Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/fd7960f6-21ac-31f1-af64-ef39f21ea913.roa
File:                     fd7960f6-21ac-31f1-af64-ef39f21ea913.roa (raw, json)
Hash identifier:          xRcL+N7meNnhgYBEwKu3yGPP0aMNPWm1n1nsqqApIn4=
Subject key identifier:   96:17:C1:34:F1:49:4C:2F:7C:5D:2F:F2:CF:9E:EB:E2:38:B2:67:62
Certificate issuer:       /CN=12139121-8c82-4685-a6f3-76023bbcab6d
Certificate serial:       010D0C9F43285848F926B20E1FF5D84FAAD9D800
Authority key identifier: B4:10:4B:21:6F:C5:D1:99:DB:83:24:BD:79:A3:90:B8:67:C8:60:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/fd7960f6-21ac-31f1-af64-ef39f21ea913.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     8100
IP address blocks:        23.179.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/12139121-8c82-4685-a6f3-76023bbcab6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/12139121-8c82-4685-a6f3-76023bbcab6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:b2:0e:1f:f5:d8:4f:aa:d9:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12139121-8c82-4685-a6f3-76023bbcab6d
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=bfc21d32-8dbb-4e42-92ee-a6ae298983ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:27:66:45:ea:e7:b2:5f:4b:e9:d2:9f:41:
                    79:fb:a6:c8:e3:e9:6c:e9:1d:10:bd:a8:b5:9e:b5:
                    ff:96:2d:e4:2f:12:5c:28:53:35:a3:3f:c7:e8:9a:
                    5a:97:0f:29:13:93:05:10:d0:a3:2e:40:48:f2:60:
                    86:46:f1:b0:23:4a:53:6e:54:35:d7:57:0d:19:ca:
                    37:e6:fa:d1:a9:4f:f9:81:04:9b:0f:f2:dc:f7:16:
                    a1:e6:70:f3:15:40:61:8f:88:25:0b:c7:28:41:61:
                    0c:a6:f1:cd:57:52:a1:be:25:40:44:c4:a3:57:ef:
                    56:ab:3a:2a:26:fc:24:80:3e:32:5b:af:0e:98:1a:
                    d0:8d:26:43:03:0a:f4:d6:00:be:c4:ce:e8:2c:f7:
                    87:7a:d0:b2:4e:ed:ba:f1:39:17:c2:a3:92:ad:cb:
                    42:e7:34:91:04:07:84:44:bd:49:f1:7f:58:63:60:
                    70:af:72:54:61:ce:c6:cb:bf:29:ce:40:7e:a9:a8:
                    9c:41:68:25:92:bb:2b:c9:56:b2:78:b6:b3:2e:1a:
                    49:77:a0:d8:ee:a9:18:12:e3:8a:2b:61:48:94:28:
                    09:b7:12:56:30:4f:47:54:47:97:a0:4e:f7:a2:b7:
                    97:59:b7:71:a0:97:e1:43:bd:80:d9:e8:01:31:86:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:17:C1:34:F1:49:4C:2F:7C:5D:2F:F2:CF:9E:EB:E2:38:B2:67:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/fd7960f6-21ac-31f1-af64-ef39f21ea913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/12139121-8c82-4685-a6f3-76023bbcab6d.crl

            X509v3 Authority Key Identifier:
                keyid:B4:10:4B:21:6F:C5:D1:99:DB:83:24:BD:79:A3:90:B8:67:C8:60:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a5:a7:c3:0e:e8:b9:c2:ac:e3:2a:cc:8a:c8:a7:0d:2f:ef:
         79:8e:d3:98:d5:b7:a7:6a:60:83:b5:43:7b:47:79:46:23:45:
         0c:02:35:e6:bb:70:74:23:61:de:48:ca:01:d6:e5:0c:c3:59:
         2c:d5:69:a3:e5:65:34:9b:1f:ef:39:9e:0f:94:c7:ac:f6:62:
         3b:ff:59:af:39:0e:17:01:ba:b6:12:a0:32:c0:80:fc:52:cd:
         39:83:c7:b2:f1:e4:cd:01:b0:5f:46:42:4e:c5:0f:63:8f:f8:
         0e:07:28:ce:f2:dd:6a:6d:3d:5d:13:75:1c:22:ae:fb:1e:62:
         85:34:63:12:19:9b:a7:11:1d:8e:f6:72:34:cf:9a:2f:42:54:
         7c:d2:f0:79:02:87:b1:0f:da:db:5b:6b:e0:7a:04:ff:4d:ca:
         aa:06:0f:f6:78:4c:51:c7:8d:8b:b0:5e:44:cb:f6:de:15:c4:
         4c:58:65:79:51:f6:19:1d:02:a5:85:6a:2f:c5:a3:c4:2f:13:
         e3:af:13:44:5c:4d:f6:a7:ae:e7:d6:a6:02:27:8f:34:8e:99:
         2e:69:d1:21:6c:32:a4:22:ae:bd:e4:c1:ab:cf:7c:38:13:f7:
         13:cd:d0:a4:8e:cb:42:37:72:f3:33:99:6f:24:6e:7e:e1:4f:
         a3:a5:d9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:42 2025 by rpki-client