Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/45e67d4c-4908-3ccc-98db-0d69fd833261.roa
File:                     45e67d4c-4908-3ccc-98db-0d69fd833261.roa (raw, json)
Hash identifier:          HK7CCC8usy1ZDOtmUIy6pDIPmrgaKs5lwCbDZpbQ54o=
Subject key identifier:   D7:BD:16:64:EB:09:11:BA:75:98:47:EB:BC:78:53:7F:33:C3:1C:59
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F43285848C580F622812080EEDF0F1500
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/45e67d4c-4908-3ccc-98db-0d69fd833261.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     11870
IP address blocks:        167.23.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:f6:22:81:20:80:ee:df:0f:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=4318ae05-ff47-4db1-adff-01714dae50e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:8c:d4:b6:63:e0:34:a3:a4:9f:68:7b:d0:
                    1a:9d:cf:c7:eb:61:b1:ec:e8:d6:51:3e:be:85:3b:
                    05:b0:00:14:df:90:ec:f9:a2:23:0a:38:37:8c:89:
                    9a:51:79:48:f0:c5:70:68:a3:b8:8e:a3:44:6e:e4:
                    ea:53:31:96:74:aa:43:6c:8c:bd:e1:5b:e1:d3:81:
                    4b:6f:1c:67:69:18:e6:fe:ac:58:62:85:2b:a0:99:
                    47:1c:fe:be:ff:e4:c4:cc:8a:cd:68:c2:66:8a:32:
                    94:ba:b1:0e:c4:d2:d0:8b:92:4f:63:ce:12:a5:dd:
                    9b:a3:aa:0b:43:68:58:73:a9:8f:15:71:51:a7:03:
                    f1:28:2f:ce:39:21:4e:cb:99:70:6c:9b:55:00:40:
                    e4:39:8a:a5:d4:ab:f9:c8:d6:48:1b:78:79:83:62:
                    02:a0:a1:9f:26:53:75:ef:dd:99:5b:d4:ae:25:bd:
                    ab:0b:0f:ee:22:b6:4e:63:fb:1c:d2:72:54:34:b3:
                    3f:82:2b:54:3e:23:ff:fc:e2:2d:ae:df:d0:8f:90:
                    0f:fa:42:cc:fe:f4:68:d9:8a:ad:94:b1:9d:f6:97:
                    8d:f4:73:a0:09:cc:5b:ca:4a:47:8f:6c:3f:9c:dd:
                    2a:c8:5c:b6:d0:97:d3:9c:fd:f8:4c:cc:49:8a:bc:
                    75:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BD:16:64:EB:09:11:BA:75:98:47:EB:BC:78:53:7F:33:C3:1C:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/45e67d4c-4908-3ccc-98db-0d69fd833261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:3c:ec:87:a1:6f:96:2f:4d:84:ea:6b:6e:1c:ff:76:d4:15:
         48:2a:5f:72:4a:64:fe:9c:3b:58:4b:61:40:2f:4d:60:06:69:
         3c:96:9e:8e:13:6b:20:01:f7:e4:24:6f:00:fa:45:1d:7d:a9:
         d2:79:07:ea:2b:00:8d:ac:b8:56:c8:ca:a0:5b:69:52:44:79:
         f4:be:61:ba:90:46:de:fc:93:e8:4a:f2:05:3e:1d:a6:5c:d0:
         e4:88:c6:a5:da:54:d2:03:ab:cb:f3:c9:1a:0c:21:b4:f1:d1:
         e0:86:c5:70:95:aa:70:c3:42:13:be:40:91:0e:5d:36:53:55:
         14:9b:09:61:bf:43:56:eb:f9:1f:81:0c:d4:9f:2e:2a:2b:9d:
         a8:02:62:ca:55:28:f1:58:d5:cd:f6:53:5b:4e:f6:31:c4:50:
         3d:f5:13:02:35:60:27:f4:0d:cb:79:47:bd:fd:33:9e:67:c0:
         bf:05:b7:62:2c:f4:b5:7f:02:3e:11:f5:0c:d1:c9:34:56:9d:
         1e:44:a1:cf:21:75:5b:bb:77:47:93:56:27:bf:ae:bb:c3:dc:
         46:68:ec:4b:ab:4a:58:17:51:e6:ec:30:51:6d:c4:9e:83:db:
         ff:5c:43:bb:9e:65:c7:cf:7f:11:ef:4e:17:d5:36:95:b3:4a:
         71:10:2c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:42:33 2025 by rpki-client