Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/7b3a6aca-8f55-3f78-bb26-0bfe70d0fa81.roa
File:                     7b3a6aca-8f55-3f78-bb26-0bfe70d0fa81.roa (raw, json)
Hash identifier:          B31hb3KROyA/lltqfwoFNlZOxh7O+b16hIBlx3yAL/E=
Subject key identifier:   08:90:6B:D0:4C:10:5A:AC:11:2B:74:78:3C:53:5F:99:17:AB:83:C0
Certificate issuer:       /CN=e9650b1c-fc44-4fff-a4a4-cecd13f234e9
Certificate serial:       010D0C9F4328584917DC2645CD67B4558AB7FC00
Authority key identifier: 42:96:05:27:D8:D6:7A:0C:12:45:C3:4E:0C:7F:CF:97:85:2D:F4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/7b3a6aca-8f55-3f78-bb26-0bfe70d0fa81.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     35990
IP address blocks:        23.177.48.0/24 maxlen: 24
                          2602:fca6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:26:45:cd:67:b4:55:8a:b7:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9650b1c-fc44-4fff-a4a4-cecd13f234e9
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=ce3bdfa0-77d6-4d2c-896e-8e309aef06ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:52:9a:8e:d0:2f:20:72:08:fc:a4:7d:62:39:
                    7b:3f:b9:0b:2d:cc:54:e8:02:52:89:b4:04:e1:cd:
                    bf:cd:0a:34:b5:fc:39:38:11:95:7b:19:09:21:35:
                    0d:73:55:df:66:8d:b3:6a:cb:cd:f8:a0:4c:ff:cf:
                    5f:90:94:69:68:bd:9b:dd:f1:d3:b5:cd:a3:37:b8:
                    e0:33:17:1c:64:9a:1c:77:29:73:45:e8:94:7f:06:
                    3f:19:57:c9:af:bc:d7:54:ee:68:e5:98:78:83:66:
                    96:1a:68:ef:a4:2f:c8:e1:0c:36:a4:40:12:0b:e0:
                    de:eb:0f:84:14:36:b1:02:7e:48:48:7a:72:e0:f4:
                    25:7c:d9:61:14:94:e9:0d:b4:9e:04:53:9c:e7:2a:
                    d0:b6:63:13:e1:5a:6b:de:38:cc:1f:f0:d0:b1:33:
                    5f:c0:d3:18:fd:b7:10:61:e4:87:23:46:eb:d0:94:
                    1f:f2:04:13:2b:79:3d:d9:19:ba:4d:b4:b4:07:bd:
                    79:40:34:e9:a5:ae:84:24:a2:2c:ae:6a:69:c2:a8:
                    6d:a1:b3:a4:be:44:0d:c7:f8:6f:d8:1f:25:1f:f3:
                    cf:69:ae:f3:87:50:64:3d:05:b7:b3:46:c3:ba:1a:
                    e5:53:f5:d0:10:0c:12:c0:20:a2:d9:13:f4:5b:60:
                    9c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:90:6B:D0:4C:10:5A:AC:11:2B:74:78:3C:53:5F:99:17:AB:83:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/7b3a6aca-8f55-3f78-bb26-0bfe70d0fa81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.crl

            X509v3 Authority Key Identifier:
                keyid:42:96:05:27:D8:D6:7A:0C:12:45:C3:4E:0C:7F:CF:97:85:2D:F4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.48.0/24
                IPv6:
                  2602:fca6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:1d:ea:4a:5a:2c:9c:49:17:43:5e:ac:c0:33:18:1c:e1:31:
         a0:0e:e9:4e:fd:73:16:97:7f:08:f9:a3:b2:62:97:bb:8f:ca:
         a3:a5:32:f6:24:2a:7c:0a:68:52:63:92:cf:c9:aa:f9:4c:76:
         ae:be:df:a6:89:96:6c:b1:ea:8a:03:68:af:00:b6:7f:fb:68:
         28:21:82:00:ee:d2:fc:04:da:a5:10:2a:45:bd:71:82:52:76:
         5a:2e:01:0f:df:2e:e1:31:50:b2:bf:07:02:53:7e:76:e2:da:
         d5:d4:35:8a:70:79:92:57:85:2e:4d:0b:f2:7b:4a:07:81:53:
         2c:1f:65:1b:79:cf:95:e2:09:22:2f:0d:95:d2:a6:88:fe:fc:
         19:41:63:be:c5:53:a4:5e:26:3d:b4:cf:ed:7d:c2:31:95:52:
         7f:5b:2c:b7:79:0e:0b:4e:d2:84:a5:f5:cd:c4:fb:18:3b:36:
         eb:81:70:0f:89:d7:74:71:93:9d:f4:81:82:ef:c6:d8:6e:f3:
         16:03:50:5d:94:46:d5:6a:d3:cb:1f:6e:b1:a8:43:92:f3:fe:
         fb:80:ec:74:25:b9:30:0c:ee:12:d9:b7:13:74:9c:5e:e5:78:
         9f:19:84:1a:85:8c:c7:75:4f:04:27:c4:bd:26:35:c0:d5:ca:
         32:13:ee:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:01:07 2025 by rpki-client