Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/e40247fb-ef5b-34d4-9838-7395b3a8ae81.roa
File:                     e40247fb-ef5b-34d4-9838-7395b3a8ae81.roa (raw, json)
Hash identifier:          Kzrhyop+h5KuLaSPxALRP0yQDzWjZFRcu6CY0hRPCW0=
Subject key identifier:   A1:36:C5:A0:BF:FD:F8:D0:D6:65:45:53:26:CE:70:FC:83:0C:43:66
Certificate issuer:       /CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Certificate serial:       010D0C9F43285848EC96A2BB42E98E16D2972900
Authority key identifier: 9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/e40247fb-ef5b-34d4-9838-7395b3a8ae81.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     19740
IP address blocks:        23.173.114.0/24 maxlen: 24
                          172.81.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:a2:bb:42:e9:8e:16:d2:97:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816b4d34-3880-4b72-b786-365fbdec8ba0
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=5d4ce0fd-0abf-460a-9097-7ad8be85ff42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f1:07:b6:7a:66:90:5c:4d:54:77:dd:62:c7:
                    56:6b:77:43:1f:47:a4:f0:90:0a:66:6d:37:94:95:
                    9a:35:48:5f:e9:25:0d:21:e4:c8:28:fe:bf:a7:dc:
                    86:0f:f7:41:63:22:e9:99:41:9d:c9:f4:ad:b2:6d:
                    8f:cb:99:56:16:0d:aa:33:67:4b:e2:c9:aa:3d:d9:
                    0a:60:73:59:03:3f:36:0d:b4:a5:3b:f8:05:99:cf:
                    90:af:fe:b0:9b:39:e2:1d:36:07:2e:01:e2:e0:12:
                    34:7d:52:43:2e:94:68:cf:f1:7b:78:d9:87:6e:a7:
                    91:d5:8c:49:f9:11:2e:85:4e:fd:ea:f6:b5:fd:66:
                    4a:27:6c:8a:08:bc:d6:7e:ba:fa:06:46:53:fb:de:
                    8e:cf:c7:0e:14:4c:f3:75:7e:89:de:e9:7d:fc:b3:
                    2c:dd:c5:f2:a7:14:bd:67:13:3d:db:b2:e5:b1:da:
                    7a:38:3d:ee:8f:d6:9a:7f:25:cc:aa:b6:57:1a:e9:
                    b4:ca:f6:d7:74:1f:4c:6e:a2:4b:c5:02:38:11:88:
                    18:e7:46:55:02:d2:ad:31:5e:5b:63:6d:fc:3b:1d:
                    7c:3b:65:63:9b:8b:a1:9c:82:db:68:2a:5c:b6:29:
                    b3:97:45:d6:8a:e1:9e:4e:07:06:79:db:40:8b:42:
                    fa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:36:C5:A0:BF:FD:F8:D0:D6:65:45:53:26:CE:70:FC:83:0C:43:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/e40247fb-ef5b-34d4-9838-7395b3a8ae81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.114.0/24
                  172.81.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:2c:3e:4d:57:98:3d:ae:2c:c7:c2:2f:e1:58:72:25:c8:e9:
         a7:d7:10:b8:60:94:af:47:2c:d1:a2:bc:87:bb:47:42:45:d0:
         29:1d:a6:31:47:24:39:91:8d:cc:a3:75:15:61:2b:e7:39:15:
         16:2a:ad:e9:3c:f4:c7:3a:f4:4c:fc:1f:64:54:66:84:88:85:
         b7:3c:d4:e6:9e:c3:24:46:c0:ea:5c:bc:8b:99:9f:97:ee:00:
         6c:67:59:89:e9:e5:bc:22:16:62:14:79:03:67:86:82:ca:1d:
         a9:5f:2d:d6:63:b3:ab:da:c6:0b:74:6a:56:62:ac:65:82:e2:
         62:b0:a6:a5:d8:00:2e:71:c8:4a:37:12:bd:59:fb:64:8d:6c:
         7d:26:08:8f:83:7b:86:f5:2d:65:9e:64:e2:f6:ee:89:7c:fb:
         3a:42:f8:52:fb:5a:b2:b3:e8:cf:cb:44:e3:46:27:d0:fa:2f:
         8b:6e:5e:65:a2:ff:f5:ce:83:d6:59:f3:0c:ec:c8:f0:53:d8:
         68:0f:ed:bf:1b:7a:ad:cd:ea:41:19:ac:9a:89:f4:dc:5f:d4:
         3a:c8:bb:7b:e7:d8:81:92:aa:0d:ed:36:53:45:8a:3b:f3:b3:
         f3:9a:69:6c:74:49:22:55:13:ab:ed:d1:1e:a5:25:de:c9:45:
         98:55:22:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:25 2025 by rpki-client