Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/514f37a8-f9dd-3461-9c07-1b89920890ee.roa
File:                     514f37a8-f9dd-3461-9c07-1b89920890ee.roa (raw, json)
Hash identifier:          UbFVd0ktOWHf+J61wwO2KUni7Dduh5X3rZJIl2qqsfw=
Subject key identifier:   C2:45:17:C6:24:E5:C5:E9:97:72:33:22:55:2C:C2:69:8A:4E:97:2B
Certificate issuer:       /CN=ec23d019-d079-49df-94b6-ad79d138e90f
Certificate serial:       010D0C9F432858490E16C16D93972A3583A4B4C0
Authority key identifier: 7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/514f37a8-f9dd-3461-9c07-1b89920890ee.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     213073
IP address blocks:        23.187.144.0/24 maxlen: 24
                          23.187.145.0/24 maxlen: 24
                          23.187.146.0/24 maxlen: 24
                          23.187.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:c1:6d:93:97:2a:35:83:a4:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec23d019-d079-49df-94b6-ad79d138e90f
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=d5fd645f-a653-4dda-b0e7-2c1f374fd95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e8:63:f0:b0:32:c3:f8:19:27:ad:bb:58:48:
                    c4:bb:10:c2:2d:e5:35:59:d1:d3:5c:37:d7:41:40:
                    b0:d4:83:e3:37:37:e8:40:35:54:dc:c9:3f:31:18:
                    bf:f5:61:9d:92:31:f6:6b:8e:3e:c3:c8:c7:0a:63:
                    33:a9:4a:a2:ff:80:6d:51:93:89:0a:d1:06:ef:7a:
                    9f:98:78:13:8b:d7:6e:95:61:a6:59:c9:dc:e3:61:
                    05:93:fd:94:fe:ce:85:f4:c0:7f:23:59:c2:c7:80:
                    cf:02:40:35:f7:a2:00:ab:2b:3c:44:c3:08:ea:c8:
                    cb:2d:e5:8f:d6:55:bc:a0:98:bf:3d:10:76:3c:36:
                    18:ba:a0:39:d8:b0:fb:46:c0:ea:5c:5d:f5:a6:fc:
                    e4:37:af:62:79:d6:b8:5c:94:8a:7e:a1:81:fe:5d:
                    c3:a4:f8:ae:13:72:63:16:45:14:3d:cf:2c:00:c5:
                    51:94:b7:69:2a:36:3e:ca:0b:6d:3e:cf:a1:32:d2:
                    f0:e5:0a:a7:df:aa:80:2e:79:9a:89:bb:0f:d2:4e:
                    8d:02:45:d0:92:b5:33:9e:fd:65:12:03:8c:ce:97:
                    0e:cd:94:e1:0b:5a:94:15:ed:3d:e8:0a:74:a5:8f:
                    b8:4b:e8:ad:9a:a1:36:d7:4e:37:00:92:4b:c1:37:
                    df:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:45:17:C6:24:E5:C5:E9:97:72:33:22:55:2C:C2:69:8A:4E:97:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/514f37a8-f9dd-3461-9c07-1b89920890ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl

            X509v3 Authority Key Identifier:
                keyid:7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:fb:5d:f2:ce:ef:fe:0d:95:12:50:97:45:a8:4d:32:e8:50:
         98:38:44:7e:aa:eb:fe:87:2c:39:7e:ef:3f:66:09:b7:60:53:
         0a:47:34:11:19:b7:9f:dd:0c:41:7a:33:68:81:2e:c1:bd:6e:
         f8:01:d5:38:09:2c:ba:5c:1e:5c:9d:ac:7b:ac:39:95:e5:6e:
         ed:70:17:97:d7:5b:1c:67:8c:8e:31:01:07:32:2a:d5:a8:64:
         40:04:b5:c0:45:e0:2f:fd:a1:cf:a3:57:49:17:31:f3:2a:ea:
         e3:77:af:bd:ca:7e:db:cd:dd:ce:a4:ca:a2:47:88:29:d3:bf:
         a5:1d:77:ea:3c:b0:e7:47:54:92:dc:fd:57:dd:48:d5:7d:b2:
         ad:e6:65:21:79:0c:7c:66:26:17:4a:fc:58:3a:52:81:9b:f8:
         1c:1e:60:a7:1d:53:f4:3d:bc:4a:f9:28:b9:7b:5b:36:fa:f8:
         06:02:b9:8b:ea:50:74:76:25:4a:b5:70:dd:c3:f4:57:0c:11:
         40:d4:7a:93:ff:11:52:ab:58:78:96:59:19:93:78:f0:bb:10:
         40:2c:af:3b:c2:a9:51:71:3b:b6:19:77:aa:d1:02:84:7c:34:
         30:d6:c9:d0:4f:96:a9:e7:a0:c9:a6:9b:6d:0d:85:6e:c9:40:
         74:a1:17:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:10:37 2025 by rpki-client