Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0a42a172-0f73-3008-af81-6fbc4d92431b.roa
File:                     0a42a172-0f73-3008-af81-6fbc4d92431b.roa (raw, json)
Hash identifier:          9ryEr9xFuiiy/OwG7QM8un4sm03jKsNKTRRsP6e9ijA=
Subject key identifier:   02:15:06:BA:BD:BA:7B:45:8A:A3:22:5D:69:FE:BF:F0:8E:0B:FD:B7
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848F65BEC6847A3A3C272A6F9C0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0a42a172-0f73-3008-af81-6fbc4d92431b.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     133752
IP address blocks:        23.19.52.0/24 maxlen: 24
                          23.19.53.0/24 maxlen: 24
                          2607:f5b5:2::/48 maxlen: 48
                          2607:f5b5:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:ec:68:47:a3:a3:c2:72:a6:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=be0d5c22-7770-41da-ae23-d6af0dbd53b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9d:65:58:93:9d:78:ca:f0:5e:86:4e:91:6a:
                    f8:4e:c8:1b:29:a5:df:24:74:cc:f3:49:af:22:b8:
                    59:fe:1b:53:39:b6:42:24:18:c6:8e:dc:d0:1f:39:
                    28:a2:62:1c:ea:d5:93:a5:32:e7:66:9d:81:e3:f3:
                    8e:16:3b:7b:57:6d:6c:96:25:40:5a:29:28:da:f3:
                    da:d3:d7:5c:28:01:b6:2c:1b:a2:f2:65:aa:55:36:
                    4f:23:c5:54:3f:fd:5a:68:bf:07:46:fc:9c:ff:b1:
                    f1:33:b4:75:9f:87:ff:af:06:09:51:9f:2d:48:90:
                    3a:cd:85:cb:6b:56:d6:43:c3:7f:a5:19:3d:e0:1a:
                    f7:22:a9:da:4f:c5:99:52:2e:db:18:c2:7a:5c:1b:
                    34:30:b3:d4:82:2e:06:4b:48:8e:8f:8c:80:b3:2d:
                    05:f7:10:44:50:b1:83:9d:cc:09:69:c5:18:48:72:
                    78:8e:68:55:c6:72:f9:8b:65:cf:10:75:43:c3:64:
                    34:80:d1:e7:70:e3:9b:ef:e0:b3:72:25:0c:b2:cb:
                    8a:fe:2b:d6:c4:06:ec:5e:85:6a:d3:8f:a4:09:8a:
                    8b:ec:0f:5e:6c:dd:22:65:b1:5e:3f:de:b7:8b:9d:
                    97:ca:e7:b9:b5:57:13:fa:9f:7b:d9:61:10:9d:14:
                    ab:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:15:06:BA:BD:BA:7B:45:8A:A3:22:5D:69:FE:BF:F0:8E:0B:FD:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0a42a172-0f73-3008-af81-6fbc4d92431b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/23
                IPv6:
                  2607:f5b5:2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:95:26:24:3e:15:91:0b:ae:ca:f1:63:d6:3f:f7:13:02:0c:
         77:34:1b:88:83:25:f1:63:e5:79:87:75:98:08:9d:9e:ce:9d:
         ca:00:76:ca:4a:0b:2e:43:98:2f:14:ba:fa:46:f2:f9:e4:50:
         15:64:f2:f1:1a:6b:c4:ce:06:9a:c7:4d:2b:fc:19:76:3d:9c:
         62:e7:a1:f6:12:ab:0a:07:8d:92:db:7c:64:32:5f:08:36:61:
         00:9d:06:5b:2d:0d:f3:bc:32:4e:54:60:c0:84:c0:8d:3f:62:
         f3:0a:d2:c3:cc:14:56:5d:92:86:3d:bc:ee:b4:71:75:fd:61:
         3a:ee:e0:5d:87:7e:83:64:22:19:0a:03:8b:ba:5d:ab:cf:8a:
         c9:c6:b2:02:2e:21:0f:de:b6:1f:92:2a:79:11:3e:9b:44:d8:
         c8:4b:d4:08:b1:88:f1:85:f0:b7:8f:72:56:c4:ff:ec:54:e2:
         f7:9d:28:fb:32:e8:31:9a:0b:e1:93:d4:e5:75:91:db:02:a6:
         90:81:2d:04:f3:39:ef:46:69:c7:de:e5:5d:9b:90:f5:a2:ea:
         21:3e:e6:ac:d8:1c:1f:48:c5:9d:24:e0:88:15:3b:7a:61:f3:
         f6:25:78:33:00:0c:71:84:36:d6:5c:fe:2f:b3:06:6d:bc:10:
         6e:11:43:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:02:48 2025 by rpki-client