Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ba0f4419-4f44-3cef-ac8f-d6f044e66a37.roa
File:                     ba0f4419-4f44-3cef-ac8f-d6f044e66a37.roa (raw, json)
Hash identifier:          1QOrYmX5hM4c+/xF/De9RXILQyCSVr3emACZAp2HZHY=
Subject key identifier:   49:FC:80:70:1B:F3:1D:E4:C5:7A:11:B8:1A:B2:FF:6A:03:32:3B:F3
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F432858487A207D5FD6B8C6AB3E626080
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ba0f4419-4f44-3cef-ac8f-d6f044e66a37.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     398549
IP address blocks:        23.162.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:7d:5f:d6:b8:c6:ab:3e:62:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=643ab5c6-ee92-4b6a-92d4-dba24c4924bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ae:6d:e7:fb:0f:c2:79:8f:f4:4c:ca:cd:90:
                    99:dc:2c:65:0b:c2:01:3a:a9:34:bf:77:4e:dc:f3:
                    a0:8c:f2:23:38:29:5e:7e:71:5b:96:f8:08:41:7a:
                    e6:01:b0:dd:75:67:99:e3:ca:7f:3f:c4:ea:c1:56:
                    6e:cd:dd:9e:43:81:9b:96:12:36:f2:fa:bd:17:6f:
                    c1:c2:2b:fc:cc:15:bf:b1:43:de:9e:fc:2d:3f:2a:
                    68:74:d2:d0:36:13:35:bd:54:1b:1c:45:71:b5:e7:
                    08:89:c8:a9:0e:bd:5f:1c:66:47:d3:0c:ca:8b:9a:
                    40:61:6f:88:dd:86:43:a9:c5:74:99:cb:03:1e:37:
                    5f:b9:9e:fb:dc:49:4f:7d:61:b4:2d:49:8e:9a:da:
                    8e:44:bd:2a:b3:e6:20:a9:ac:49:66:f5:c7:d0:02:
                    8f:c5:ea:42:ca:6f:c9:39:aa:de:5e:c0:b6:b9:60:
                    66:15:7e:94:1e:02:62:6a:d9:7e:4e:e4:44:16:d7:
                    d8:98:cf:a6:27:1d:39:f3:e3:07:f9:6e:a6:2e:96:
                    30:a0:30:52:41:f8:ba:39:12:4c:51:f7:13:3f:19:
                    64:13:25:7f:69:7e:ab:63:b4:ee:11:49:24:79:7d:
                    b3:fb:a9:6e:85:7b:bf:68:a6:b7:6f:97:bd:c3:36:
                    37:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FC:80:70:1B:F3:1D:E4:C5:7A:11:B8:1A:B2:FF:6A:03:32:3B:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ba0f4419-4f44-3cef-ac8f-d6f044e66a37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f4:0e:06:1f:e8:29:ff:b1:8b:f6:db:50:ca:02:6d:1f:d7:
         44:4d:62:ce:9a:25:7f:47:7c:b8:f8:21:2f:94:5b:28:cd:bc:
         12:af:ce:5b:39:51:d1:e5:f5:2b:16:c5:51:ab:5b:bf:62:bd:
         b4:bd:c6:3a:7f:ae:ae:3a:ac:70:ac:fc:22:1e:86:91:1d:9c:
         67:8b:f4:67:b0:05:ee:7a:47:76:0f:49:1c:2d:8f:1a:f7:bb:
         cd:49:db:2c:30:37:83:2e:e3:16:25:39:c7:96:83:48:6e:5b:
         7a:25:a2:44:05:37:db:58:50:9e:7c:2c:01:97:07:49:84:94:
         5b:31:76:09:b3:7c:2b:9e:6a:ba:a2:26:2e:59:91:8b:9d:0c:
         c8:d6:a7:0d:fc:f7:a3:8e:a5:e6:05:ee:fd:c1:96:05:6a:a3:
         91:71:be:cb:96:45:1a:a9:c7:98:f3:6d:08:37:1d:40:ca:60:
         44:d8:33:13:99:93:d5:a0:24:53:69:03:cd:c1:d1:45:5e:0e:
         e2:e6:d3:14:f0:6f:92:30:f3:a9:a1:cf:d9:eb:56:03:e3:e3:
         86:85:dd:b0:86:b8:32:4c:3e:38:00:c1:1a:fe:03:92:4e:12:
         ce:4a:9a:7e:a4:f9:81:45:b4:b9:73:c3:ec:10:66:9c:51:aa:
         ac:0f:36:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:22 2025 by rpki-client