Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa
File:                     075439ad-b463-39da-bd19-5d02bddea01e.roa (raw, json)
Hash identifier:          1THzeRhMcz6zF3G/EdheIsuBLU3ckV36ZAlIKkj86hY=
Subject key identifier:   C1:AC:D9:5F:88:6B:FC:D7:1B:4B:8C:60:12:7B:98:D0:66:89:39:C5
Certificate issuer:       /CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
Certificate serial:       010D0C9F432858486D9051F45858E1D6D82A17E0
Authority key identifier: 8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     212524
IP address blocks:        23.155.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:51:f4:58:58:e1:d6:d8:2a:17:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=3767d7e4-9522-42c3-94d3-0809bbebc4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b6:01:bb:55:ef:bb:0b:38:c3:13:f3:69:39:
                    19:ff:41:35:f3:72:33:51:98:a3:bd:44:ea:c0:51:
                    1a:c6:db:90:bd:26:c7:1c:29:75:39:f3:dd:86:85:
                    c1:f2:d8:e0:2b:ef:b8:05:32:a5:81:a1:e1:68:44:
                    09:8c:58:a9:a9:9e:dc:03:34:7b:c6:9d:b2:7d:30:
                    0b:cc:1c:7e:0f:65:83:42:a8:d4:8d:51:7f:e9:bc:
                    99:13:15:30:5c:44:8f:35:70:0d:e1:3d:3d:7e:c3:
                    70:da:cf:30:ec:ea:ea:0c:a4:2d:79:ed:3a:66:b3:
                    b6:3c:5f:a6:d0:55:f6:9c:eb:52:0c:05:2d:e6:b2:
                    de:5d:93:58:25:eb:5f:aa:7f:65:fc:65:59:87:c0:
                    3e:54:52:07:ad:9e:65:a4:97:bd:f8:91:28:40:71:
                    87:b8:1a:13:cc:a0:3f:fa:fc:f1:f0:e8:f5:d4:07:
                    24:65:2b:2c:63:c9:d7:8b:50:e6:20:7b:d1:07:6c:
                    83:8c:a2:0a:a3:1d:04:58:2c:7d:a1:28:1c:df:7c:
                    2b:f3:d5:b5:d2:83:81:80:0c:91:49:47:a0:ca:04:
                    ba:0f:13:dc:d7:4b:b6:96:96:1d:f1:7e:5a:ce:75:
                    dc:4a:96:b9:27:97:03:40:d6:52:31:c8:9b:4c:89:
                    b1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AC:D9:5F:88:6B:FC:D7:1B:4B:8C:60:12:7B:98:D0:66:89:39:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.crl

            X509v3 Authority Key Identifier:
                keyid:8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:66:ca:b6:56:85:29:1b:86:46:5d:93:ca:d5:7c:b8:21:01:
         b3:cd:53:48:ab:2a:47:eb:5b:03:b9:05:16:bc:2b:23:ae:71:
         cb:6a:ef:21:31:af:e4:7d:0e:9d:5a:44:26:33:73:57:df:4a:
         20:87:f2:22:ef:66:03:10:3c:1c:6a:80:1e:b8:ad:c6:c4:c3:
         9b:3d:6e:73:8c:0a:79:6e:5d:ca:8b:80:4a:f4:2f:e2:a0:8b:
         39:fa:79:38:53:e7:34:3a:af:c1:3e:ec:72:17:61:53:6f:20:
         7f:a5:a1:fc:26:53:54:fc:59:1d:26:62:3d:20:ec:9c:ef:1c:
         0a:9f:51:9a:8f:3a:40:de:2d:2f:dd:72:68:8a:c8:a3:7f:7c:
         71:c0:59:d2:df:1b:d1:ec:28:7b:1f:29:88:55:34:7c:97:dc:
         55:a8:91:8f:0c:ba:63:d5:8b:64:4f:19:52:8c:00:af:c2:b6:
         43:10:aa:76:24:36:23:db:5f:2d:73:43:39:65:aa:71:69:41:
         a2:8a:37:36:cd:52:22:6c:04:0f:95:f6:42:46:33:cf:38:5c:
         dc:df:0f:ee:8f:c8:79:46:c0:14:08:e2:e4:f3:dd:b3:91:1f:
         53:d3:4a:19:3d:fb:4e:30:1b:0a:0c:c2:f1:1d:88:8b:47:32:
         49:a6:a8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:05 2025 by rpki-client