Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/b69dba44-b52d-3b7d-b73a-0f59964dcdad.roa
File:                     b69dba44-b52d-3b7d-b73a-0f59964dcdad.roa (raw, json)
Hash identifier:          rv2hMcrsv+pACz3EPX1YS4ac+kAKlmSM4YRxnwxk9rQ=
Subject key identifier:   F1:59:A0:8A:0E:39:26:29:1A:5B:BA:03:FF:E5:5F:BD:A5:3C:A8:3F
Certificate issuer:       /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Certificate serial:       010D0C9F4328584944694ADDB43F567634840DC0
Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/b69dba44-b52d-3b7d-b73a-0f59964dcdad.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        23.165.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:4a:dd:b4:3f:56:76:34:84:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=dcbb1135-2577-45ff-9498-0e4d422dbcce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7b:16:19:14:42:0d:cc:1d:fd:c0:af:73:bf:
                    72:ec:21:35:7f:30:48:3c:6a:99:be:66:ca:75:29:
                    bf:d7:72:6a:b6:df:4e:1f:b7:bd:00:f7:1c:f5:73:
                    a2:35:bd:d2:48:7f:cd:25:e0:db:37:dc:b0:40:3e:
                    bb:ba:a0:9c:04:92:00:6d:a1:f6:ee:89:28:86:cd:
                    b7:44:06:62:3a:fe:97:2c:58:15:19:a8:c4:b8:e6:
                    c3:f4:72:9d:bc:4a:e9:18:f6:97:41:42:a0:2f:7b:
                    81:de:91:76:96:cc:2b:a7:55:e5:e4:f6:35:bc:c2:
                    13:b5:e7:58:c4:a2:27:6a:67:1c:4f:9d:5e:73:e7:
                    6c:c4:67:2c:e4:7e:06:ff:40:e8:86:7e:58:31:b3:
                    fa:23:63:e8:83:03:eb:9c:87:95:36:72:3e:e2:8c:
                    b1:05:0a:fe:83:56:ce:ff:a1:7a:d8:09:95:1b:69:
                    dd:02:f2:2a:0c:b0:86:02:68:ff:a6:16:2f:e8:43:
                    5e:4a:d0:7a:97:2e:c0:6d:6c:a9:7d:01:50:e4:b7:
                    ef:a4:eb:b0:76:3f:91:5f:d9:43:1c:ce:4b:68:c4:
                    5a:0f:e5:f3:c3:58:4f:af:81:ad:7c:55:a4:08:e5:
                    ea:08:43:61:18:ba:53:15:ae:32:3a:36:59:19:77:
                    2a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:59:A0:8A:0E:39:26:29:1A:5B:BA:03:FF:E5:5F:BD:A5:3C:A8:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/b69dba44-b52d-3b7d-b73a-0f59964dcdad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:60:9c:6c:38:1f:e3:a5:f2:f1:b3:bc:c4:33:34:c9:92:4b:
         a2:1a:e1:10:e6:2e:81:4f:08:99:de:56:0d:16:91:29:da:7d:
         01:4c:29:b4:41:37:64:f0:fa:be:78:f9:5d:1d:58:85:b9:fe:
         27:3d:59:08:03:4f:73:4a:fc:41:8d:3f:28:ad:48:2e:ef:f0:
         f3:66:6e:a6:07:a4:99:fc:0b:f2:d7:8e:92:1f:e6:20:0a:fa:
         19:ce:d8:d4:95:65:d3:78:76:f7:36:83:ba:36:9b:32:6a:27:
         7c:29:f5:a0:07:4b:a2:a2:dc:3f:b9:93:d8:84:2c:a4:e4:6b:
         1f:d5:58:4d:4d:c4:a6:6d:c2:60:c9:42:3c:65:c7:0d:1a:ec:
         cd:f8:08:5d:4a:65:b5:3f:28:09:f6:a9:cd:fd:ba:e8:dc:98:
         05:2a:8a:ab:9b:6e:c5:78:07:fa:3d:a4:be:8c:7f:80:f6:35:
         ed:4f:eb:60:e3:2b:07:35:ef:a8:74:51:75:08:82:cc:3b:df:
         62:2b:a4:c1:99:73:75:c3:c7:62:7c:6e:c4:c4:a1:17:96:a5:
         cb:2c:be:b7:7e:b2:01:9a:03:44:0e:cf:26:f5:3d:9d:44:9b:
         06:ec:1b:29:0a:31:d9:54:c0:39:69:21:5b:84:a5:91:dc:dc:
         62:ae:f2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:59 2025 by rpki-client