Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa
File:                     9438e3b6-c8b0-3562-828e-38e2e3227244.roa (raw, json)
Hash identifier:          BLwT8qewlNfDVGHbKU7pmA04lIMX6Lh6WevEgreCY+o=
Subject key identifier:   CA:0C:DA:AF:2A:4E:4F:47:15:58:EB:20:D0:EA:47:B5:F1:ED:2B:A6
Certificate issuer:       /CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
Certificate serial:       010D0C9F43285849194188E167AF5C67A505FD40
Authority key identifier: CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     398698
IP address blocks:        23.165.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:88:e1:67:af:5c:67:a5:05:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=4eea2c3a-3c8e-4492-8b6e-d773c5475487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:66:dd:fa:7a:6d:d0:c9:72:4d:72:49:91:53:
                    cb:c4:6f:8c:36:4d:58:94:7f:ed:0c:6f:4d:97:5d:
                    df:ad:cc:6a:c9:6d:73:37:b8:05:e8:b4:d0:34:30:
                    07:4c:e8:12:14:1e:01:c0:69:82:c3:ba:37:74:ea:
                    90:41:3f:db:b2:f3:74:70:98:4d:2a:80:c8:4f:73:
                    14:9b:ca:9c:9e:be:dd:a9:cb:94:82:89:fd:8a:af:
                    c7:f8:d1:68:6b:84:5f:1c:6b:38:e1:b4:db:4f:c9:
                    e2:77:ee:26:46:03:93:c3:20:60:a2:2c:1b:97:d7:
                    63:87:b2:b6:9d:57:66:65:b0:d3:a7:68:80:ef:c6:
                    d2:69:46:81:96:1d:08:f8:76:7f:33:bd:87:f6:a1:
                    6b:69:1b:05:c8:ed:94:bf:6b:31:bc:4a:4e:6e:0d:
                    81:84:cf:b4:7b:45:fa:d6:47:75:32:44:cd:d5:44:
                    b7:db:a3:c6:3c:f5:f4:e3:0f:7a:1e:62:29:13:e0:
                    d4:1c:d4:e2:00:2f:7b:00:05:49:21:4e:14:5b:aa:
                    77:de:ea:70:46:c3:e9:76:1a:94:09:9b:51:14:5c:
                    f1:1a:26:f6:60:41:dc:f0:ab:82:f8:c5:f3:18:de:
                    13:af:83:60:80:d7:0b:38:a1:50:d1:79:5c:fc:90:
                    ef:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0C:DA:AF:2A:4E:4F:47:15:58:EB:20:D0:EA:47:B5:F1:ED:2B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:cb:2f:0b:ec:ae:bd:6e:29:6f:f9:80:1d:a6:98:11:a6:2e:
         d6:23:20:d8:d6:22:b2:9e:d0:b4:c6:72:64:bc:2c:0a:70:6f:
         cb:b0:59:4b:3b:6b:be:5c:b9:53:8c:37:2e:4b:39:b1:50:02:
         1a:ff:75:60:b5:cf:47:7c:2b:02:bd:df:30:dc:fb:12:82:25:
         8c:68:e2:78:7d:97:2f:03:05:c7:d4:4c:35:01:db:43:5e:85:
         91:be:74:d2:13:21:2b:7f:50:5b:0c:0a:29:3f:62:09:4c:6d:
         28:d4:73:44:8d:8f:e5:8f:7c:5c:1d:29:f8:e9:05:50:07:0e:
         15:c2:a1:81:8e:21:c1:2a:a3:51:4e:0c:d0:06:b8:d0:79:36:
         03:78:63:a1:71:f7:15:db:13:f0:25:a9:8d:84:c8:b6:ee:c8:
         c5:75:54:b8:fa:e5:cc:58:4a:ea:15:f0:18:6e:a9:6c:f2:b8:
         6d:56:51:59:a1:66:49:29:b1:52:53:3a:98:6a:02:f7:d3:89:
         b4:a4:ef:f0:b7:60:78:ca:fd:52:0d:79:47:46:b5:4c:0d:13:
         6b:4a:e3:1e:ac:22:0d:88:63:b4:12:f3:f7:a3:94:62:a5:42:
         d8:e7:1d:ef:3b:a2:77:d8:13:4b:dd:fb:5f:f4:60:01:de:0e:
         9f:17:52:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:37:54 2025 by rpki-client