Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/6fd6ac9e-47da-376f-bc50-69bc4aa9f95e.roa
File:                     6fd6ac9e-47da-376f-bc50-69bc4aa9f95e.roa (raw, json)
Hash identifier:          8LbrV1cGj6Ot3+hew2M4ZN2Y2ZVm63LZzDqkdBOPC30=
Subject key identifier:   9A:95:BB:F3:35:DA:28:A8:E8:46:68:1A:E2:17:7E:03:59:8C:28:52
Certificate issuer:       /CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3
Certificate serial:       010D0C9F43285848E16BEA376A50B794F2C10480
Authority key identifier: 93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/6fd6ac9e-47da-376f-bc50-69bc4aa9f95e.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     1030
IP address blocks:        23.167.40.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:ea:37:6a:50:b7:94:f2:c1:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=c3c1ac6a-602e-4570-9f1a-4cc635cd6bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1c:3f:3a:6a:00:c6:ec:59:81:f2:34:59:43:
                    16:da:fd:75:34:f8:c7:e2:7b:3c:94:f9:95:89:87:
                    60:ea:c2:53:3f:7c:f6:7d:62:41:de:7f:1b:82:a8:
                    25:a9:b3:0b:52:66:44:1c:ca:9c:d3:1d:b9:f3:23:
                    be:98:20:1b:a7:4f:89:26:8b:8e:4f:22:48:59:4d:
                    57:f6:20:72:a1:81:37:a8:7c:61:f1:cf:7f:90:63:
                    c3:e6:52:22:dd:d4:08:49:f3:ba:5e:4f:a7:e5:6a:
                    07:af:4b:42:5e:d5:78:71:82:fc:65:91:fa:10:d9:
                    88:72:0c:17:45:16:c5:df:1e:4d:10:a5:91:77:94:
                    20:83:de:7a:15:63:59:19:10:d5:f3:a6:03:d8:61:
                    c0:46:9e:d2:80:cc:b4:e9:fa:2f:d8:bb:c0:97:2c:
                    cb:4d:3e:f3:96:78:4b:e4:de:a8:d9:25:77:60:b6:
                    09:1c:a9:0c:80:8b:14:a0:46:21:ba:28:2e:cc:be:
                    89:f5:4f:64:3a:73:ac:05:69:6a:dc:e8:b1:52:5e:
                    b3:0b:dc:06:4e:72:24:74:f6:d5:dc:d5:5a:07:e8:
                    0a:eb:ed:50:31:6e:86:0f:e2:82:32:4a:2c:d1:71:
                    d8:b6:51:10:8a:64:49:20:bb:37:d1:21:e5:81:ce:
                    31:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:95:BB:F3:35:DA:28:A8:E8:46:68:1A:E2:17:7E:03:59:8C:28:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/6fd6ac9e-47da-376f-bc50-69bc4aa9f95e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.crl

            X509v3 Authority Key Identifier:
                keyid:93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:74:b3:46:78:11:cf:37:2c:c6:a4:bb:ab:88:c6:41:ab:d2:
         d0:1d:f2:4c:af:8f:83:6f:37:66:64:81:5b:9a:ad:6a:01:b5:
         9d:f0:e8:04:d8:dd:26:b0:95:f4:cf:ec:78:77:87:f5:6e:52:
         0c:35:52:63:b8:98:a7:17:82:d9:c3:62:54:30:66:ac:73:13:
         8a:64:95:c7:46:40:0d:94:df:96:d0:70:69:4c:70:85:de:57:
         63:dd:27:19:21:f3:b0:da:46:7d:3b:ec:74:4c:fa:46:1d:f8:
         86:80:6c:81:a9:34:c5:de:59:bf:11:e8:2a:68:83:4d:09:c2:
         5a:29:1f:3e:4d:00:42:24:8e:6b:ee:ca:3a:4d:9d:99:43:cb:
         76:fd:c4:00:79:f2:41:bb:db:7b:20:d1:a9:25:3d:ba:7e:20:
         54:d3:97:db:fd:2a:06:bd:16:25:03:d2:bc:8e:29:2f:17:60:
         d1:18:91:1d:bd:05:d1:99:5a:9a:8b:b5:ee:de:56:2b:4f:fd:
         3d:75:17:7b:59:e0:61:eb:07:ed:ed:0d:23:75:40:ea:a7:31:
         7a:9c:e7:11:2c:84:ca:00:84:7d:5e:0d:50:df:c9:10:4c:d7:
         a8:58:45:fd:a2:3d:be:5f:a5:8e:6a:99:8f:18:06:f8:20:a1:
         27:82:74:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:20 2025 by rpki-client