Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/73d1d4e2-0cee-3a1e-9534-dcbf7e868732.roa
File:                     73d1d4e2-0cee-3a1e-9534-dcbf7e868732.roa (raw, json)
Hash identifier:          eYSTTSoEbl8vFKG7qwlPOrPmZ+MuGKbR8l7hD2lQVvY=
Subject key identifier:   0B:4E:7C:CD:E8:26:D2:18:F5:A0:12:89:69:A0:63:6F:DF:40:78:37
Certificate issuer:       /CN=e8950c3d-3b43-45b8-93cb-fbf99568c311
Certificate serial:       010D0C9F43285848DBD66E6EA62859FFA5DA3A80
Authority key identifier: 70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/73d1d4e2-0cee-3a1e-9534-dcbf7e868732.roa
Signing time:             Wed 12 Feb 2025 14:00:53 +0000
ROA not before:           Wed 12 Feb 2025 14:00:53 +0000
ROA not after:            Tue 13 May 2025 13:00:53 +0000
asID:                     394868
IP address blocks:        23.174.0.0/22 maxlen: 24
                          23.174.4.0/24 maxlen: 24
                          2606:e780::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:db:d6:6e:6e:a6:28:59:ff:a5:da:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8950c3d-3b43-45b8-93cb-fbf99568c311
        Validity
            Not Before: Feb 12 14:00:53 2025 GMT
            Not After : May 13 13:00:53 2025 GMT
        Subject: CN=bd00277b-ace0-44d1-bf7e-c5541529ce19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:10:0b:d2:10:03:16:a8:79:54:ba:89:ce:
                    9a:b4:56:05:04:ad:12:9f:0c:82:4a:6c:5c:4d:4d:
                    3e:89:4d:7d:2a:83:15:9b:21:75:8d:be:2d:3d:9b:
                    10:6a:a8:bc:90:80:4a:d9:ef:91:85:0f:e6:f4:4b:
                    eb:06:9b:6d:85:d1:04:72:fe:96:ba:1e:28:ef:fa:
                    e7:d8:3d:4a:9c:c1:9e:82:91:cb:74:51:68:01:22:
                    5e:d6:26:57:ae:8c:c6:d7:ea:01:64:98:b2:d8:e4:
                    f2:d0:9e:af:ba:bc:fc:75:9f:0e:23:e0:7a:8a:6b:
                    57:c6:86:02:19:c5:33:31:53:bf:fa:0c:88:3a:d6:
                    44:f4:8d:f7:93:44:23:0c:6b:ba:47:07:44:ed:49:
                    25:9c:73:32:61:72:21:23:6d:47:0a:5b:f5:4e:c1:
                    fc:3e:67:63:76:50:06:43:78:2e:4a:86:39:ea:cf:
                    59:2f:7b:b0:b7:a1:ab:20:90:d7:d4:f7:9c:ce:2a:
                    18:9c:e9:31:a7:67:c8:ca:47:6e:38:35:d2:75:88:
                    2d:c9:19:c6:7e:57:bf:91:c0:0b:14:0b:f4:dd:3f:
                    1e:1c:f8:fa:1c:1a:e4:4e:47:0e:d7:43:aa:8b:89:
                    43:d0:fc:fc:6b:57:9a:0f:bc:d4:f1:b8:e9:bc:1c:
                    be:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4E:7C:CD:E8:26:D2:18:F5:A0:12:89:69:A0:63:6F:DF:40:78:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/73d1d4e2-0cee-3a1e-9534-dcbf7e868732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.crl

            X509v3 Authority Key Identifier:
                keyid:70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.0.0-23.174.4.255
                IPv6:
                  2606:e780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:1c:46:e8:b4:0d:3f:bd:5b:5e:45:00:b1:18:d7:f2:08:4e:
         a2:25:55:b4:39:9e:f3:50:89:3a:30:f2:e3:44:0d:47:af:15:
         d4:b7:55:6a:97:c1:fe:68:1a:5c:e3:f9:58:4d:5e:44:44:78:
         d8:13:47:39:dd:d5:3e:1b:2d:db:ee:98:14:e5:fc:b5:c4:a0:
         b4:47:42:8a:e7:98:2b:b3:51:30:75:49:7d:21:69:7f:7b:fd:
         04:22:df:92:12:af:db:7e:02:dc:d6:a0:5c:3f:a9:99:34:60:
         54:3a:c3:2a:28:9d:f0:83:a2:c9:c9:58:d0:c1:e7:09:dc:58:
         09:f2:85:cb:84:cb:bd:22:57:59:cd:49:d4:52:49:7d:5f:32:
         05:5c:18:43:2f:e8:7e:81:93:51:b2:d6:3d:9c:14:a8:0d:14:
         62:f5:e1:e7:57:22:33:2b:79:40:16:8b:ac:e0:c9:e6:92:b3:
         c9:9e:07:e9:39:58:3b:83:1c:bd:c7:3e:01:1c:ee:76:c7:46:
         88:ce:71:86:e1:55:cf:c3:40:9b:63:25:fa:4f:e5:b8:62:3d:
         69:7b:42:7a:5e:da:17:ea:a6:10:13:65:d7:a1:a1:f9:4f:0a:
         e4:09:eb:fd:3d:84:36:71:45:68:9a:93:c3:aa:3b:e4:ac:3e:
         d9:bc:4d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:39 2025 by rpki-client