Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/ed041596-6375-3f2b-bd7b-323afc0a0f85.roa
File:                     ed041596-6375-3f2b-bd7b-323afc0a0f85.roa (raw, json)
Hash identifier:          WxDUQt7nE45N8bsF3ecFIEfqsHzxbSw5OojmqRzoHvY=
Subject key identifier:   AD:FC:F6:1F:0C:2B:FE:03:42:7D:4F:6D:B8:28:BC:57:BE:C5:A8:57
Certificate issuer:       /CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee
Certificate serial:       010D0C9F432858489FD09A43D29FE51044FBC2D0
Authority key identifier: EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/ed041596-6375-3f2b-bd7b-323afc0a0f85.roa
Signing time:             Wed 22 Jan 2025 02:00:39 +0000
ROA not before:           Wed 22 Jan 2025 02:00:39 +0000
ROA not after:            Tue 22 Apr 2025 01:00:39 +0000
asID:                     399806
IP address blocks:        216.230.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:d0:9a:43:d2:9f:e5:10:44:fb:c2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee
        Validity
            Not Before: Jan 22 02:00:39 2025 GMT
            Not After : Apr 22 01:00:39 2025 GMT
        Subject: CN=b7ff67f3-07d0-4ee5-895b-d143f3ead459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:72:7c:87:b5:fb:9d:00:d4:b3:8f:b1:6b:
                    94:42:15:3c:60:0d:14:af:98:e8:b6:56:8e:81:73:
                    40:8b:d6:e2:0f:ac:9d:03:00:ed:2f:25:4c:40:84:
                    9e:0c:77:96:71:29:6d:53:cd:a7:3d:24:95:5a:a4:
                    b8:72:2e:8e:f6:86:14:fc:4d:ac:bd:1a:85:de:b2:
                    00:27:b1:6d:46:a3:73:6e:60:a0:e6:04:86:dc:d7:
                    72:e9:b7:84:2c:0c:5f:2a:6b:fd:a6:29:43:ea:e7:
                    81:4d:79:d2:04:80:49:91:f8:eb:06:3d:e7:2a:fe:
                    81:bd:14:5d:71:55:59:3a:cf:85:b1:14:62:b5:20:
                    3f:f7:88:53:69:fd:03:cb:a4:f0:0e:91:c5:b6:80:
                    36:4a:cb:2e:1e:25:fe:92:d4:ad:26:f4:cd:d8:a8:
                    20:5b:ea:ed:23:cd:b9:0c:24:a9:c3:c7:7f:11:0f:
                    07:af:3d:38:27:b0:15:85:03:ef:15:ef:9f:8e:5e:
                    54:e3:47:1b:5c:c6:ba:c9:e3:90:25:bc:7d:80:20:
                    b7:87:23:52:89:6b:0c:dd:94:e9:68:51:a8:42:96:
                    3e:d4:f0:76:45:8e:ae:cb:10:a6:72:ba:51:90:b7:
                    64:8c:35:bf:87:40:76:ee:17:dd:94:d4:35:9f:39:
                    fc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FC:F6:1F:0C:2B:FE:03:42:7D:4F:6D:B8:28:BC:57:BE:C5:A8:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/ed041596-6375-3f2b-bd7b-323afc0a0f85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl

            X509v3 Authority Key Identifier:
                keyid:EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d4:3d:3d:54:e3:3c:8d:c2:dd:ce:1d:68:db:8d:e8:97:5c:
         bb:ac:a1:af:46:c3:1b:00:25:c0:d6:3a:db:2e:97:73:5a:63:
         f0:26:e6:ea:43:57:d4:10:34:c8:af:37:9e:c5:e5:32:bb:aa:
         1f:60:84:fe:10:c8:f9:93:99:25:eb:da:ee:01:43:63:4f:43:
         f3:dd:02:c4:75:d7:60:f2:df:ea:20:78:5a:5d:ff:e5:41:d1:
         7f:51:aa:f2:54:b9:ff:f5:90:8c:f4:27:41:66:e7:ef:62:5f:
         e6:46:af:47:59:9a:a2:b0:91:b9:94:d8:1a:e5:bf:b8:af:d6:
         44:ae:72:c4:09:84:8d:40:08:b1:87:c2:8f:81:3e:4f:6f:b8:
         a1:47:af:23:fa:75:e1:3e:53:38:98:75:6f:4f:6f:34:f0:8a:
         7d:f0:dc:6d:53:a3:6c:19:7f:1a:90:9b:2b:9b:81:a8:14:48:
         9a:8c:e4:6d:ce:95:5e:37:35:99:52:1d:a2:18:31:f0:84:dc:
         d2:4e:d5:67:d6:f0:12:b3:e0:21:c3:bc:b3:5d:7f:a6:23:89:
         16:12:7b:38:d7:24:ef:bd:f1:bd:47:11:70:eb:e9:c8:55:13:
         75:20:49:f7:28:89:b9:91:cb:d9:21:af:df:59:e2:7c:21:6b:
         a9:00:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:59:02 2025 by rpki-client