Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/9fc60738-a4a7-391f-b6eb-0f82b7de9105.roa
File:                     9fc60738-a4a7-391f-b6eb-0f82b7de9105.roa (raw, json)
Hash identifier:          NimihJu7PygGz1Bq5ws9PlZ+7a5L1TgwCXWOCFC8gnI=
Subject key identifier:   50:A4:0A:8A:0F:35:66:91:7C:4B:31:00:68:D0:B8:A5:41:DC:3C:F2
Certificate issuer:       /CN=b1341766-e680-439c-a8dc-fb35f8f84ed2
Certificate serial:       010D0C9F4328584917DC328B4160B1F9F1177E30
Authority key identifier: 58:32:47:89:EB:BC:F9:31:B7:07:4D:E0:55:B4:EC:B4:DF:3D:08:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/9fc60738-a4a7-391f-b6eb-0f82b7de9105.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     53680
IP address blocks:        23.176.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/b1341766-e680-439c-a8dc-fb35f8f84ed2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/b1341766-e680-439c-a8dc-fb35f8f84ed2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:32:8b:41:60:b1:f9:f1:17:7e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1341766-e680-439c-a8dc-fb35f8f84ed2
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=c832e651-766e-42f8-9a49-6bb3a7979757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b2:75:10:1c:15:b3:df:b3:a0:5a:f1:3a:46:
                    49:4f:dd:ab:a0:12:28:02:cf:b8:d4:68:57:35:6a:
                    65:01:a4:69:fe:3a:b6:cd:d3:13:f1:86:ad:2b:90:
                    92:f7:7f:78:75:90:a3:4b:de:26:5a:70:30:f9:29:
                    1c:2f:e6:68:39:0e:7e:30:42:d1:a5:0c:53:cf:db:
                    6f:fd:b7:13:f7:ab:d6:8f:d1:8a:58:59:02:89:a3:
                    60:77:16:6d:b4:11:64:63:7c:a3:93:1e:f7:ea:22:
                    38:2c:d0:77:e1:72:e3:23:b9:60:7a:04:fc:29:44:
                    c6:29:b3:d3:90:57:fb:95:93:39:cc:74:68:15:6b:
                    88:e1:e7:82:93:95:2a:17:d2:b1:7c:e0:98:87:7a:
                    71:ea:12:20:27:ad:e5:fa:a0:d2:30:83:8c:ee:38:
                    63:22:49:0a:61:ee:ea:b4:cd:31:b7:1a:8f:3a:ab:
                    fc:9a:bc:02:e6:e6:43:48:95:ce:c7:2f:0e:86:58:
                    fd:e2:f5:db:d9:a4:d5:a5:74:89:07:f6:14:09:19:
                    5e:a6:3f:46:0e:c7:0a:7b:69:1b:36:f1:a5:ea:92:
                    98:49:44:1a:27:27:47:67:3b:cf:26:91:d9:97:65:
                    43:75:40:50:8d:19:76:e5:c3:72:fa:71:6f:90:58:
                    00:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A4:0A:8A:0F:35:66:91:7C:4B:31:00:68:D0:B8:A5:41:DC:3C:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/9fc60738-a4a7-391f-b6eb-0f82b7de9105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/b1341766-e680-439c-a8dc-fb35f8f84ed2.crl

            X509v3 Authority Key Identifier:
                keyid:58:32:47:89:EB:BC:F9:31:B7:07:4D:E0:55:B4:EC:B4:DF:3D:08:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d6:f7:78:5b:a0:02:9b:f1:b7:37:08:53:02:c5:e0:d1:b4:
         e6:aa:7b:90:e5:ce:ca:bd:1c:5f:a5:0f:98:77:5a:66:8e:8c:
         bb:60:e2:d9:84:36:64:da:83:e6:a8:c3:eb:e6:ab:e7:ea:62:
         24:fb:60:82:a4:53:dd:8e:b6:6e:3a:e6:7b:2c:a5:5a:c2:3c:
         e0:17:cc:e5:53:bb:a1:2d:76:2c:17:91:61:82:b3:ed:33:e0:
         69:41:96:cd:26:5b:b9:10:38:33:58:4f:f4:12:e2:23:15:b7:
         45:d2:64:fd:66:76:4d:a5:fd:0a:aa:25:5a:fc:dc:f3:3d:e8:
         bd:66:23:2e:f2:2d:3c:11:19:cd:c8:c1:f2:ec:e0:cb:ce:78:
         9a:2d:61:07:29:8a:f2:c4:04:4d:d6:eb:4b:b9:ce:30:08:a8:
         71:a3:f5:e2:ed:c5:f2:97:44:a0:db:0f:a5:3d:ab:65:db:4a:
         c5:bc:da:48:3a:c3:88:30:e9:cf:4b:65:b6:89:18:d1:4a:15:
         80:81:4a:60:2e:f6:6d:95:2e:10:ae:b4:11:85:56:7f:f6:af:
         0b:14:bb:d0:90:0b:8f:d2:38:4c:cf:82:4b:25:de:76:49:d5:
         64:94:44:e7:6e:9e:96:39:bb:3e:77:d9:64:ac:d9:80:a4:14:
         95:7a:92:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:17:10 2025 by rpki-client