Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/ec044255-eff3-3318-b917-533fe44b029d.roa
File:                     ec044255-eff3-3318-b917-533fe44b029d.roa (raw, json)
Hash identifier:          PCwhnew+a6oXoiqd1qySgopmfSm/cahPxIhDx7Wlmhw=
Subject key identifier:   FC:92:8E:29:03:05:B8:73:20:A0:10:F9:68:52:B6:73:75:D7:33:FF
Certificate issuer:       /CN=52f26f5a-86c1-4542-9ca9-e43777bd570c
Certificate serial:       010D0C9F43285848E8666425582FD08696563DF0
Authority key identifier: E5:3F:B5:E0:8A:9D:D2:89:7F:CC:5C:4E:77:8C:1E:08:BC:51:AF:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/ec044255-eff3-3318-b917-533fe44b029d.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     7029
IP address blocks:        23.187.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:64:25:58:2f:d0:86:96:56:3d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f26f5a-86c1-4542-9ca9-e43777bd570c
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=ca117437-1763-4946-b3f0-5514b63bbf43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:a6:1c:cc:da:ec:33:a0:71:e3:05:76:e5:
                    84:e9:fe:3d:02:c8:a9:9e:e9:42:c2:1d:58:f0:3a:
                    0e:98:b7:86:90:37:de:c5:f8:49:5f:92:9e:e3:53:
                    ee:27:68:c9:2d:a6:95:cb:26:30:24:1c:a7:fb:8d:
                    8a:83:45:bc:df:3f:98:e2:9e:94:3d:5c:41:08:45:
                    18:0a:76:58:d7:fb:50:6c:06:e8:a2:ed:6d:7e:01:
                    dc:8d:31:d4:94:19:da:2e:9d:13:01:cf:71:c8:3d:
                    35:d3:b4:f5:0c:59:e3:13:66:ab:80:b4:97:a0:7d:
                    8c:1f:7d:fb:58:59:7e:88:c9:b0:df:e2:c4:9a:22:
                    af:fe:a5:8d:3a:e5:23:5b:5f:70:92:0d:d7:a3:36:
                    76:bd:ce:4a:02:05:e3:89:22:1a:b1:9c:58:e1:c9:
                    6a:38:11:24:8f:30:3a:f2:83:bc:8c:6b:46:23:04:
                    94:b5:77:88:de:26:25:f9:08:29:f9:53:10:d6:8a:
                    55:a3:f2:2c:58:a3:0e:49:4f:d6:e6:aa:3b:b2:92:
                    11:d1:55:20:01:b8:31:4f:09:0c:1f:b5:1c:77:8e:
                    f7:08:0d:3a:8c:ba:7e:85:b2:a7:b1:8c:34:c4:31:
                    ec:a4:7f:2b:b5:b1:8b:4f:17:51:34:7f:f2:89:81:
                    7f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:92:8E:29:03:05:B8:73:20:A0:10:F9:68:52:B6:73:75:D7:33:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/ec044255-eff3-3318-b917-533fe44b029d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.crl

            X509v3 Authority Key Identifier:
                keyid:E5:3F:B5:E0:8A:9D:D2:89:7F:CC:5C:4E:77:8C:1E:08:BC:51:AF:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:dc:bd:57:8b:a6:af:e9:7e:ed:a2:99:46:07:6c:a3:af:55:
         38:62:dd:57:a4:89:a2:12:bb:94:60:a2:78:ab:39:c8:25:af:
         d3:e2:e1:13:d3:33:9b:cb:5b:46:06:58:4d:ef:92:58:29:ed:
         5e:95:7a:09:9d:5d:d4:ac:20:93:1a:74:23:1d:49:be:17:8e:
         04:bf:81:fb:aa:9e:6a:eb:7d:de:4c:36:3d:7f:e9:a9:ce:5a:
         55:9e:f2:4a:80:b5:24:cb:90:7c:6f:0d:cf:af:3e:cf:da:b2:
         d7:a4:70:60:8a:b8:82:9d:fe:02:f3:fd:11:1d:e2:af:1d:f1:
         13:f3:d5:dd:03:bd:81:67:cc:03:f4:09:1f:a2:24:66:a4:ae:
         32:b0:7d:d6:56:34:e4:ee:86:43:cf:2c:7b:0f:e5:fd:22:a7:
         8c:b7:d3:02:49:2c:33:5c:df:da:e7:61:64:e7:98:29:68:b5:
         a1:7f:b9:75:b7:0c:1d:20:73:63:e4:19:f7:7b:f7:06:db:c7:
         8f:f3:b1:e7:a1:5b:05:c7:b0:54:20:42:5a:0d:7f:e3:05:8b:
         ff:fb:f2:46:56:55:be:c2:05:80:79:28:dc:13:ac:49:59:31:
         c8:31:eb:ff:6a:a4:1c:ae:ef:85:01:18:3f:6c:34:77:b3:8d:
         9f:6a:e1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:05:18 2025 by rpki-client