Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/c8db1a81-928f-3b26-b308-566a7a4b7d3a.roa
File:                     c8db1a81-928f-3b26-b308-566a7a4b7d3a.roa (raw, json)
Hash identifier:          2RZlBM5V66VaDTKO5AFUr8zt+eI/m2Sudc10Dzbzy30=
Subject key identifier:   CB:B6:A6:AF:77:CC:36:AC:76:74:D5:E8:E7:7F:2C:60:D2:ED:27:E6
Certificate issuer:       /CN=773b73e0-0815-435e-b24e-89c8b9dd55c5
Certificate serial:       010D0C9F432858494B641579BF14053F50531100
Authority key identifier: BE:75:BB:89:62:18:B1:4B:79:B4:96:D0:88:D8:E6:F6:B3:98:3B:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/c8db1a81-928f-3b26-b308-566a7a4b7d3a.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     216132
IP address blocks:        23.184.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/773b73e0-0815-435e-b24e-89c8b9dd55c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/773b73e0-0815-435e-b24e-89c8b9dd55c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:15:79:bf:14:05:3f:50:53:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773b73e0-0815-435e-b24e-89c8b9dd55c5
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=159470be-9a49-4f9c-b1d7-7ea1df95d71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:37:f9:66:b5:f5:d7:31:cd:c1:d5:c4:af:
                    68:e0:9b:0d:98:a6:a7:31:7d:a3:c8:74:7f:34:e0:
                    f1:f9:ef:b8:ae:b7:80:71:30:80:c6:1a:ea:85:74:
                    a7:32:f4:bd:6a:5c:69:e3:33:6d:35:77:f2:00:16:
                    af:cd:55:74:45:88:ce:29:0b:c3:be:da:a1:99:36:
                    d1:41:53:82:46:5f:57:e2:0a:ae:36:0c:de:38:2d:
                    fc:05:7a:01:2f:c9:8f:14:f9:ea:f7:53:56:33:ba:
                    15:a8:a1:73:af:95:10:b2:80:ee:f1:8d:f4:1f:9c:
                    ba:6c:60:2e:55:c0:a5:86:3b:8f:8b:c1:4f:f5:37:
                    f0:3a:35:a6:79:c4:75:61:a4:12:70:b4:7f:22:b6:
                    94:b8:34:a3:cf:ac:e3:5e:62:6d:0c:f8:41:83:4f:
                    34:28:c4:da:8d:05:e6:2e:e6:d8:e4:49:a8:e7:bb:
                    3a:a0:a0:fb:ef:16:07:e5:15:c6:b4:5d:e7:a6:82:
                    ad:ed:86:42:f4:e3:16:d1:fe:7b:82:1c:6c:f7:23:
                    1e:8f:df:89:c3:39:8d:38:42:53:33:04:38:46:e9:
                    ce:b7:a6:8d:01:97:cf:7a:9b:8f:17:22:8e:95:47:
                    af:39:71:0e:9d:d1:3b:7c:8b:e0:e9:57:c5:1c:78:
                    77:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B6:A6:AF:77:CC:36:AC:76:74:D5:E8:E7:7F:2C:60:D2:ED:27:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/c8db1a81-928f-3b26-b308-566a7a4b7d3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/773b73e0-0815-435e-b24e-89c8b9dd55c5.crl

            X509v3 Authority Key Identifier:
                keyid:BE:75:BB:89:62:18:B1:4B:79:B4:96:D0:88:D8:E6:F6:B3:98:3B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5b:0e:15:e6:e4:41:bb:be:d4:cf:77:32:20:d9:5d:ec:ba:
         40:a8:cc:89:35:90:5e:8a:b6:7c:6d:eb:5c:29:0b:3b:9d:34:
         b6:fe:4d:7b:74:97:da:7e:b1:e1:1a:d2:9f:a4:69:7d:d4:ea:
         8f:71:84:ba:6c:6f:7c:04:b8:84:bb:35:9d:ea:b5:fa:99:92:
         01:1e:de:23:ea:2f:38:3b:43:f5:22:64:32:ba:05:55:c8:80:
         48:89:94:07:c2:93:c2:7f:57:18:78:6a:0f:96:a6:d0:6f:c3:
         4b:65:17:6d:50:8e:24:db:17:3a:11:46:96:bf:8d:c2:d8:a6:
         5b:5a:d2:67:6b:43:a8:1a:dc:dc:85:7a:70:03:53:d1:44:03:
         95:84:e6:59:25:f3:54:66:27:4d:ef:b9:51:bb:48:9d:98:3f:
         72:5e:7d:1b:47:e1:4f:40:8a:61:25:58:82:b6:0f:fb:21:4d:
         59:ab:7f:bf:8f:20:1f:7d:5e:98:c9:92:85:8f:ea:e7:19:6d:
         df:24:98:78:8d:b5:14:ce:08:59:b3:20:59:ff:39:c4:90:e3:
         f6:42:86:23:0a:30:d4:f9:83:54:82:cb:51:be:5b:53:0a:ec:
         e5:97:f4:8e:51:e6:6b:f5:d3:73:c9:06:d6:9c:8d:5d:37:54:
         5c:b2:49:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:28 2025 by rpki-client