Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/465e999e-2b29-35f3-8f0a-47717743a5d2.roa
File:                     465e999e-2b29-35f3-8f0a-47717743a5d2.roa (raw, json)
Hash identifier:          kWrit38EP/tBx1l5o23aI6BN9g7JdlPCzoAhz2MY9zE=
Subject key identifier:   2B:1F:B2:DE:FA:86:41:2D:DF:F5:50:6E:57:3E:33:10:ED:08:39:00
Certificate issuer:       /CN=7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56
Certificate serial:       010D0C9F4328584937D9431202557DC98FD8A9C0
Authority key identifier: 0A:48:B2:75:13:D3:0B:90:F1:F9:23:F8:EA:4D:77:B2:95:3A:E2:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/465e999e-2b29-35f3-8f0a-47717743a5d2.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     16870
IP address blocks:        23.173.240.0/24 maxlen: 24
                          2602:809:c000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:43:12:02:55:7d:c9:8f:d8:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=7a8008a5-72b7-4018-bbab-e54f348eae23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:49:5b:7c:c8:dd:4d:ea:1f:89:60:3d:3a:02:
                    16:00:73:dc:e4:8b:2e:86:82:f7:74:15:f0:3e:e6:
                    51:64:96:0e:ac:1f:0d:9b:a9:e7:47:11:de:1d:c2:
                    8b:c7:e0:ea:b5:bd:b9:ad:9b:76:b9:14:9a:5b:90:
                    9a:f1:26:de:bf:27:56:60:eb:16:0c:64:4f:db:9f:
                    09:17:5c:c0:50:29:5b:50:de:10:4b:5b:4f:23:3a:
                    a0:27:d8:3c:e6:5f:17:fc:2e:8c:79:8e:a5:ba:a3:
                    c2:e6:fe:7f:0b:fd:25:2e:65:24:27:ad:ff:8a:aa:
                    d3:a8:58:c1:08:48:97:df:f3:9f:fd:c3:6e:4b:6f:
                    5b:b9:fc:e7:40:eb:ea:09:0c:50:c6:59:00:15:1e:
                    4c:ba:9e:9a:f5:52:52:27:aa:d3:d6:a5:5d:09:6f:
                    ba:2f:bd:dd:6c:ff:01:2c:bd:d3:d0:31:ac:87:1c:
                    65:f1:7c:b2:d8:8a:c9:92:25:88:3d:a8:e8:10:5b:
                    55:79:6a:ef:21:5b:fd:5d:9a:a2:ee:85:f0:1e:bd:
                    c5:df:d4:a5:6a:b5:4a:07:d0:f7:2c:e5:97:53:32:
                    0a:d0:fc:43:ea:15:d2:37:b6:22:24:fb:2c:11:a5:
                    af:67:a1:c1:ba:70:ca:7f:94:3e:76:7d:fa:90:94:
                    45:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1F:B2:DE:FA:86:41:2D:DF:F5:50:6E:57:3E:33:10:ED:08:39:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/465e999e-2b29-35f3-8f0a-47717743a5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.crl

            X509v3 Authority Key Identifier:
                keyid:0A:48:B2:75:13:D3:0B:90:F1:F9:23:F8:EA:4D:77:B2:95:3A:E2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.240.0/24
                IPv6:
                  2602:809:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b5:d4:da:97:aa:c6:42:c2:10:31:60:b9:c0:aa:93:bc:d0:
         c4:51:7c:ad:c7:fb:51:cd:0b:e7:5f:e4:4c:e2:cb:52:fb:3a:
         09:77:ed:aa:51:74:fc:0b:70:b3:4c:0f:8e:0e:db:90:52:55:
         9a:f2:f5:44:ad:1d:24:5a:0d:e3:aa:c4:8e:00:b8:ac:e6:61:
         4f:15:06:8b:95:23:0e:85:2d:87:ff:bf:0c:a9:32:ac:01:d6:
         a2:57:84:f0:20:aa:d9:8c:2f:3a:be:e0:53:c0:9d:ce:5a:3d:
         e8:b0:bd:b5:ec:6a:39:e1:47:0e:8c:93:dd:eb:4d:8b:1d:c7:
         19:81:f1:81:ca:29:47:95:b3:8a:5d:55:0d:c7:56:99:cd:30:
         95:b4:cb:f5:92:3d:a6:62:d4:e4:74:0c:a3:d0:d0:6d:25:9c:
         56:e2:b2:61:08:5d:17:b8:3c:7b:bc:1d:f0:35:fc:11:c2:d3:
         f5:da:a8:27:f5:bb:86:f7:cb:cf:28:d1:77:99:fd:23:6c:bb:
         0a:9a:ba:c0:57:a3:f2:02:0f:2e:64:2b:4c:b7:22:df:66:58:
         bd:b9:8a:a6:d6:98:ed:c2:04:48:01:f0:30:d6:ac:90:54:cb:
         4e:62:1e:86:68:bc:c1:df:5a:3d:fd:d6:2d:25:41:2a:95:93:
         bb:33:ed:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:13:16 2025 by rpki-client