Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/6b4aada1-e770-3078-aefb-059660524c32.roa
File:                     6b4aada1-e770-3078-aefb-059660524c32.roa (raw, json)
Hash identifier:          UJQJ44CgryTOWJdZEfdU6ov/fkM8YMfKl4WDk8J5Wok=
Subject key identifier:   DF:ED:C7:42:84:9D:9E:AF:83:E3:4A:A8:FA:60:4A:9E:2F:DE:BC:6A
Certificate issuer:       /CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59
Certificate serial:       010D0C9F4328584913AC334A934BFE4042691880
Authority key identifier: 0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/6b4aada1-e770-3078-aefb-059660524c32.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     23077
IP address blocks:        23.170.24.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:33:4a:93:4b:fe:40:42:69:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=1c968adc-9b53-41da-8e8b-7cc050b8296d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:28:4e:aa:92:c3:6c:84:7c:4a:d2:b9:2b:
                    11:a1:e6:a7:25:ed:88:11:19:f7:6d:5d:b7:5d:04:
                    ed:61:0a:3e:c9:2b:b1:f5:4a:d0:02:60:5a:ff:d1:
                    44:6c:a8:81:43:6c:7e:d5:a0:ca:b8:98:2c:ad:62:
                    8d:8b:a6:a1:02:14:4b:53:6a:4c:10:cb:30:ad:8b:
                    11:ef:5d:66:8c:35:22:03:8e:2b:7e:01:87:0f:a2:
                    3a:4c:3b:34:2b:9f:74:96:25:f7:7e:33:22:c4:4b:
                    c2:3c:b0:9b:61:05:82:5e:9e:84:42:1f:aa:ee:f4:
                    b6:92:15:fb:7d:0d:d4:4f:7d:01:c6:c2:16:1e:e6:
                    0e:63:74:ce:f5:00:80:8a:84:8b:e4:3b:f1:0d:a9:
                    0f:7e:e9:55:bd:93:91:73:71:1d:ae:20:32:1a:41:
                    80:ae:3b:c0:2f:b6:41:dd:1d:28:59:69:fb:a6:bf:
                    07:ab:e1:20:35:11:58:4c:c6:76:64:95:46:51:7e:
                    a5:3c:b3:e0:c5:02:da:f5:b9:fd:80:28:b1:d0:18:
                    f6:ca:70:d4:b0:01:fd:86:d6:4d:ce:ba:b5:4e:75:
                    05:2b:26:a9:00:13:34:7b:1e:ce:50:93:48:1c:2e:
                    ea:09:87:f3:af:25:22:4f:82:4a:3d:ad:64:13:d4:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:ED:C7:42:84:9D:9E:AF:83:E3:4A:A8:FA:60:4A:9E:2F:DE:BC:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/6b4aada1-e770-3078-aefb-059660524c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl

            X509v3 Authority Key Identifier:
                keyid:0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7e:88:20:57:6b:9a:76:e7:87:eb:dc:95:ff:72:cf:a0:38:
         3c:a7:73:bd:e1:21:02:60:2d:61:74:96:bb:f3:8d:7d:c4:c0:
         23:89:7e:52:0e:6f:a2:33:35:5d:ba:11:0f:e4:8e:6e:00:82:
         8a:ad:ac:6b:0e:71:ac:dd:f8:ca:40:90:b9:cd:bb:67:e3:60:
         ce:09:7b:d0:75:c6:ba:50:3b:c0:75:7d:01:66:d0:48:41:65:
         06:98:06:61:62:12:34:5d:c7:67:b5:71:3d:dd:b0:39:bf:69:
         80:e3:67:59:b7:e7:fc:15:68:73:bb:a4:9b:9d:1e:91:b2:a1:
         0c:46:e7:fc:f2:87:68:49:75:40:f1:42:c0:7a:5f:64:98:71:
         38:15:65:48:3e:91:6f:e2:92:83:01:f2:ff:91:88:9f:9d:fa:
         84:f3:56:d9:eb:e7:ab:01:24:8d:9e:e6:b0:52:c9:8e:41:a3:
         4e:f4:37:3d:28:49:63:24:48:3a:73:04:d4:8a:33:15:aa:9f:
         16:e3:d1:cb:82:d6:23:60:7c:38:eb:34:cc:fb:e0:88:a0:57:
         89:30:14:83:fa:e8:e7:d6:8e:90:51:db:60:ea:fb:57:74:f9:
         0d:26:dc:7f:bb:63:ac:11:6f:e5:ea:10:aa:49:70:6e:f1:67:
         9e:37:cb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:08 2025 by rpki-client