Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/3971871e-fda7-3ecf-a1d6-4ef7cf417e2d.roa
File:                     3971871e-fda7-3ecf-a1d6-4ef7cf417e2d.roa (raw, json)
Hash identifier:          qZ5hlKXJ42srgkBThOxjNc4dErLmT9iJgDHpVrgcimE=
Subject key identifier:   C5:6F:76:83:F0:10:C7:B2:74:C7:17:7E:F6:9B:16:7F:26:1B:FB:9E
Certificate issuer:       /CN=86d41278-dbec-4ce1-a2aa-72427ed93680
Certificate serial:       010D0C9F4328584862658C12C554DB5035C62800
Authority key identifier: 89:3D:8C:5B:1A:3F:09:A2:DA:D4:57:63:26:C0:70:4A:67:1B:75:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/3971871e-fda7-3ecf-a1d6-4ef7cf417e2d.roa
Signing time:             Tue 31 Dec 2024 02:00:40 +0000
ROA not before:           Tue 31 Dec 2024 02:00:40 +0000
ROA not after:            Mon 31 Mar 2025 01:00:40 +0000
asID:                     393857
IP address blocks:        23.148.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/86d41278-dbec-4ce1-a2aa-72427ed93680.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/86d41278-dbec-4ce1-a2aa-72427ed93680.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:62:65:8c:12:c5:54:db:50:35:c6:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d41278-dbec-4ce1-a2aa-72427ed93680
        Validity
            Not Before: Dec 31 02:00:40 2024 GMT
            Not After : Mar 31 01:00:40 2025 GMT
        Subject: CN=b2a713da-e219-4ff1-a962-1ea2b6446fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2f:b1:71:3a:23:ca:68:fd:78:e2:e0:f4:df:
                    f8:16:e0:cc:23:31:7f:13:37:7e:f5:a0:ab:9b:5b:
                    75:5f:da:e6:82:96:64:e3:d7:48:ff:22:25:f6:44:
                    c1:03:84:68:82:26:73:cf:db:46:5a:bb:d9:2d:4d:
                    1d:48:07:6a:56:33:7f:74:4b:48:08:66:48:cc:88:
                    ee:e0:4f:ea:a2:73:22:d5:4d:ce:24:56:91:ad:e8:
                    61:08:bf:78:f9:12:c7:a2:88:7b:86:1b:a5:f3:2a:
                    26:99:6c:57:a6:05:32:2c:a9:69:28:25:5e:3f:fb:
                    59:be:2f:bb:b1:7f:36:d9:58:b4:e5:a1:56:2a:0e:
                    b1:5b:11:79:05:f8:c4:ee:d3:89:b7:97:08:bd:cb:
                    02:40:d8:c6:70:6d:9d:2b:66:3d:41:6d:eb:4e:c3:
                    52:1a:cf:d1:49:ea:5f:17:b9:25:61:8d:46:b8:27:
                    f7:b5:56:26:ad:74:07:c1:50:2d:a7:5e:f4:d1:3d:
                    26:10:4d:e3:9a:90:15:44:e7:fe:13:bc:9d:c8:76:
                    d2:39:82:57:d9:f8:95:7d:f8:ef:77:0e:76:cd:58:
                    8b:4e:59:2c:f3:db:6f:0d:a8:99:02:2b:53:d4:91:
                    97:a6:7d:c6:67:4e:a7:73:d7:22:04:2b:f5:d8:5e:
                    72:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6F:76:83:F0:10:C7:B2:74:C7:17:7E:F6:9B:16:7F:26:1B:FB:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/3971871e-fda7-3ecf-a1d6-4ef7cf417e2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/86d41278-dbec-4ce1-a2aa-72427ed93680.crl

            X509v3 Authority Key Identifier:
                keyid:89:3D:8C:5B:1A:3F:09:A2:DA:D4:57:63:26:C0:70:4A:67:1B:75:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c0:45:0c:d9:b5:3b:7b:bb:5d:fe:3f:77:57:e5:6e:e5:71:
         e5:0c:12:32:16:06:15:ce:4d:54:36:32:3c:ce:41:d4:e8:65:
         40:31:a1:29:bb:92:40:47:02:cc:f2:ef:8d:85:5e:b9:6d:39:
         bc:ae:36:45:fb:32:1b:e5:cb:df:6d:23:32:10:2d:78:b3:9e:
         ed:f3:f0:62:60:89:07:cf:b8:54:25:00:c3:09:2d:f3:97:93:
         54:04:66:1c:6b:64:da:ae:77:28:65:e7:ae:ff:48:c2:b9:7f:
         5e:d9:d2:3c:ce:55:53:9a:70:0a:0e:aa:d8:0d:9c:79:e4:28:
         7c:cb:46:33:3e:6d:c9:67:b8:be:e9:92:35:8c:0b:a5:02:91:
         d8:47:9d:e9:9b:0b:8b:f5:55:76:62:cc:52:cc:26:c1:05:0e:
         b2:fe:04:4f:60:72:90:1b:67:da:ce:88:bc:c3:a3:e2:4c:cf:
         8b:32:e9:7d:54:3f:4a:b9:0a:45:f2:e1:e7:aa:af:4a:e5:68:
         ca:1d:74:41:88:cd:6e:82:ab:39:3f:a6:ad:dd:0d:9e:6a:3c:
         75:e1:c2:6f:4e:34:59:de:68:b2:4c:73:47:69:79:63:b5:8c:
         0c:77:12:f6:c7:46:ed:ee:96:18:7c:07:5d:4e:31:57:bc:64:
         d0:43:d2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:03:56 2025 by rpki-client