Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/03816a28-1e7d-35af-8fc8-2e3aec9a32ca.roa
File:                     03816a28-1e7d-35af-8fc8-2e3aec9a32ca.roa (raw, json)
Hash identifier:          Ldi1aqEVPXWUDTrgrfj0V1t6uXYpEZYs1pvzKea+TTk=
Subject key identifier:   8C:B2:1E:F3:35:C9:A8:6A:75:47:6F:F7:E1:41:D1:48:09:98:E9:45
Certificate issuer:       /CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
Certificate serial:       010D0C9F432858491ED6DCE2CB13A6F1D277CE80
Authority key identifier: 3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/03816a28-1e7d-35af-8fc8-2e3aec9a32ca.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     16970
IP address blocks:        23.169.240.0/24 maxlen: 24
                          23.169.241.0/24 maxlen: 24
                          23.169.242.0/24 maxlen: 24
                          23.169.243.0/24 maxlen: 24
                          23.169.244.0/24 maxlen: 24
                          23.169.245.0/24 maxlen: 24
                          64.40.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:dc:e2:cb:13:a6:f1:d2:77:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=899fdd87-9708-4e6c-8577-f83f75189ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2d:7e:0a:a4:9d:0e:69:bf:cf:56:02:fc:2f:
                    c7:e0:1e:67:5b:b5:7c:2a:5f:6c:56:08:b8:a5:2b:
                    fe:b6:6b:73:83:4b:f6:ac:12:d2:65:08:a0:fd:6c:
                    b8:95:30:ca:77:c3:ed:6b:38:38:d0:a8:5e:d0:f2:
                    32:5a:3e:82:fd:97:a0:46:5c:17:b0:c8:73:8e:55:
                    f5:35:99:ff:a7:60:ef:b1:a3:8e:06:65:90:69:ae:
                    75:e3:05:9a:42:fc:bc:96:f2:f0:c8:5f:8c:e3:58:
                    c3:35:3b:55:a1:0f:c9:39:10:20:70:0e:26:01:42:
                    8e:7a:0a:bf:26:bb:61:db:97:7f:af:29:af:cc:c1:
                    66:f4:19:74:05:a9:b9:8b:b1:09:4c:c0:ea:25:c2:
                    3f:4c:bc:ba:5a:8e:a6:82:43:7f:3c:fa:c7:33:a7:
                    4d:a3:e6:81:e1:18:c8:18:3d:5e:73:50:d1:2c:72:
                    ac:77:61:30:ef:c2:72:e8:b8:95:aa:b1:cc:c7:0a:
                    99:34:9c:1f:53:a8:5b:a2:ed:ce:7f:24:41:99:5f:
                    6c:4e:80:3f:03:1b:35:ed:a1:25:56:23:e4:c7:8f:
                    c2:6f:96:8c:95:7b:74:9a:0b:85:dd:cc:57:8c:b0:
                    c2:8c:07:e3:58:f4:8f:66:5a:20:9e:4e:73:6e:43:
                    e1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B2:1E:F3:35:C9:A8:6A:75:47:6F:F7:E1:41:D1:48:09:98:E9:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/03816a28-1e7d-35af-8fc8-2e3aec9a32ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl

            X509v3 Authority Key Identifier:
                keyid:3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.240.0-23.169.245.255
                  64.40.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b3:7a:45:5e:b9:b8:8f:fc:9c:71:1f:d4:b8:02:56:39:ee:
         6c:05:62:a0:4c:b4:8b:76:79:31:c2:b6:66:b5:e8:67:27:e9:
         c0:5f:33:66:e8:37:dc:d3:22:0b:a0:8b:c9:ca:8b:16:27:6a:
         a5:19:ce:d3:d6:98:76:cb:11:1c:fd:6a:2d:11:b3:b9:56:9f:
         1a:43:d0:d4:4e:5a:61:01:74:0e:f5:ee:61:54:f4:df:c8:02:
         d7:0a:10:8e:3f:b1:ca:08:2e:27:03:3c:35:67:fc:b1:32:18:
         03:c4:62:4e:9d:f3:89:18:14:b1:96:0a:4e:7e:3f:ef:47:39:
         67:4b:8b:0a:93:a4:22:14:e0:7a:8e:07:df:ef:38:88:fa:4d:
         43:e6:04:ff:9f:c8:a4:60:6d:c5:8f:80:c3:d2:88:c4:fa:b0:
         19:c6:0e:c3:16:cb:31:8c:a0:39:14:81:0b:0d:df:c6:eb:62:
         38:66:8f:de:fc:d4:ab:4e:4b:47:c5:0f:0d:67:c2:9a:4c:b3:
         af:93:c2:65:73:1b:52:8a:cb:aa:0c:6b:26:ac:1a:c1:19:8e:
         28:15:21:b6:06:4f:d3:97:52:ec:40:3b:bb:dd:ac:09:f3:bb:
         e1:81:57:c7:2f:e0:93:3d:70:6e:c0:9a:d9:a0:60:15:c7:b0:
         86:2a:e1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:27:56 2025 by rpki-client