Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/2d240bf8-a342-3e66-989f-2f936fc0bf89.roa
File:                     2d240bf8-a342-3e66-989f-2f936fc0bf89.roa (raw, json)
Hash identifier:          NtmlpyDx+2DOS7PCCbMRzp9lbrmXxFMU+kxiUYKE0/0=
Subject key identifier:   C6:59:98:04:F4:21:52:47:54:7D:3E:FA:50:1C:95:E7:30:D5:20:5B
Certificate issuer:       /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Certificate serial:       010D0C9F4328584894A5EE408D11EE0FFFC8DE40
Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/2d240bf8-a342-3e66-989f-2f936fc0bf89.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     174
IP address blocks:        23.160.201.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:ee:40:8d:11:ee:0f:ff:c8:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=244690d4-2d50-4e6b-82b6-241fb407bb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:62:af:e1:d6:de:1f:2b:92:3a:96:33:3e:27:
                    cf:e8:dc:db:bd:b5:d3:4c:4d:ee:46:63:b5:b6:45:
                    aa:e8:8d:ba:d8:d5:ea:02:5f:40:b9:85:c7:c6:44:
                    d6:66:7a:72:5f:00:f1:9a:9d:89:7c:f6:75:2c:5e:
                    17:fc:56:89:b0:ea:f4:4c:53:38:b5:de:d5:99:dd:
                    9e:c4:22:21:50:2e:af:8c:36:67:2f:c3:67:ad:f6:
                    c0:13:c4:ef:21:20:3c:28:84:69:14:54:cf:01:a1:
                    65:ad:2a:f1:cc:c7:0f:8c:4e:86:04:9a:d6:ad:f0:
                    ee:60:f0:9e:ef:59:0d:aa:66:cb:c4:7e:75:a6:31:
                    e8:54:f5:51:83:05:f8:30:7c:b9:a2:c5:a2:dd:e8:
                    5e:00:99:62:b4:2f:a8:fa:01:4e:af:95:ad:5e:ac:
                    ba:cb:ab:08:82:57:89:b4:79:ea:8a:05:fb:50:7a:
                    36:ec:48:97:21:c2:75:c9:99:34:68:0f:c9:02:7c:
                    97:e5:9d:e6:c5:79:54:54:1e:9a:01:10:2a:45:f4:
                    9f:ff:69:8f:73:29:0d:be:48:28:1e:20:2f:b8:02:
                    a0:9f:b5:cf:31:f7:57:e0:01:3c:2b:b4:cc:b5:3f:
                    11:ec:db:db:92:f7:09:3f:74:2d:b8:61:1d:80:1c:
                    3e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:59:98:04:F4:21:52:47:54:7D:3E:FA:50:1C:95:E7:30:D5:20:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/2d240bf8-a342-3e66-989f-2f936fc0bf89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:bc:cc:a5:a4:28:bd:dc:57:b9:2d:e7:f2:41:14:86:6b:82:
         f0:f6:95:d5:89:b5:1e:6f:77:dd:04:cf:d5:aa:74:7e:a2:e8:
         83:b4:fc:d4:39:b5:fe:91:c5:f7:f5:e8:f4:c8:13:a6:d1:a1:
         52:92:4c:d8:6e:b2:1f:9d:5d:7c:fa:88:55:01:81:dd:fb:8b:
         f1:4c:67:00:c8:1d:29:dd:85:23:3f:e4:f9:65:35:f9:e5:5e:
         49:80:71:97:bc:5f:51:25:81:72:1d:56:c3:d5:d0:ee:ad:e9:
         b7:da:7e:f8:36:42:18:42:c5:e0:71:5c:ef:7e:be:b3:0c:7f:
         e5:d8:79:42:00:64:89:10:8e:0e:60:a1:b5:ae:58:8c:4e:0b:
         da:a7:45:fd:f2:d3:5b:75:41:8f:53:2e:4e:79:e2:0d:64:59:
         18:ee:01:79:d0:e3:e6:b6:8f:c2:d2:ad:48:e0:18:48:98:ea:
         c2:b9:48:01:6b:ff:02:af:4f:1c:37:d3:88:bd:b2:6b:a2:af:
         22:63:a2:90:67:42:0b:2a:de:af:5b:22:eb:74:00:00:da:f4:
         f5:c9:56:5a:44:a0:eb:a2:89:78:b7:5f:56:c8:30:a0:52:67:
         d6:94:4b:49:21:73:3b:4a:f6:5b:5b:be:38:d5:32:1a:3b:a8:
         0a:4e:6f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:06 2025 by rpki-client