Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/1591f74c-28e6-3beb-a060-29508edef5ad.roa
File:                     1591f74c-28e6-3beb-a060-29508edef5ad.roa (raw, json)
Hash identifier:          kDUYXS5Y3THdwAyGiW6clWuODqmKQxR7Jt1KTLRxKrs=
Subject key identifier:   3C:2F:AA:37:CE:D9:8E:41:21:FA:22:A5:7E:61:89:FF:DB:8C:1C:23
Certificate issuer:       /CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
Certificate serial:       010D0C9F43285848B1F6302D3B94CA79E4504E80
Authority key identifier: 6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/1591f74c-28e6-3beb-a060-29508edef5ad.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     397423
IP address blocks:        23.173.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:30:2d:3b:94:ca:79:e4:50:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=b7d61a8c-9523-4b60-88f8-ef7be9215496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cb:f7:bc:90:b8:ad:6f:31:16:fd:ef:e5:c3:
                    05:99:d8:3f:48:d9:68:73:e3:29:d2:6a:20:3b:98:
                    30:cc:a7:f1:3d:dd:da:03:f5:cb:6b:56:57:ee:48:
                    cc:dd:13:ad:09:ef:61:cf:3c:2d:c5:31:b9:64:ec:
                    e1:91:a6:74:3f:9f:d4:cf:65:c8:48:f4:bb:8d:5e:
                    ff:83:31:78:f5:3f:c5:61:df:df:ec:fc:b9:cb:50:
                    1f:7e:8b:1b:0b:a8:11:58:38:a9:8d:07:50:47:ad:
                    d3:32:3d:a2:3a:c7:44:18:cf:5b:94:22:b2:0c:81:
                    46:94:55:29:e4:76:a2:51:36:05:76:a5:a1:0e:5f:
                    20:1c:6f:26:e3:bc:02:7e:3e:9e:51:03:63:0c:98:
                    ab:d4:62:41:55:ff:6f:51:d1:a1:79:11:9d:7c:cd:
                    67:07:4f:5c:5f:c9:6d:b1:1f:b2:3a:fe:9c:ce:b2:
                    21:29:6b:5e:28:90:3f:af:25:09:b5:9f:4f:4f:a9:
                    2e:d0:ea:93:2a:cf:29:45:33:d0:d8:05:4a:c8:94:
                    67:62:ef:ef:f7:35:d0:8b:de:9b:bf:6b:dd:30:35:
                    18:b9:a9:d0:a2:c5:d7:f7:04:dc:09:62:1d:5a:b7:
                    28:d1:fb:e0:ad:8e:ce:5f:07:c1:91:f4:c6:6c:cc:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2F:AA:37:CE:D9:8E:41:21:FA:22:A5:7E:61:89:FF:DB:8C:1C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/1591f74c-28e6-3beb-a060-29508edef5ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl

            X509v3 Authority Key Identifier:
                keyid:6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:00:2f:68:f8:b7:f2:30:ff:40:55:db:77:6d:6c:bc:fa:9f:
         c1:da:2a:b5:08:09:4d:a4:5a:62:00:85:0b:c9:d4:c4:cc:3c:
         f5:28:2f:d9:a5:e5:69:af:e7:82:61:dc:e7:d6:a0:22:97:8a:
         b3:e6:83:c1:9f:cb:d9:06:d6:a6:9b:1d:cf:2a:15:5a:24:cd:
         99:ce:92:2b:b1:59:f9:76:a1:35:8d:2a:fb:3a:4e:9a:55:30:
         3c:bd:bc:99:d4:44:e2:53:90:86:0a:2a:81:62:cc:0d:21:a7:
         ee:36:7a:98:84:05:5a:12:5c:e3:db:8e:33:0b:e3:93:3e:fa:
         59:c0:81:b9:ae:69:07:ab:c4:02:77:b5:35:d4:0d:51:30:93:
         f0:42:99:e9:95:fc:62:b6:e2:6b:9f:c5:28:46:21:31:14:84:
         69:35:aa:bf:45:3c:d6:c1:31:77:8e:e2:7e:58:ab:27:d2:d5:
         17:50:9f:bd:fd:ab:46:0d:32:e0:74:ed:16:cb:cf:54:f6:67:
         3c:54:cf:9b:12:9c:5d:12:20:d3:c8:53:e7:8a:49:b5:a5:69:
         bb:c3:80:32:b0:2a:0c:2b:d5:89:ba:8a:44:f1:7b:b5:da:51:
         be:b5:ee:3d:ea:88:f7:9d:c1:a2:63:96:ad:6f:13:e8:31:8f:
         6f:28:8c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:14 2025 by rpki-client