:99:19:E3:48:18:A6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6BA3EA9B83FE6EFA36BDC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ac7cb03-1909-329d-8fee-d0e6bf3dc671.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     22909
IP address blocks:        174.161.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:a3:ea:9b:83:fe:6e:fa:36:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=4d484187-6649-49d9-859b-3b4a22e6eb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:ed:6b:75:7c:e4:d6:be:6b:f0:3b:2b:de:
                    d9:05:f2:7c:1c:ca:6f:fc:f9:5f:f9:b2:f0:48:c2:
                    80:59:21:c5:5d:bd:6e:ef:41:94:0b:1f:57:b7:e2:
                    22:ef:d5:61:e6:c9:fc:5f:d9:dd:b1:c5:ca:68:71:
                    ec:a4:95:ff:d4:ed:cd:d1:90:33:89:e5:7d:fc:a4:
                    ec:94:ad:2f:65:5d:51:f9:45:4f:b1:58:aa:22:e6:
                    37:90:d6:f2:93:aa:ec:e2:9c:a6:2f:9e:96:a2:a8:
                    90:3b:58:4f:55:49:a0:6b:0f:2c:55:97:4b:39:03:
                    a6:1f:3d:91:90:a4:72:d1:4a:91:db:ce:51:f6:a0:
                    61:ed:4d:6b:16:81:03:31:d6:df:6a:ea:90:95:b9:
                    f0:01:28:cd:11:20:a1:c5:c2:8e:56:b8:2e:c6:8b:
                    60:24:1f:9f:fd:10:c0:b1:9c:7d:20:54:24:01:e7:
                    5e:12:d6:73:ba:9e:67:01:6f:be:33:a2:e1:88:e2:
                    f6:79:19:f8:eb:8c:95:23:45:a6:c2:a8:87:30:5a:
                    fa:5e:78:c8:92:26:be:7c:f8:c5:60:f5:15:c2:38:
                    46:93:29:98:34:01:9b:d7:e6:e1:dc:39:0b:8a:8b:
                    4d:52:ce:3b:1e:78:1a:23:a7:d9:ac:33:73:da:8f:
                    a6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DC:8B:50:EE:E4:7E:15:9C:E2:6C:03:E7:F2:99:19:E3:48:18:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ac7cb03-1909-329d-8fee-d0e6bf3dc671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.161.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:3a:6e:3f:fa:34:f5:2d:c8:5e:73:f3:8b:4d:2b:60:a7:6d:
         4d:2b:25:65:e9:39:87:e8:ad:e9:56:b5:66:16:71:3d:4e:a8:
         63:81:24:b1:f5:87:50:d9:75:9a:b5:42:12:03:db:af:f6:69:
         1a:90:04:e9:36:56:6e:a4:97:6c:f9:c3:ad:41:63:73:18:97:
         71:8c:fb:78:d4:8c:e3:7d:9d:0c:75:6c:fa:ee:ad:5a:14:89:
         9b:d4:0d:92:22:ef:56:4f:12:8e:af:09:75:e0:22:42:e3:50:
         ad:1d:ca:b0:5d:33:03:84:cb:36:93:b1:16:df:6d:03:9f:32:
         b8:44:3a:34:1c:81:c6:ec:d9:03:06:d5:fb:a0:e8:9b:23:a3:
         41:ea:d0:1b:ae:e6:32:25:37:0a:cf:2d:01:75:08:40:4f:77:
         27:67:14:67:fa:21:49:2a:fb:40:36:d7:5f:1a:b8:63:39:0c:
         6c:7d:57:67:5c:ed:93:ac:a2:41:37:7d:b0:d9:9c:87:a7:2e:
         31:0c:76:bc:a2:42:a8:d8:d0:65:c0:cf:c9:e7:ab:07:ab:59:
         21:06:0a:bf:7a:f9:88:ea:7b:f7:c0:80:46:12:0c:bf:cc:15:
         3b:df:d4:df:a2:9d:31:b8:76:bf:4d:ec:94:57:a4:ff:1f:0f:
         f1:d9:28:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:15:00 2025 by rpki-client