Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/ca164ec8-c0bc-3d8f-8f58-9c19d688c82e.roa
File:                     ca164ec8-c0bc-3d8f-8f58-9c19d688c82e.roa (raw, json)
Hash identifier:          EZBs5wRLxnCo6stKuz6yN0Yehu7vuG1W5p1G3Q24tjw=
Subject key identifier:   82:5D:C1:81:11:69:C2:F9:C9:79:27:6B:5A:64:81:0B:8B:76:32:0E
Certificate issuer:       /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Certificate serial:       010D0C9F43285848DEA1167C1323B4453A057DC0
Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/ca164ec8-c0bc-3d8f-8f58-9c19d688c82e.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     22462
IP address blocks:        23.134.192.0/22 maxlen: 22
                          199.255.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:16:7c:13:23:b4:45:3a:05:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=9649092c-2657-432d-ab9b-55a82e0f7daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:41:43:2d:53:33:07:2e:ef:0c:72:f6:a1:
                    2c:d4:83:d5:70:bb:cb:4f:07:98:6a:be:0c:ce:fc:
                    81:86:d9:fa:23:28:86:f6:ab:87:64:02:2d:55:dc:
                    06:fd:08:fa:50:b3:cb:54:aa:5d:2c:a6:2a:33:9e:
                    5f:d9:53:7b:ef:8d:dd:a3:f9:97:de:d1:63:8c:ed:
                    78:b3:37:c9:f8:e5:90:2e:5a:26:59:32:df:37:68:
                    d8:8c:bb:21:26:78:67:0d:94:44:ca:bd:f6:33:c5:
                    6c:8e:ff:02:70:ab:16:91:5e:50:ca:39:f0:62:32:
                    ed:6f:ff:37:1f:75:46:32:3a:b7:28:70:20:49:91:
                    c8:ec:d1:d4:75:7e:01:78:63:9b:47:85:c8:1a:5c:
                    d0:2b:88:c6:47:2f:a5:21:c0:3f:18:7a:ae:cd:29:
                    85:49:c1:90:14:aa:96:b8:e7:9e:11:40:63:00:2a:
                    6a:07:25:bb:3f:7e:96:5d:0c:ac:21:c4:6d:d0:af:
                    89:be:04:76:0e:0c:87:53:e4:d1:89:1c:4c:73:87:
                    e8:c9:fd:73:ac:b8:2a:11:b6:c9:b0:bb:4d:c0:42:
                    58:1a:e3:07:37:77:30:91:13:c9:cb:ca:25:05:4f:
                    1f:50:cf:f9:1f:e0:65:62:19:55:59:8e:29:fc:21:
                    4e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5D:C1:81:11:69:C2:F9:C9:79:27:6B:5A:64:81:0B:8B:76:32:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/ca164ec8-c0bc-3d8f-8f58-9c19d688c82e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl

            X509v3 Authority Key Identifier:
                keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.192.0/22
                  199.255.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:0d:71:eb:da:70:52:79:79:a5:cc:d5:88:1b:3b:2b:b8:67:
         49:fc:86:c1:c9:82:43:8f:a6:ce:7e:2e:be:f6:be:4c:80:2f:
         2a:a6:25:d7:8d:75:c1:69:46:47:ec:9c:17:3a:93:cb:4e:12:
         c3:49:c7:bf:d1:97:c9:74:2b:50:6a:77:40:ba:0d:ff:06:1e:
         c0:ac:35:01:59:ea:e9:ab:62:41:46:2a:7e:87:ec:19:11:b4:
         d8:73:fa:cf:4f:1b:67:bf:c8:81:b8:25:2c:a4:df:c0:e2:8f:
         71:ed:21:55:ed:74:99:da:82:83:75:11:2e:c8:e0:cb:e1:2a:
         c1:4c:75:1d:ea:49:9d:4c:c9:e4:3c:1f:a2:0f:5c:00:f5:10:
         79:6d:08:78:6c:6c:c0:2e:ac:24:dd:8a:ea:d5:8a:10:14:05:
         f4:e1:b4:71:11:75:58:16:3d:08:12:37:64:7d:38:8a:99:ce:
         f0:59:ee:2f:0a:b9:58:26:12:a5:c5:73:c5:ed:42:cd:dd:34:
         4c:82:80:9d:ba:b2:e8:fc:ac:58:b9:51:7f:06:54:0f:7b:95:
         c8:26:6b:88:7d:2e:0f:4e:0d:df:eb:68:12:5d:53:ba:09:27:
         94:12:19:89:74:d7:8a:0b:c9:c6:90:0d:53:d6:44:de:22:18:
         5a:f7:f2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:06 2025 by rpki-client