Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/dacc71d3-a94a-3e01-8efc-0551dfc89451.roa
File:                     dacc71d3-a94a-3e01-8efc-0551dfc89451.roa (raw, json)
Hash identifier:          PVFrPAtR2HS8bHz5/ydUY+VYSPN5Y4FpxjGSwCo9uwg=
Subject key identifier:   0E:AE:41:BB:A9:16:C4:F8:5E:BA:07:72:8A:B0:B8:6E:0B:4A:F5:F1
Certificate issuer:       /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
Certificate serial:       010D0C9F43285848F22C6381A2DCFAC2F2D7C080
Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/dacc71d3-a94a-3e01-8efc-0551dfc89451.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        23.29.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:63:81:a2:dc:fa:c2:f2:d7:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=5c3035b2-7859-4d7e-85c4-8cb42f9d99ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:41:3d:45:49:6e:0e:58:f7:ba:bb:86:2f:11:
                    fd:cc:da:07:a9:4b:48:ab:0d:31:ef:af:e3:38:a3:
                    b8:fa:97:91:a4:4e:cc:7d:b4:9f:90:ad:91:03:ff:
                    54:ae:ed:b8:a4:2f:af:0b:e5:7a:cf:be:4a:89:f2:
                    a8:ac:4a:ab:bd:51:47:75:81:2c:d7:5a:69:18:d1:
                    20:40:a9:f9:d8:7c:0d:e2:9e:a8:d9:3d:5b:de:b4:
                    e5:70:9c:d9:2f:4e:ee:c1:5c:87:32:5c:18:16:a8:
                    5e:3d:7f:59:a4:84:68:6b:3d:36:9e:94:64:10:d4:
                    e0:93:6a:95:45:df:40:c4:b0:d3:ba:e5:46:33:2c:
                    ed:8d:d5:94:0e:c5:59:87:3e:c0:18:ce:9b:f0:fc:
                    3b:58:d2:4f:c5:18:52:cc:d5:cc:a8:3c:4c:65:a7:
                    14:90:36:e9:c4:57:63:53:58:b2:da:66:1f:af:f3:
                    6a:1c:66:f1:c7:45:bc:af:38:31:bd:1a:f0:7c:fc:
                    15:bc:83:aa:41:de:d4:74:5a:cf:02:c2:62:bd:96:
                    0f:d9:8f:e6:ba:f8:61:3d:d8:68:2f:b0:d7:2e:15:
                    d0:6d:37:c9:bb:42:a8:57:1a:04:de:a6:cb:46:46:
                    ea:a4:eb:89:01:c3:40:6c:00:73:a2:02:57:ac:f8:
                    9a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AE:41:BB:A9:16:C4:F8:5E:BA:07:72:8A:B0:B8:6E:0B:4A:F5:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/dacc71d3-a94a-3e01-8efc-0551dfc89451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl

            X509v3 Authority Key Identifier:
                keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.29.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d0:86:1d:54:19:8c:45:0d:56:ba:03:04:0b:b9:05:9f:77:
         c7:49:19:46:5a:90:71:33:7d:d5:c3:21:db:37:3b:f6:dd:1e:
         28:b0:1c:c7:f4:88:d1:a2:c9:08:67:89:b9:e7:34:52:6e:74:
         69:d5:97:a2:b5:cd:84:97:4b:aa:a5:2d:d7:8d:89:3d:15:95:
         1e:06:02:83:7c:32:ac:88:66:f6:e2:21:d9:d5:b9:83:f5:7c:
         15:d2:ef:25:f3:61:e4:73:c4:ae:c7:f5:dc:2e:ae:31:cb:77:
         5b:52:15:34:45:c2:fd:89:58:93:61:5f:34:ef:ba:0a:52:c1:
         95:ad:45:94:a2:b2:cc:81:3d:13:dd:41:57:59:eb:29:15:d1:
         19:bb:96:6c:c6:45:ff:37:29:22:98:31:43:eb:17:0b:4d:8c:
         8a:c0:24:d7:86:58:d6:91:a8:11:50:08:42:a9:70:f3:03:23:
         9f:e4:89:db:48:5b:9c:cb:d9:5e:fa:1a:a3:a5:f3:31:65:b2:
         68:9a:44:ad:b8:92:0c:58:dd:6a:4c:94:8b:0c:85:e0:d6:db:
         a3:8d:42:01:78:f9:8a:a7:af:6f:62:20:2d:4a:04:39:83:bd:
         ee:e5:60:0f:82:5a:94:dd:05:7c:dc:05:20:78:a5:6b:dc:99:
         cb:3a:05:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:29:08 2025 by rpki-client