Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/f8553b5d-807d-3297-a922-562a8bd98bc4.roa
File:                     f8553b5d-807d-3297-a922-562a8bd98bc4.roa (raw, json)
Hash identifier:          UVcaxDhzVv7JqJMZrMooV4MjEyAyMkAWgF/dE2pB2es=
Subject key identifier:   49:C4:1A:5D:C6:2F:F6:69:F6:B8:78:6A:72:83:76:BC:73:98:7D:CB
Certificate issuer:       /CN=7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56
Certificate serial:       010D0C9F432858490021573F38B4DA77166FFE80
Authority key identifier: 0A:48:B2:75:13:D3:0B:90:F1:F9:23:F8:EA:4D:77:B2:95:3A:E2:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/f8553b5d-807d-3297-a922-562a8bd98bc4.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     54364
IP address blocks:        23.173.240.0/24 maxlen: 24
                          2602:809:c000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:57:3f:38:b4:da:77:16:6f:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=0a7d715f-6e06-4a7d-8724-df199f5c42d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:ed:af:8f:0d:e2:72:16:ae:40:55:35:e7:
                    0c:ca:ed:9f:e4:67:47:61:45:88:e8:f6:b8:83:a0:
                    db:08:ad:19:69:10:0d:40:62:3b:31:7a:16:eb:bd:
                    22:c7:62:47:3d:6c:d2:5b:dd:ee:38:a6:eb:41:4c:
                    0a:ba:29:3a:dc:9c:27:fc:39:65:5a:95:b7:ac:08:
                    60:75:84:82:ba:8d:8d:1a:a5:fe:73:fa:24:7b:11:
                    54:a1:74:6e:4f:18:53:8c:46:03:54:96:c5:01:a5:
                    ed:0c:99:37:d3:3c:e3:4c:70:8f:f0:13:09:e7:25:
                    ae:ec:23:45:11:23:13:03:c1:9c:09:49:e9:67:52:
                    57:9f:eb:11:e4:41:06:b4:52:d9:96:9c:91:c2:ec:
                    c5:c8:da:60:62:6b:43:9b:f4:8e:b0:78:10:94:b9:
                    82:39:9a:7b:f5:81:ee:b9:90:f0:2f:c4:9c:1b:08:
                    98:14:57:aa:74:13:4d:8e:fd:95:2f:ee:6d:2a:5b:
                    da:a3:a6:ad:02:e8:72:b8:3d:a7:3a:62:75:99:f6:
                    71:2d:59:de:74:0d:42:3a:5f:b9:24:5c:97:17:52:
                    fb:66:7c:b0:50:e8:f6:ba:67:ce:e2:87:69:4d:a7:
                    30:23:55:46:58:4f:cb:ca:90:88:12:a0:69:2a:a3:
                    1f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C4:1A:5D:C6:2F:F6:69:F6:B8:78:6A:72:83:76:BC:73:98:7D:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/f8553b5d-807d-3297-a922-562a8bd98bc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.crl

            X509v3 Authority Key Identifier:
                keyid:0A:48:B2:75:13:D3:0B:90:F1:F9:23:F8:EA:4D:77:B2:95:3A:E2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.240.0/24
                IPv6:
                  2602:809:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:34:4c:6e:ad:9b:8d:f6:35:5e:e7:14:c9:2f:19:b5:50:65:
         ed:06:56:3b:84:6e:bb:4d:fe:8b:55:98:37:6c:bf:e6:8b:34:
         94:c1:08:e8:b5:75:f0:f4:4e:cf:b1:ea:2d:30:36:7d:83:17:
         94:73:98:86:d5:9f:08:66:96:a0:de:f5:8b:2c:04:0f:a0:0c:
         2c:88:83:57:ab:39:30:78:3e:ab:92:0b:f0:10:ce:a1:f8:11:
         88:d5:c2:9a:c3:22:93:03:c8:2a:93:cd:78:cb:ad:d7:a2:29:
         53:91:1f:f4:19:f7:30:35:0e:54:6f:e7:0a:0a:f3:32:12:b2:
         e2:03:6e:27:20:07:ba:16:9e:cb:fd:e1:d9:c9:e6:21:65:6c:
         8f:a8:bf:ae:80:38:1c:13:e7:57:91:48:cc:c7:82:f8:60:87:
         e0:00:a2:ba:5d:36:10:c9:32:4a:7f:31:6b:76:e2:13:51:9d:
         5e:c1:c5:76:5e:98:e0:4b:15:b4:10:20:35:ac:6c:d0:e6:f5:
         6d:a6:5a:38:f5:7d:d1:34:dc:17:34:24:53:07:9b:a2:67:f5:
         5f:90:81:6a:db:fb:67:c3:a5:02:d2:f8:82:34:20:32:52:e5:
         5f:30:56:41:dd:43:6f:48:99:48:35:23:45:fb:d1:12:9f:9e:
         b8:63:f3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:11:00 2025 by rpki-client