Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/30528c85-cc5e-3c02-b764-0e2ec04f69c6.roa
File:                     30528c85-cc5e-3c02-b764-0e2ec04f69c6.roa (raw, json)
Hash identifier:          2V2KMpUo4UJ6Fu4YqI9n0eNAhSy4G/1Lkf0iQ3lLtiY=
Subject key identifier:   11:72:19:9F:60:45:94:A6:8D:CB:03:4D:02:A6:86:5F:7A:5B:C9:7D
Certificate issuer:       /CN=09fb7d57-7876-4e3a-b055-3534010fc6a9
Certificate serial:       010D0C9F43285848D0ABB0E8384E4E72612ABF00
Authority key identifier: 96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/30528c85-cc5e-3c02-b764-0e2ec04f69c6.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     133199
IP address blocks:        23.157.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:b0:e8:38:4e:4e:72:61:2a:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fb7d57-7876-4e3a-b055-3534010fc6a9
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=59d1296d-6637-4f70-871e-6d408453636e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:98:d2:e7:de:91:01:4a:7a:da:83:4f:6c:e6:
                    20:64:69:0b:19:13:72:b7:0b:c5:b5:e1:8d:07:fa:
                    7d:68:db:7a:81:1a:37:b4:67:ea:38:50:62:07:6c:
                    dc:2e:0c:c8:96:b4:8d:5b:89:3c:28:23:81:be:65:
                    ff:1e:89:f2:7a:44:89:3c:ee:ec:1f:51:6a:ed:36:
                    72:14:1b:71:c0:7b:1c:e3:82:24:8a:29:c0:10:52:
                    f3:88:f9:0f:66:97:4a:bb:a1:77:c1:37:98:92:95:
                    2c:f9:83:88:05:42:4d:40:9f:30:fe:cb:50:e2:a3:
                    50:9e:d9:c8:56:92:5d:3d:a5:ec:46:ef:02:f4:d2:
                    b3:e3:e3:1c:88:d5:69:73:49:ec:aa:42:26:0a:73:
                    6f:fe:d5:b2:61:c1:b2:9f:41:1b:27:d6:e0:6e:41:
                    7f:a5:a0:97:30:dc:a8:f5:32:ff:c2:ce:c3:27:43:
                    63:ea:b3:e4:c7:0a:a8:b8:f8:5c:3a:48:4f:2b:a3:
                    39:e8:c7:fa:fa:fb:b9:30:70:99:da:1a:99:70:3d:
                    dd:fe:fe:42:e7:e4:2b:ce:e1:48:e7:15:6a:bd:f9:
                    bd:f1:f5:fd:14:62:82:e5:53:87:2c:54:2b:4c:6f:
                    71:1f:8d:db:5a:e7:51:be:61:8d:d2:2b:de:60:52:
                    53:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:72:19:9F:60:45:94:A6:8D:CB:03:4D:02:A6:86:5F:7A:5B:C9:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/30528c85-cc5e-3c02-b764-0e2ec04f69c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.crl

            X509v3 Authority Key Identifier:
                keyid:96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:81:d4:8b:b9:6a:0c:79:e0:16:3d:f9:e7:17:9b:4e:8c:b3:
         a1:3c:9c:e3:af:d8:0d:b4:12:6c:c6:24:a6:5a:72:8b:d0:17:
         84:f4:2a:a8:73:01:8f:59:c1:98:2f:53:25:d1:e4:b1:10:ac:
         eb:0a:b8:c3:58:da:55:f8:46:73:77:e0:e7:d0:97:14:bc:42:
         fb:15:50:ab:7b:4d:63:e9:15:96:c3:af:28:d5:2a:ec:7d:6d:
         26:ee:a1:4f:92:ef:2e:4b:12:b9:a6:12:3f:ac:ce:fe:35:ee:
         d5:6e:92:24:a5:b8:73:51:db:ff:39:d9:9d:74:7c:09:86:fa:
         ce:4d:50:f7:b3:84:83:14:96:ad:40:f3:72:39:65:57:5d:38:
         6a:d9:e3:0a:8c:7a:da:81:9b:cd:9f:f8:84:8d:c6:24:06:cf:
         31:fa:cb:64:bd:89:1a:bd:93:68:71:7b:f4:63:62:d3:3c:59:
         d4:09:05:c3:89:56:56:82:d2:e0:f9:1e:9b:8a:fb:dd:8b:87:
         5d:b4:b9:90:79:fd:17:a1:9f:e3:18:27:b8:52:1e:83:33:24:
         59:f1:1b:7f:15:15:ab:6c:09:62:fa:d9:7d:b3:4e:29:7f:e3:
         63:07:4a:5d:37:da:1d:e4:41:5f:d8:0a:ef:9f:e9:9e:d4:8b:
         8b:e2:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:34 2025 by rpki-client