Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/75993218-d7fb-4e29-8dd5-131d1c9fc6e0/ea763564-8b27-3bc1-b1dd-71fb7c9f2cdb.roa
File:                     ea763564-8b27-3bc1-b1dd-71fb7c9f2cdb.roa (raw, json)
Hash identifier:          dTWPYZ935UBhEEp0GgRciJ2lYkDtEGU6+5icCl6KBcg=
Subject key identifier:   7D:52:73:59:D5:15:A7:14:2C:84:DB:4D:CA:AB:F0:10:BB:92:35:6F
Certificate issuer:       /CN=75993218-d7fb-4e29-8dd5-131d1c9fc6e0
Certificate serial:       010D0C9F4328584898D603DBB312BAC82B8EF440
Authority key identifier: 90:6F:C5:37:07:2F:48:37:2C:AA:BF:B8:45:2F:CE:54:A4:51:87:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/75993218-d7fb-4e29-8dd5-131d1c9fc6e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/75993218-d7fb-4e29-8dd5-131d1c9fc6e0/ea763564-8b27-3bc1-b1dd-71fb7c9f2cdb.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        23.139.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/75993218-d7fb-4e29-8dd5-131d1c9fc6e0/75993218-d7fb-4e29-8dd5-131d1c9fc6e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/75993218-d7fb-4e29-8dd5-131d1c9fc6e0/75993218-d7fb-4e29-8dd5-131d1c9fc6e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/75993218-d7fb-4e29-8dd5-131d1c9fc6e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:03:db:b3:12:ba:c8:2b:8e:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75993218-d7fb-4e29-8dd5-131d1c9fc6e0
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=5835b222-eb2f-42aa-b22a-485ef2eeb652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9d:78:c5:fa:35:a8:85:25:a4:14:8f:f5:4b:
                    05:cc:b0:39:3b:77:9b:48:8a:ff:4a:d8:5a:9a:8f:
                    53:32:26:57:ee:85:e9:8a:1e:55:c5:e7:f3:99:84:
                    0a:3a:a5:6a:b3:52:ce:eb:12:50:ca:e9:52:02:c8:
                    85:1c:ee:95:6d:05:12:bf:01:88:97:70:66:93:f5:
                    87:7c:36:5d:62:11:01:52:9e:f7:1d:be:a1:f8:f1:
                    d5:54:aa:01:60:f6:1b:9c:27:7e:57:d5:2d:88:bd:
                    73:b5:47:f0:74:e0:06:42:da:b4:79:a2:51:39:18:
                    99:33:ec:4e:2a:2e:95:03:d2:7b:3e:37:a8:b3:0b:
                    98:94:7c:17:e7:b7:ec:2a:3b:12:b4:2c:1b:91:4c:
                    f6:7f:1e:bd:27:05:33:f6:cb:9a:b2:b4:4f:6e:e8:
                    e2:79:dd:93:d9:65:82:8d:ae:fa:ef:57:ff:de:98:
                    76:60:b7:92:7a:1d:3d:76:93:92:94:38:29:29:77:
                    6f:ce:24:92:f2:0a:37:37:25:38:b0:fa:ce:ab:1f:
                    10:4c:8a:6f:de:a6:a9:ec:98:a7:9f:45:2d:65:8f:
                    0d:1f:0e:48:3c:d3:0c:19:88:37:e3:09:ee:c6:c8:
                    13:9b:3f:8f:97:17:38:54:26:89:c4:ef:32:76:b9:
                    f2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:52:73:59:D5:15:A7:14:2C:84:DB:4D:CA:AB:F0:10:BB:92:35:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/75993218-d7fb-4e29-8dd5-131d1c9fc6e0/ea763564-8b27-3bc1-b1dd-71fb7c9f2cdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/75993218-d7fb-4e29-8dd5-131d1c9fc6e0/75993218-d7fb-4e29-8dd5-131d1c9fc6e0.crl

            X509v3 Authority Key Identifier:
                keyid:90:6F:C5:37:07:2F:48:37:2C:AA:BF:B8:45:2F:CE:54:A4:51:87:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/75993218-d7fb-4e29-8dd5-131d1c9fc6e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7f:1f:39:82:87:c3:64:bd:36:a3:40:9f:f0:fb:cd:22:46:
         64:d7:b9:4f:bd:c6:a3:2b:20:21:58:2f:5b:8d:21:21:34:15:
         d1:f8:71:e1:56:da:9d:0e:52:f5:ca:0b:19:bd:94:15:2b:3b:
         45:df:e2:88:03:8e:4e:3d:3c:da:71:ab:dc:09:71:1d:dd:75:
         a8:73:8e:90:ad:a7:cc:ae:48:47:15:99:a1:e2:01:fd:cf:08:
         fd:94:52:15:82:52:90:15:67:cc:3e:7b:d8:92:bf:14:77:d3:
         f5:1d:20:73:d3:61:93:18:38:58:40:b6:a7:b9:64:cc:1c:d4:
         86:1e:33:9d:c4:0f:ae:5c:d6:7a:73:9b:89:eb:2d:c4:24:7d:
         61:15:24:c2:9b:d4:c4:61:37:c1:7f:0c:6b:2f:2e:a1:2d:bd:
         4b:e9:b8:a9:0c:9c:16:57:ed:9f:f6:84:56:25:5c:32:ad:54:
         ce:02:d6:17:21:aa:23:51:28:95:55:dd:54:2e:8a:c6:cb:ef:
         51:17:38:a7:8f:35:e3:2d:a4:26:d4:2e:04:0f:34:3a:12:8b:
         c3:58:5a:53:d6:aa:ca:42:31:b1:fe:89:7b:36:f3:50:fe:dc:
         44:4d:c0:44:8f:91:cd:22:cb:98:d9:13:5b:2e:75:d7:1c:8a:
         e6:57:46:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:56 2025 by rpki-client