Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/358c0fd2-f2dc-357c-8822-31ed52d1d684.roa
File:                     358c0fd2-f2dc-357c-8822-31ed52d1d684.roa (raw, json)
Hash identifier:          FyHKmjUjvw8oRrtV5fyCz6OWQ2TLzTycnryBWaMgwWY=
Subject key identifier:   FA:A3:1B:77:C6:91:D5:6F:6F:05:02:19:E1:D3:72:02:22:C5:71:D6
Certificate issuer:       /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
Certificate serial:       010D0C9F43285848F92694504A0F62D04497F580
Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/358c0fd2-f2dc-357c-8822-31ed52d1d684.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     398960
IP address blocks:        23.168.144.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:94:50:4a:0f:62:d0:44:97:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=52e7cc27-08c2-4bb2-bc90-ae424874dd86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a9:67:22:3b:21:c4:fc:f3:cb:20:63:fa:fa:
                    81:45:71:94:05:5c:b6:5e:8c:60:85:c2:a1:45:45:
                    44:88:ba:b3:96:41:f6:6a:a8:63:41:a0:5e:a5:6b:
                    1d:40:68:96:89:4c:a3:9e:b2:cc:54:5d:ef:f9:8c:
                    44:31:cb:8e:93:19:32:a9:05:89:35:f2:83:67:5b:
                    0e:62:b1:fe:8e:57:53:7a:c0:48:4e:f5:69:6b:95:
                    de:7e:27:9d:fa:36:70:ff:8a:30:01:ac:cd:be:13:
                    17:5f:4e:03:52:99:49:be:67:9a:24:6e:34:3f:60:
                    b2:e3:d5:8f:8c:be:bf:b6:2f:24:03:02:20:47:73:
                    bb:34:03:2f:00:3e:02:f5:f1:05:69:c4:ee:fe:0f:
                    9f:27:e5:dd:2d:d7:60:40:c9:81:ea:66:d5:e3:1a:
                    7c:c0:ec:54:96:93:31:eb:be:c6:bd:4f:04:ee:8b:
                    61:a2:e8:bf:8c:7d:1e:9a:0e:4d:ab:aa:44:19:b6:
                    c1:25:5b:40:42:87:e1:6a:e4:b1:45:c8:fd:23:2b:
                    99:5b:15:ff:97:9c:7e:49:40:6c:ab:eb:c6:6d:39:
                    1a:ab:ec:11:bc:46:a0:9d:61:95:5a:8f:bd:b3:bc:
                    01:37:cc:00:7e:65:f6:8a:0f:f9:99:ac:63:d2:7d:
                    d6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A3:1B:77:C6:91:D5:6F:6F:05:02:19:E1:D3:72:02:22:C5:71:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/358c0fd2-f2dc-357c-8822-31ed52d1d684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl

            X509v3 Authority Key Identifier:
                keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:cf:96:8d:26:b2:dc:33:27:15:d4:85:d0:9f:2f:3a:50:14:
         b2:a9:1e:62:c4:73:a1:70:dc:04:1b:9d:57:6e:df:b7:58:45:
         d9:88:11:fb:36:25:25:4d:be:b2:aa:a5:12:b3:c1:0c:a6:01:
         6d:b0:fc:8d:83:2a:5c:4d:73:c3:0c:b3:cb:e3:90:14:7b:a5:
         70:a6:72:89:ea:f2:8a:8a:26:0e:7a:10:07:5d:fe:e2:b2:83:
         a3:3b:cd:dd:db:d3:bb:7f:14:af:af:3e:26:ff:c4:fe:f8:87:
         0f:bc:9b:d3:fc:c1:88:12:60:d4:2a:d2:e4:93:05:b4:4f:6d:
         d1:93:b1:cf:ad:35:b0:d8:fa:da:86:97:c4:3a:63:26:7c:ec:
         1b:01:6c:45:30:76:41:62:44:af:9e:61:35:42:9d:c3:55:06:
         ec:2d:bc:6c:2e:58:e7:dd:0f:ea:05:12:c1:03:35:f2:8a:cf:
         4b:d2:d9:36:7c:3d:90:35:9e:c0:92:b7:64:39:3d:5b:a5:49:
         fe:ac:40:cf:93:4c:b0:99:67:da:1b:25:bd:56:92:bc:a8:d7:
         c4:92:7b:21:42:27:54:19:9d:4f:21:48:e6:5e:e6:19:dc:b8:
         3b:10:a4:ab:a5:58:5e:01:1c:f3:a6:bf:1b:5c:0d:23:1c:32:
         87:6f:49:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:35:14 2025 by rpki-client