Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/7d1782c8-6710-350b-a87c-af35b36707e0.roa
File:                     7d1782c8-6710-350b-a87c-af35b36707e0.roa (raw, json)
Hash identifier:          FJfixLiCzN5L/GcogMbKTIZ5Mlm2yLJMosYMurJsR1M=
Subject key identifier:   32:B3:AA:BD:79:9E:F2:08:DD:3F:59:FE:D8:7B:F2:44:4F:5F:3E:5B
Certificate issuer:       /CN=cef8d320-c2b4-4718-be9c-ec3f801c0818
Certificate serial:       010D0C9F43285848EC968EC10E773A6A9630C500
Authority key identifier: 4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/7d1782c8-6710-350b-a87c-af35b36707e0.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     63452
IP address blocks:        173.243.238.0/24 maxlen: 24
                          173.243.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:8e:c1:0e:77:3a:6a:96:30:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef8d320-c2b4-4718-be9c-ec3f801c0818
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=b423fd23-2627-4470-b8ad-0e6707e671e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:b6:e2:d3:93:1e:e8:e1:4e:91:9d:35:ab:
                    1d:93:67:80:37:5a:af:64:1e:2a:09:6b:37:86:95:
                    b8:42:72:a2:39:fa:0e:55:67:2a:6c:82:fd:f1:6b:
                    9b:2c:1a:cb:66:74:ab:27:01:fb:e2:8b:46:c6:9f:
                    d8:de:cc:53:7b:97:6c:a0:06:7c:9c:7f:12:ba:20:
                    51:16:ba:55:fb:8c:6d:81:87:87:81:d5:e9:2a:32:
                    9a:91:76:35:9c:04:0d:e9:af:0d:dd:db:3d:63:4c:
                    3f:78:c1:76:ae:cc:85:e7:39:e6:2c:c1:b8:59:cb:
                    88:c8:61:4d:57:7e:19:49:82:2e:2f:39:40:a5:3f:
                    b5:0c:9a:f1:cb:9f:1d:7b:bb:9c:e5:40:c9:1b:a5:
                    2c:00:0a:98:f4:01:76:99:9f:fb:63:92:94:43:1c:
                    13:0d:29:77:94:43:a6:a7:e5:f0:a0:89:54:0d:04:
                    ad:87:7d:20:09:cc:49:5c:ee:6c:79:b4:b3:47:8e:
                    73:e2:7c:c3:02:21:d7:8c:2f:b7:cc:c7:af:41:4b:
                    87:2c:7c:e0:05:a6:dc:a6:62:91:dd:6c:d3:f4:d8:
                    a3:55:43:c1:86:83:d9:26:12:9c:cc:48:30:35:86:
                    a6:ff:66:27:c6:00:de:a3:23:f2:d1:c9:0c:e6:da:
                    29:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B3:AA:BD:79:9E:F2:08:DD:3F:59:FE:D8:7B:F2:44:4F:5F:3E:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/7d1782c8-6710-350b-a87c-af35b36707e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl

            X509v3 Authority Key Identifier:
                keyid:4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.243.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ec:1a:68:6f:06:6a:81:fa:42:16:bb:78:38:20:b9:81:be:
         4e:31:65:63:5a:4a:7f:0d:93:16:7d:db:44:9d:28:ca:ef:61:
         ec:b0:60:a5:ed:95:47:e5:ba:b7:50:7a:b8:98:79:45:59:d2:
         59:77:6f:61:c3:36:02:3c:e6:8d:53:cc:00:a7:44:f2:41:fe:
         4b:d9:d5:ea:b6:52:e8:75:b3:40:be:86:90:04:58:ab:9b:59:
         7b:7d:43:e6:d8:6e:b0:b7:67:86:38:4e:e4:99:00:21:65:97:
         d8:e4:d0:a5:fd:8d:60:de:93:b0:6c:b7:a1:8e:57:82:53:a1:
         a1:9c:f5:1f:f2:b2:08:b2:30:9d:cc:16:ed:31:d7:91:e9:11:
         ea:63:ba:10:e5:85:4e:44:b0:0b:c8:92:d1:88:92:94:6d:73:
         7e:b7:f2:1a:7a:ac:ee:97:83:a1:f9:2e:e9:40:98:c8:69:fe:
         59:19:f3:87:22:b5:c0:a8:44:3a:76:f5:6e:db:31:a4:52:e5:
         0c:f9:b0:13:66:3c:0d:43:d9:6f:01:14:f5:40:60:1e:13:6c:
         b9:da:10:be:3d:da:06:27:ef:1d:62:b0:3b:e3:a0:09:db:e4:
         a9:f0:b1:45:6a:05:d7:90:52:ab:7d:12:66:82:ce:9f:9c:65:
         b9:1c:fc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:39:08 2025 by rpki-client