Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/9b72e98e-9879-3618-a7d2-8c9d7f3939dd.roa
File:                     9b72e98e-9879-3618-a7d2-8c9d7f3939dd.roa (raw, json)
Hash identifier:          ZuBKfHxFh8/QHtnkP1ihsfadiQOXlQTWzXliLCwcp5E=
Subject key identifier:   E7:DB:97:C3:66:65:E9:E8:22:0D:8F:1F:04:11:87:5F:27:E7:AC:C8
Certificate issuer:       /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Certificate serial:       010D0C9F432858489E6B661DEF0013AD13462580
Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/9b72e98e-9879-3618-a7d2-8c9d7f3939dd.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     20473
IP address blocks:        23.139.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:66:1d:ef:00:13:ad:13:46:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=8a252e91-e774-4676-b6c2-d341d0235a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:f0:1d:fa:9f:8a:ca:78:77:0e:b0:5f:e5:
                    81:cd:11:1f:93:e2:02:cc:45:1f:ca:1d:9f:1c:ac:
                    c6:c5:b4:1c:d4:97:0a:f8:ac:93:1f:b7:16:e6:cb:
                    2a:a9:a3:81:a4:eb:e3:5a:ac:01:ac:a1:65:26:67:
                    5f:d2:56:3d:e3:9b:64:0c:aa:f7:18:4b:fc:94:39:
                    82:b0:e0:7a:d7:ca:75:91:eb:ed:4b:e6:a0:f3:52:
                    cd:ac:62:fd:30:02:d6:61:aa:07:23:9f:c1:95:3d:
                    23:1a:9e:ee:c2:a8:ef:06:63:b0:d8:72:76:72:aa:
                    8f:e9:3d:51:c4:ba:32:45:2f:65:67:11:e9:7f:0b:
                    eb:6a:63:0b:c0:e9:0b:56:f3:b0:b1:7c:30:d1:9b:
                    96:f2:b9:a3:7e:60:a2:d5:bc:8b:65:4d:33:42:f7:
                    30:07:ab:d4:32:b4:98:ac:14:00:65:d4:59:02:81:
                    fa:fe:a8:8f:22:f2:ee:bb:f2:e2:22:3b:aa:87:f8:
                    5d:1b:5b:92:7d:61:49:99:0f:bf:db:9e:98:93:11:
                    08:2f:c3:c9:f6:e2:5f:5a:86:22:9a:0c:a1:16:6c:
                    cc:a1:90:3b:3b:6e:f8:eb:5b:16:6a:e4:76:cb:63:
                    71:24:11:64:4d:fa:db:df:68:54:49:13:77:b5:f9:
                    c6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DB:97:C3:66:65:E9:E8:22:0D:8F:1F:04:11:87:5F:27:E7:AC:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/9b72e98e-9879-3618-a7d2-8c9d7f3939dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl

            X509v3 Authority Key Identifier:
                keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:79:56:1f:15:0e:b3:2c:09:0f:a0:b7:b6:b2:79:16:f3:4e:
         c7:5c:1f:fa:b5:33:60:ec:09:a7:ad:4c:de:f6:9e:6c:08:51:
         63:df:11:6f:65:11:e0:a5:c2:1d:eb:c6:85:81:f3:2e:f0:6d:
         8d:ac:40:a4:44:4b:88:3f:da:62:34:08:19:ca:c1:dc:09:a5:
         35:87:44:cd:38:1d:60:c1:fb:28:94:0f:ec:13:09:44:29:1a:
         67:e0:c8:c9:c0:ed:09:fa:56:51:84:5f:55:5d:84:09:ba:2a:
         99:7b:0c:79:b8:83:c9:27:ed:2a:c7:e7:0d:24:54:b3:21:a7:
         b6:fa:e7:1b:8d:48:32:3c:f2:cd:3d:6f:18:c5:6f:ce:f6:e7:
         a1:ec:22:4d:e1:1d:ce:9a:9b:0f:c5:bc:40:b8:72:d1:d6:e3:
         41:a8:8f:96:0e:d9:52:8c:5e:55:b6:92:6f:ff:c3:95:a6:16:
         49:33:c8:be:ef:d5:58:1b:66:b4:1c:d0:ec:32:ec:0f:21:0d:
         01:32:77:70:47:61:93:7e:56:df:f1:87:2c:65:94:a2:b7:d7:
         cf:9e:79:31:b3:5d:9d:31:51:5f:9f:82:0c:9c:de:ae:54:0d:
         d7:03:61:a5:46:09:3e:84:a5:14:48:ce:52:b7:a3:11:b0:ea:
         3f:dc:f0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:21 2025 by rpki-client