Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f8e07f23-cdab-31bf-8007-fdb75f005f60.roa
File:                     f8e07f23-cdab-31bf-8007-fdb75f005f60.roa (raw, json)
Hash identifier:          LLWNdz+zNPQ89cqgeoJH1qz7jDehKb8OdE5aNR/uSq0=
Subject key identifier:   D0:07:DA:D1:1B:4B:7F:B3:B8:74:3E:F6:CE:3E:D9:64:E5:AC:A7:CE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E006890A426F05E65C858300
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f8e07f23-cdab-31bf-8007-fdb75f005f60.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     19157
IP address blocks:        23.86.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:89:0a:42:6f:05:e6:5c:85:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=797036cf-d35b-4e80-bbb7-0dd7fd1ec053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:22:4e:4e:6d:fc:9e:8c:bf:5d:9c:0b:20:
                    6a:10:b7:c7:a2:43:b4:82:7e:36:7c:b9:40:cd:67:
                    97:87:ec:8a:e3:ca:46:b1:5e:b3:4b:be:2e:08:e8:
                    f2:4b:a8:e2:61:84:48:9a:60:96:0a:f7:27:e2:25:
                    1e:fa:cc:ed:8d:7a:b4:71:22:d5:af:a4:2b:c6:f6:
                    a8:b8:e3:02:e7:83:e4:19:33:23:f2:d7:f3:ef:a0:
                    90:a5:a0:40:98:93:7d:29:6d:85:a2:21:24:fc:7c:
                    21:0c:0f:e2:29:6b:b3:de:5a:14:0c:c3:38:d0:75:
                    af:e6:39:bc:e9:ef:5a:5e:51:2f:5e:07:8a:51:ec:
                    bf:db:36:aa:89:79:71:54:88:50:29:8a:61:58:c6:
                    e6:8e:ca:29:3c:32:58:87:2b:82:4c:f9:b4:c3:4c:
                    1d:c0:a6:88:22:29:34:84:64:1a:0e:73:44:c9:82:
                    50:5c:69:6e:5f:56:5a:0c:cb:37:d7:31:b1:58:f7:
                    fe:5e:76:e2:18:a3:43:fb:7a:a6:b8:73:40:f7:5c:
                    90:c5:34:a6:58:90:94:02:58:32:0a:2c:51:c4:04:
                    8f:e5:18:ec:ff:cc:ab:53:5e:a5:3b:b9:b5:ee:1d:
                    08:b8:e7:dc:68:fd:3d:59:84:bc:2d:b9:cc:4d:e0:
                    6c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:07:DA:D1:1B:4B:7F:B3:B8:74:3E:F6:CE:3E:D9:64:E5:AC:A7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f8e07f23-cdab-31bf-8007-fdb75f005f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:67:94:39:6f:0c:fb:1d:27:c1:32:d8:a6:f3:5b:80:ae:5a:
         c0:95:f1:37:37:f7:9f:19:db:68:ab:44:c8:78:80:ca:49:ec:
         8c:d5:08:3b:8c:89:25:64:df:a3:97:91:4a:f4:3d:84:bd:76:
         ea:ed:eb:44:b8:a3:23:26:45:6d:cf:13:79:b2:fe:02:de:bb:
         b2:f9:77:a0:49:ed:37:83:94:7d:2a:12:fc:b9:c4:24:60:13:
         53:2b:35:7c:c1:ef:9f:3b:7b:bf:a7:20:03:5d:39:86:59:d4:
         86:06:06:61:37:89:2f:ab:69:77:68:36:d0:ab:e2:31:f5:d8:
         a4:ff:fb:31:7c:2c:60:2e:68:c1:fd:3f:27:cb:f2:40:66:f8:
         77:c5:0a:fd:7a:8d:a2:67:b5:d6:43:df:5b:a1:0d:2a:8f:e9:
         ab:f1:ae:31:59:5c:c5:10:9f:56:42:70:d4:9c:b6:02:89:d6:
         1c:e4:3a:44:44:ff:5e:c1:35:34:a3:be:8c:48:74:c4:50:10:
         0f:c0:0e:8b:00:3a:4b:40:be:69:28:25:13:91:cf:bc:f0:ee:
         22:19:ab:ff:49:8c:90:c8:7b:87:c5:d3:e1:76:64:a5:1b:2e:
         2c:df:5c:0a:d2:6d:3c:40:d4:d4:81:a4:fd:de:38:3d:33:16:
         05:79:af:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:27 2025 by rpki-client