Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2630e1ca-a903-395a-8244-fa8c41db42b9.roa
File:                     2630e1ca-a903-395a-8244-fa8c41db42b9.roa (raw, json)
Hash identifier:          wew3lP4O+GD/mYLT41W9r16aaJVOZSsS5dsqf1Sz48k=
Subject key identifier:   A4:09:C7:73:82:79:0B:F8:50:D8:50:CC:37:DC:64:3A:1B:40:07:AD
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849194186C2C9B44AFCC5EF4300
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2630e1ca-a903-395a-8244-fa8c41db42b9.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        204.2.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:86:c2:c9:b4:4a:fc:c5:ef:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=3d525199-a416-4988-9efd-bdcb1d352b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:b0:99:03:43:40:a7:17:a6:3c:6d:06:24:
                    a0:da:f2:eb:9c:59:fe:c0:9a:77:6e:6b:58:c5:d5:
                    91:77:fd:de:01:e3:a1:29:f3:ac:3c:99:07:7d:4e:
                    b7:2b:11:d9:5e:94:89:ea:d2:41:f5:36:74:98:f8:
                    c2:d0:5f:da:3f:56:bc:6b:30:ad:ac:4d:c9:f3:57:
                    f6:9d:d7:b4:91:29:5d:64:f3:3b:7a:6e:37:4a:96:
                    2d:56:38:63:6b:e1:9d:17:44:e3:76:62:10:bb:82:
                    0f:a5:32:75:c6:e7:db:a6:37:05:f8:79:aa:71:f4:
                    3c:ce:a5:50:a1:c3:34:6d:13:27:4a:c6:c3:b8:a1:
                    bd:63:28:ae:5a:24:f7:26:88:03:76:26:ac:68:09:
                    72:75:21:f8:24:db:45:f3:a2:66:7a:24:06:dc:a7:
                    02:9c:86:89:c6:a9:f0:1f:1b:cc:ae:c6:55:3d:2c:
                    8e:f2:a2:f0:7b:35:8c:4d:91:27:27:9f:0e:8d:99:
                    25:cb:f6:35:2d:37:19:a9:9b:a9:1c:34:d2:4e:19:
                    0f:92:f3:38:7e:86:fd:07:e7:61:12:06:e5:33:98:
                    99:78:45:99:db:6e:55:a0:e2:13:4a:f3:6d:90:0a:
                    61:42:0e:f5:81:39:b1:23:b4:01:e7:d6:f0:b3:7f:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:09:C7:73:82:79:0B:F8:50:D8:50:CC:37:DC:64:3A:1B:40:07:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2630e1ca-a903-395a-8244-fa8c41db42b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:cb:e7:a8:3d:d3:62:1f:e7:74:16:3d:6a:ff:19:af:d6:ab:
         c6:02:23:11:68:bb:b7:91:d0:21:61:cb:e4:84:1d:ae:cc:bf:
         d9:e5:94:54:7d:94:97:62:93:d9:cb:33:86:34:80:41:7a:d8:
         00:36:99:a0:ed:ed:61:17:9c:b3:ef:d2:3d:ab:b3:5d:1b:32:
         2e:ca:56:23:15:bf:e1:3e:f0:62:cb:46:40:1c:8e:ee:3d:24:
         10:ed:ca:bb:e6:8b:07:f9:ef:ec:d6:0e:26:7c:34:d4:a6:4d:
         a6:2d:c6:ca:04:c9:ce:74:17:33:93:24:e2:d9:7a:9a:20:d2:
         30:20:0c:d2:42:9c:2c:b5:88:b5:3d:77:e8:f8:71:ff:0b:7f:
         f4:84:18:06:da:65:2a:5b:37:cb:19:a5:48:c0:af:f5:1c:94:
         1b:42:12:6f:e3:14:34:94:60:b9:6f:c9:53:ce:0d:6d:c1:f2:
         78:1a:3f:79:76:1a:6a:07:a2:e2:15:50:4d:c2:89:c6:80:0e:
         d2:1e:06:54:9b:0b:55:4f:41:8a:a2:d8:58:d2:67:b5:d2:c0:
         3b:86:80:02:fd:c6:07:1d:77:1d:f9:8a:63:f4:05:a5:02:9a:
         b9:4e:c9:ee:02:b4:c2:3b:bb:ce:81:cb:08:d3:0f:c7:c5:55:
         4a:bd:8d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:32:53 2025 by rpki-client