Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa
File:                     8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa (raw, json)
Hash identifier:          WnfiWSai6X7iO+pF04HhDzZSOUgFrfnwj9fkDDJkTJo=
Subject key identifier:   A0:0E:85:76:5C:E7:98:02:DB:15:04:BB:0E:80:10:1C:24:12:85:7A
Certificate issuer:       /CN=9d6bbef3-ee9e-47e1-8865-b0b861ae1d80
Certificate serial:       010D0C9F43285848424ADC93643C46CA87798E00
Authority key identifier: 2C:5A:5F:CA:70:2A:F7:AB:AD:EE:66:73:1A:26:0B:66:11:6C:BE:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     20277
IP address blocks:        23.155.40.0/24 maxlen: 24
                          2602:2eb::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:dc:93:64:3c:46:ca:87:79:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6bbef3-ee9e-47e1-8865-b0b861ae1d80
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=4c6075d8-cd9d-46ff-8269-a492e8792cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:be:14:65:00:6d:f1:85:3b:8c:19:65:9f:
                    fc:bc:81:99:6e:35:27:f6:24:da:58:1e:c4:35:35:
                    1c:64:66:e4:9f:5d:b2:ca:07:f3:f9:73:34:f0:37:
                    54:47:b3:a5:ea:46:10:dc:3e:9c:51:11:b9:c6:a3:
                    52:48:63:de:e0:58:04:90:d4:01:39:b3:8f:0f:fe:
                    84:31:d3:0f:3e:65:01:11:c8:14:fc:7f:6e:b4:dd:
                    5f:d8:e8:1e:20:af:79:cb:a6:8c:30:bf:05:db:87:
                    f9:88:26:c1:52:e0:43:c2:96:50:2a:c2:82:d7:10:
                    a7:bb:e7:e4:e1:46:40:3f:83:7a:87:af:17:08:3a:
                    5b:48:f4:14:71:b4:f3:9d:a0:0f:07:53:23:5d:85:
                    42:6e:07:6e:97:f4:cb:f7:29:b1:f3:7d:55:08:18:
                    2a:ce:1a:8c:d1:5d:15:0c:39:5e:ec:d7:a3:fb:bd:
                    c9:ae:e9:8c:57:a1:b8:05:bf:c6:c2:a4:db:54:3c:
                    e0:58:48:a4:56:12:72:6e:46:7e:c4:9c:aa:77:57:
                    c6:e6:73:f8:c7:fa:2f:d7:95:40:4d:86:8f:b4:b8:
                    d2:cb:f1:e6:41:a2:42:e0:23:d2:f0:f5:e9:ab:2f:
                    f1:17:17:b6:70:a3:19:3f:61:30:7c:8e:09:5d:95:
                    70:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0E:85:76:5C:E7:98:02:DB:15:04:BB:0E:80:10:1C:24:12:85:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.crl

            X509v3 Authority Key Identifier:
                keyid:2C:5A:5F:CA:70:2A:F7:AB:AD:EE:66:73:1A:26:0B:66:11:6C:BE:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.40.0/24
                IPv6:
                  2602:2eb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:9b:0e:51:12:2a:4a:b4:f8:ee:d5:f7:6e:50:85:fc:98:76:
         8f:de:b7:38:6e:a4:9e:9c:33:4a:a0:76:bb:50:ed:ad:5a:16:
         07:44:16:6a:ce:81:8b:34:7d:cb:73:82:ec:f1:be:a7:6b:33:
         a9:c1:22:cb:cd:6a:81:c0:d6:2a:c6:24:a9:be:e2:9a:28:e2:
         97:e6:f5:04:cf:dc:53:15:a5:27:dc:bf:a7:d5:9e:da:a2:6d:
         bf:66:fb:d2:cf:dd:2b:7a:95:64:e1:43:1e:54:bc:28:d9:4f:
         be:0f:90:d1:55:22:05:e3:ef:b5:75:be:a4:7d:c8:b1:57:a9:
         a1:c6:ba:4c:65:f9:15:3f:61:9a:8d:db:0f:2b:5f:83:3c:ca:
         de:c6:51:67:aa:87:2a:b2:6c:41:ba:98:ce:c8:59:87:e2:13:
         da:b2:2e:70:7a:44:c7:f5:3b:fc:94:22:f1:26:7d:59:11:72:
         37:b9:19:f1:09:a2:3e:6b:b4:71:ea:67:50:7b:43:a4:6b:d3:
         1f:65:a7:c6:b5:30:e6:31:05:66:96:33:72:75:a4:e9:25:ae:
         2c:94:a3:31:89:82:bd:63:7e:46:83:6f:dd:c5:c9:29:13:18:
         bc:de:d2:79:39:d3:bb:03:d5:37:75:a0:bc:b5:fd:60:9b:9b:
         90:5c:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:28 2025 by rpki-client