Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/d44ea506-3bb6-396c-9617-92bba4db10b9.roa
File:                     d44ea506-3bb6-396c-9617-92bba4db10b9.roa (raw, json)
Hash identifier:          Bbz9qLib2qeEoju2QEK09+gfYhsXeo6MkDqTrZuGpKA=
Subject key identifier:   C9:3C:BB:F2:65:DD:6B:B1:AB:CA:0D:8B:91:E7:C8:6F:E1:15:8A:FD
Certificate issuer:       /CN=46d43cee-39e6-4150-ae7b-94a20c139206
Certificate serial:       010D0C9F43285849287E62298090FE0DF5481540
Authority key identifier: 28:87:3B:F3:C9:20:CA:EE:07:F8:54:B5:01:37:9B:C6:84:08:F9:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/d44ea506-3bb6-396c-9617-92bba4db10b9.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     394367
IP address blocks:        23.176.0.0/24 maxlen: 24
                          205.207.142.0/24 maxlen: 24
                          207.167.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:62:29:80:90:fe:0d:f5:48:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d43cee-39e6-4150-ae7b-94a20c139206
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=55f3d1d2-9518-4708-8409-95a6ef856b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:12:72:15:16:d8:e1:85:01:08:6c:7c:be:e2:
                    31:26:6f:4a:75:20:61:cc:87:07:2c:06:4f:6b:78:
                    9c:25:63:88:86:3e:d6:a7:48:b7:a8:30:1b:c4:68:
                    e0:50:b9:66:e9:01:9a:15:23:64:ba:d5:bc:e4:c0:
                    70:ed:f6:fd:48:7d:e9:3a:61:89:f1:37:38:7b:d3:
                    f5:d2:9b:4f:6d:06:9d:4f:2a:c2:06:2c:1a:d3:e4:
                    f2:bd:80:fe:b3:9a:07:fa:92:22:10:c9:02:4a:90:
                    01:5f:f0:20:bd:9a:a1:30:3e:fe:48:04:96:87:a6:
                    4c:28:11:46:80:44:5a:d7:e8:54:33:1c:ad:18:82:
                    61:e4:31:49:04:d1:3c:19:60:d0:6b:58:3f:97:a6:
                    46:7b:9a:81:42:f2:93:12:bf:ae:e3:57:f4:3a:66:
                    30:f6:30:f3:96:24:5e:4e:12:33:8a:ca:00:3d:65:
                    0f:51:ec:24:14:33:fd:4c:b7:5d:e2:a7:11:28:de:
                    2e:c5:1e:a1:4e:1c:93:4e:7e:b6:f6:66:2a:65:6a:
                    b7:99:e5:b1:d2:43:27:da:d2:41:bd:0c:d7:0b:4b:
                    45:c3:23:8c:7f:54:10:51:30:4a:6f:66:c0:a7:a5:
                    77:70:6e:46:db:67:97:4f:b2:d3:91:e9:a3:51:39:
                    93:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3C:BB:F2:65:DD:6B:B1:AB:CA:0D:8B:91:E7:C8:6F:E1:15:8A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/d44ea506-3bb6-396c-9617-92bba4db10b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.crl

            X509v3 Authority Key Identifier:
                keyid:28:87:3B:F3:C9:20:CA:EE:07:F8:54:B5:01:37:9B:C6:84:08:F9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.0.0/24
                  205.207.142.0/24
                  207.167.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6e:57:25:f1:d1:f6:b5:b1:d0:09:5c:4d:2a:37:5c:ee:ad:
         47:f2:9a:fb:5a:7b:30:0c:20:57:3a:8b:d3:89:8f:56:1d:d5:
         90:48:1d:ce:61:23:62:66:60:9c:a4:ab:76:33:15:f6:65:96:
         16:c4:11:57:71:d4:9b:1f:05:83:a1:4c:d7:3e:7e:e4:e6:4e:
         7b:f3:a9:52:91:55:4f:96:1a:3b:6f:94:4e:1a:4f:53:87:10:
         79:7f:10:5b:f3:8e:38:0e:04:36:7d:27:fa:66:47:9e:e5:22:
         04:79:fe:e5:7f:1e:b2:4e:c9:ac:99:b8:18:86:1c:6b:a7:18:
         95:78:5e:41:39:f0:af:53:d9:0a:90:f2:ca:8f:ab:db:c1:bc:
         bc:5d:81:e1:b5:f6:c6:15:d2:4f:1e:e4:93:31:86:39:75:36:
         79:52:e7:8e:d6:c3:62:8c:06:9e:3b:88:cd:0c:a7:7e:1a:89:
         fc:f3:b8:f9:06:64:75:d3:6e:9a:90:d4:57:ea:f2:cd:ae:02:
         dc:82:af:b9:67:e3:fb:f4:a1:f0:92:7f:ed:17:f3:fe:c4:e8:
         c3:6d:96:ba:44:b6:d3:e0:b2:58:08:94:f8:a4:f8:6c:03:e1:
         3d:8e:51:16:05:f5:2c:38:0b:c8:c5:58:cb:97:3c:e6:48:bd:
         70:e6:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:44:55 2025 by rpki-client