Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/46502092-3ada-3896-9482-bfa502d83156.roa
File:                     46502092-3ada-3896-9482-bfa502d83156.roa (raw, json)
Hash identifier:          1+cy6akFEuA2fDEw/jGrAiaONkZHGE77AJ9njgwWauY=
Subject key identifier:   87:61:9D:7D:66:C7:12:07:61:C2:60:AB:9B:5B:21:B6:78:9A:4C:5C
Certificate issuer:       /CN=7df7e023-145a-4cd7-8721-998050ab91e2
Certificate serial:       010D0C9F432858491246CDD88F3F3DBD4896F380
Authority key identifier: 78:2D:65:31:23:A4:D4:35:35:F5:89:BA:CB:56:D1:0C:58:E3:56:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/46502092-3ada-3896-9482-bfa502d83156.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     11848
IP address blocks:        23.174.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:cd:d8:8f:3f:3d:bd:48:96:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df7e023-145a-4cd7-8721-998050ab91e2
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=3a770957-7b7c-4dc2-86cb-28d567dbacd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:55:bb:b9:d7:6f:c9:f3:9e:48:53:85:b0:07:
                    46:1c:55:2c:fa:3c:0d:fc:dd:d2:8b:3f:9f:71:9f:
                    a7:d0:a6:91:09:5f:c2:a6:e1:21:3a:ed:c5:03:ab:
                    cc:3b:60:42:e4:f3:9b:9d:26:1f:e1:d8:24:d5:f4:
                    b7:1a:ee:97:8a:5c:cf:63:b6:d7:44:89:4b:a3:62:
                    25:c3:de:3f:07:3e:02:27:44:79:f1:53:ab:b3:ed:
                    b5:1c:72:22:33:42:0a:96:39:59:bb:12:4a:3c:75:
                    d9:36:e4:b7:89:10:98:f3:39:7c:e2:09:2b:90:e7:
                    30:6d:69:85:19:61:8b:97:2a:9c:c2:6c:be:03:51:
                    5f:5c:f4:89:0d:6b:b6:af:f1:79:4b:e8:d2:d0:d3:
                    17:6d:b3:a3:b1:3e:17:34:9a:48:87:0b:84:e4:ba:
                    e3:61:77:c2:4b:cb:3c:da:aa:4e:1b:8f:bf:a6:7c:
                    16:73:3a:45:e7:c9:dc:af:43:79:7c:d0:8a:63:c1:
                    6b:aa:75:b7:c4:a9:33:7e:b2:ee:3a:19:bb:17:94:
                    1c:16:9a:ba:a2:5b:c7:63:66:11:0e:80:d6:08:34:
                    ee:d0:b9:5a:3f:39:ea:1e:94:86:62:b0:17:48:e3:
                    52:03:eb:a3:1f:cd:bb:ec:f8:36:ca:cb:78:b7:a2:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:61:9D:7D:66:C7:12:07:61:C2:60:AB:9B:5B:21:B6:78:9A:4C:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/46502092-3ada-3896-9482-bfa502d83156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.crl

            X509v3 Authority Key Identifier:
                keyid:78:2D:65:31:23:A4:D4:35:35:F5:89:BA:CB:56:D1:0C:58:E3:56:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:58:71:1c:47:e4:a6:dd:c1:13:e1:38:13:93:4f:f9:22:92:
         ce:a0:d7:0c:2d:4d:a6:cc:98:7d:85:e3:ee:4a:0d:e9:d5:4e:
         47:f8:73:70:bb:b8:72:4f:61:31:bc:6d:db:50:81:f1:c6:27:
         82:38:73:c3:96:e3:d5:45:5c:83:32:0d:07:4a:8b:7f:f2:e1:
         ff:2d:9c:4c:80:ba:89:35:ce:5b:af:e9:33:5f:7f:f0:5a:7b:
         be:97:24:77:5a:51:95:3f:58:b8:7f:4a:53:4d:11:9b:87:c5:
         a9:d7:dc:49:e8:11:0c:4a:67:dc:1e:b7:8f:14:21:8e:73:c2:
         64:b7:d1:aa:9c:20:d7:c5:23:89:fe:bd:29:33:84:63:4c:94:
         8d:ed:c0:f6:c3:56:a4:99:9a:f5:d5:e1:33:fd:55:15:bf:32:
         89:b7:5b:73:d9:7f:7e:35:5c:a2:87:5d:be:82:04:fa:67:98:
         91:29:bd:27:cd:c2:45:8a:60:4d:e6:14:3a:da:48:52:d5:81:
         12:51:0f:6d:12:6c:b2:27:58:ad:4f:1e:c3:8e:23:e4:ef:3b:
         ac:03:e5:94:7b:67:92:ff:74:37:51:ab:0c:7c:77:d4:7e:d9:
         d8:93:cd:f2:71:59:e5:a5:89:94:67:a2:39:f0:bb:09:f3:26:
         68:6b:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:26:00 2025 by rpki-client