Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/e713b0c7-ac64-3c9e-8a7c-1289e6550c40.roa
File:                     e713b0c7-ac64-3c9e-8a7c-1289e6550c40.roa (raw, json)
Hash identifier:          9mw6FYQz/cCuPA5AFpafmc4zt0qx3CyHJAruKII6OW4=
Subject key identifier:   FE:3A:68:00:51:0C:27:D2:EF:BF:43:0F:64:0C:D9:99:EB:4D:93:67
Certificate issuer:       /CN=c9fc1d52-c008-4fdc-acd1-73ab6c71b153
Certificate serial:       010D0C9F43285848E16BED9B4F9A6621B8240E80
Authority key identifier: CF:1B:30:11:70:75:38:4F:72:3E:E9:B0:CD:09:2A:B7:5A:08:C6:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/e713b0c7-ac64-3c9e-8a7c-1289e6550c40.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     40706
IP address blocks:        23.157.224.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:ed:9b:4f:9a:66:21:b8:24:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9fc1d52-c008-4fdc-acd1-73ab6c71b153
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=2717724f-8dae-477b-bc73-437733e4b917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b3:61:d5:e2:e4:ae:0d:30:a0:07:83:6f:a2:
                    be:15:09:99:a4:9f:07:0a:79:84:fe:e1:6a:70:d9:
                    af:91:eb:5e:a9:93:40:d6:15:bd:0d:b3:3f:c4:e1:
                    95:5b:20:df:f5:ed:24:12:5a:7e:6c:c1:3a:90:4f:
                    0b:31:41:6b:11:b1:4b:2f:40:42:13:f7:80:63:37:
                    79:a7:ae:b9:fa:1e:e8:d7:43:e3:cc:af:95:99:26:
                    d3:78:6c:7a:38:26:b5:f3:c4:4c:7c:26:2e:47:c9:
                    f0:f0:1c:a7:af:83:7b:44:1f:8c:02:97:6f:c3:de:
                    c2:9f:3d:3b:87:da:32:d9:67:ce:8d:76:07:2f:c5:
                    49:0f:21:a7:6d:fa:b1:23:a3:d1:4e:22:92:81:03:
                    35:5a:14:08:44:b3:c4:c0:ab:56:ee:10:fd:32:a2:
                    94:92:0a:96:80:c5:49:37:1e:08:bd:4c:e5:25:30:
                    fe:69:8a:0d:89:8a:2e:e2:56:2f:e1:25:f5:17:5a:
                    38:d9:d5:6e:4d:ed:1a:77:fc:9e:60:3e:24:67:20:
                    5b:50:60:23:c2:c6:db:bb:1f:02:52:5a:ce:2a:41:
                    68:d2:2b:e1:ef:c4:62:3a:47:f0:2b:a1:8e:e2:f3:
                    df:71:ed:24:af:56:1e:41:e7:c0:7d:4d:e0:ed:10:
                    86:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3A:68:00:51:0C:27:D2:EF:BF:43:0F:64:0C:D9:99:EB:4D:93:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/e713b0c7-ac64-3c9e-8a7c-1289e6550c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.crl

            X509v3 Authority Key Identifier:
                keyid:CF:1B:30:11:70:75:38:4F:72:3E:E9:B0:CD:09:2A:B7:5A:08:C6:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:35:13:dd:fb:f6:e3:e4:b9:22:23:36:0d:c6:87:f8:c7:4a:
         be:6c:76:56:82:e5:91:c7:4a:d5:69:bd:32:22:a6:2c:8b:28:
         d9:44:fc:48:06:e3:98:54:99:9a:2d:f4:bc:d9:ed:41:4b:7c:
         f2:9b:47:e3:1c:bf:27:65:be:d2:ad:ec:46:52:ae:dd:21:29:
         e9:9a:f1:9d:2d:3e:0c:c1:8d:82:a0:08:da:88:71:2f:ff:8f:
         b9:08:1f:6b:aa:c2:93:cc:cf:73:21:44:95:58:6d:f6:a9:1b:
         06:56:30:f3:12:cc:a1:4c:7a:e7:80:ad:ac:0b:e2:17:96:cc:
         62:44:a4:69:b6:de:e1:b3:c6:eb:5f:f3:5e:5e:c1:17:9e:3c:
         b9:02:ae:e1:14:16:5a:35:e8:88:47:ff:06:5a:60:b1:78:3c:
         2c:5c:50:dc:4d:4b:ad:80:49:94:69:02:36:b0:69:62:10:e8:
         91:fc:76:1f:34:38:56:2d:b7:33:a7:2d:56:9b:04:33:43:2d:
         95:a8:27:dc:33:aa:bb:29:f0:57:12:c5:64:32:c3:f0:c7:fa:
         d8:da:c6:d3:06:bf:11:37:1e:e1:5e:38:50:2c:98:f5:b7:2e:
         b0:2f:a1:a2:ad:f7:3d:ae:cc:e2:7a:2d:87:06:ca:82:f7:e4:
         b6:86:08:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:06:43 2025 by rpki-client