Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d736fe43-2d2f-3395-aa13-2247794e89d4.roa
File:                     d736fe43-2d2f-3395-aa13-2247794e89d4.roa (raw, json)
Hash identifier:          /rI77Pfgtd/PGGkZYsz9WsKCYs5f5gGB10hKj+xaW6g=
Subject key identifier:   B0:2F:44:41:77:23:FE:35:47:BC:E1:26:6D:0D:4C:6F:06:48:10:E8
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E006615B426D2E1A929015C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d736fe43-2d2f-3395-aa13-2247794e89d4.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     19157
IP address blocks:        23.86.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:61:5b:42:6d:2e:1a:92:90:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=af1e96a9-c925-4c57-94c9-9a250770426f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:42:a4:67:18:29:34:b8:9d:d9:53:6e:52:8b:
                    af:9f:2c:7f:c2:51:a2:44:ef:48:ba:ee:48:71:e2:
                    5d:10:c6:b4:67:9c:90:50:72:9d:4f:de:ba:8c:14:
                    88:2d:98:9b:cc:de:75:52:80:8e:3f:9e:a0:82:5e:
                    46:0a:f9:20:f9:14:4c:c6:8e:74:21:d7:5d:61:21:
                    23:8d:7f:83:bf:09:e3:eb:ae:ff:20:cc:61:9d:07:
                    87:f4:3e:62:5f:c9:95:cc:ee:06:b7:c9:15:0e:10:
                    5d:cb:3e:5d:38:ad:a6:b9:7b:34:5e:16:58:b2:c7:
                    e7:33:0d:1f:ce:7e:00:96:79:92:d4:98:64:ba:1e:
                    da:aa:7b:fd:5e:73:60:f3:95:b3:71:9e:24:bc:42:
                    03:10:86:1e:bb:15:ef:d0:ac:9d:21:83:64:24:c5:
                    62:ce:48:84:61:8c:95:ad:6b:1f:39:4a:e9:b1:84:
                    d5:31:99:4b:44:0a:5d:b8:d3:bc:61:c6:0f:03:bf:
                    fd:10:d7:d2:63:79:2f:3e:5d:c3:a9:06:2b:22:64:
                    86:00:ce:87:2c:de:ae:fb:e4:6e:24:92:ee:96:09:
                    99:0c:be:92:5e:06:10:22:17:e2:ab:fc:b9:d3:3a:
                    e5:b3:ef:95:c7:08:ac:de:73:58:fe:ab:6f:21:1e:
                    9e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2F:44:41:77:23:FE:35:47:BC:E1:26:6D:0D:4C:6F:06:48:10:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d736fe43-2d2f-3395-aa13-2247794e89d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:53:14:e2:7b:0f:92:fe:ce:e6:fd:67:fc:f6:2a:e0:1a:c0:
         15:6b:a7:8e:32:fc:5a:ae:78:5e:51:b9:4d:3d:4e:c9:12:33:
         2c:2c:f4:7c:87:01:8a:14:5f:b8:16:37:77:b0:8f:04:f0:e9:
         d7:6e:f3:3c:1e:d8:e8:af:ae:30:86:20:47:24:01:6c:9a:ac:
         1c:c3:ad:bd:25:c0:bc:48:71:d1:9e:77:d0:02:7c:60:30:0d:
         45:27:1d:9f:a5:f7:bb:61:f6:99:e7:cd:8f:2b:78:65:34:19:
         6e:0c:5f:82:ac:05:16:c4:40:47:17:9d:40:66:e3:7d:e5:5b:
         3f:31:1e:f7:26:6f:5f:45:f1:1e:93:6e:c6:c5:40:66:2b:72:
         6e:fb:20:04:a7:e8:31:5e:d3:f4:1e:81:98:a0:06:be:cc:02:
         4e:1e:27:46:bc:b7:4b:b5:dd:2b:df:54:73:2f:22:8b:99:8f:
         ea:47:57:85:77:79:05:68:fc:76:91:04:3d:d4:81:c9:dd:07:
         85:99:d1:4c:e4:bb:5a:e0:2d:52:7b:a9:f3:e4:19:42:6e:db:
         26:51:61:5e:b2:be:27:ec:35:c4:22:ae:1e:fe:39:f1:6c:df:
         29:f2:ae:33:c4:b4:d4:bb:c9:2d:d8:e3:12:79:8a:ee:f9:d8:
         33:0b:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:56:19 2025 by rpki-client