Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/18787a4c-f936-301b-bc53-67ab088cba13.roa
File:                     18787a4c-f936-301b-bc53-67ab088cba13.roa (raw, json)
Hash identifier:          6tEhLwsxlC3dZXoZZCMdaSKQxSELO4pv7G7J5OVgR8o=
Subject key identifier:   F8:9C:FB:D4:73:1C:5A:5E:81:C2:13:03:C0:BF:93:F2:85:EC:38:85
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318A5956FA8588F96D06A58
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/18787a4c-f936-301b-bc53-67ab088cba13.roa
Signing time:             Thu 23 Jan 2025 06:13:19 +0000
ROA not before:           Thu 23 Jan 2025 06:13:19 +0000
ROA not after:            Wed 23 Apr 2025 05:13:19 +0000
asID:                     16591
IP address blocks:        23.228.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:a5:95:6f:a8:58:8f:96:d0:6a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:19 2025 GMT
            Not After : Apr 23 05:13:19 2025 GMT
        Subject: CN=a3e912b2-e768-4a12-bb87-d9c56175e0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e5:1d:e1:76:5a:57:cc:ed:ef:ff:80:2c:1a:
                    26:a5:06:20:df:6a:8f:3d:0b:14:3c:f3:ad:a6:c1:
                    33:86:b9:1a:92:72:19:c5:c3:69:42:e2:88:f7:77:
                    a6:ef:3d:c4:c3:47:7e:c8:78:41:d1:cf:aa:38:13:
                    7d:c8:96:6c:ed:8b:73:a7:57:3e:ff:47:59:55:18:
                    da:8b:f6:d8:12:5c:84:b5:5d:f0:6d:dc:6b:6a:82:
                    be:25:b0:81:1f:2e:3c:9d:76:4b:5d:e0:fc:0e:9c:
                    7a:ad:6b:2d:84:88:9c:d3:6c:4d:6c:27:84:72:38:
                    6e:24:be:1f:32:bd:a1:85:30:92:70:98:6a:f9:7d:
                    da:33:8c:dd:68:a0:04:51:c8:2c:0b:96:58:88:25:
                    36:fa:43:0f:0c:4b:a7:fe:72:07:57:af:d0:b6:28:
                    0a:dd:34:f4:bf:96:70:ea:cf:a5:99:8a:22:76:3b:
                    11:cb:93:5e:0b:9d:68:02:0f:37:8f:af:4a:33:37:
                    0b:a4:39:c9:14:ac:77:d9:2e:51:89:08:61:e7:1e:
                    f7:68:1b:c0:29:5d:13:22:58:38:3c:85:b6:e1:10:
                    ee:4c:d9:fb:ef:9e:6f:72:e9:30:c6:7f:e8:a8:33:
                    12:95:d4:71:dc:05:b2:d0:39:e7:a0:90:cd:b2:30:
                    dd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9C:FB:D4:73:1C:5A:5E:81:C2:13:03:C0:BF:93:F2:85:EC:38:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/18787a4c-f936-301b-bc53-67ab088cba13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.228.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:8a:be:54:3e:04:a7:1f:c4:7f:a1:d3:7c:51:12:9b:5b:31:
         7c:79:de:8b:ec:da:e9:01:ca:2f:80:7c:c7:84:c6:19:a6:d1:
         fc:2d:30:7a:f6:87:97:3e:db:b0:db:18:51:3d:9d:5d:8e:6e:
         aa:8f:8a:34:97:a7:f1:ec:33:e0:02:6d:ac:2f:1e:48:ff:25:
         c6:7b:45:c0:4c:17:10:c9:8c:25:f9:4d:56:f8:83:6e:e9:3e:
         ca:0b:7a:4c:bf:62:eb:bd:2f:70:20:b8:11:07:b2:f5:f6:e8:
         84:b9:3a:db:f1:0a:46:d1:ab:4d:ef:bb:60:51:8e:3e:bd:a4:
         dc:65:91:20:87:41:e4:9b:53:ae:53:67:57:dc:a4:4e:80:52:
         16:2f:70:c0:4b:a8:9c:7a:69:e0:fb:57:e4:d9:2a:b4:7d:23:
         cd:d0:57:90:07:4b:87:8d:3f:4c:50:ed:eb:64:d3:bf:b4:cf:
         c3:dc:43:52:fa:d6:0c:fc:65:e9:53:dc:da:c0:80:33:b8:5e:
         60:7d:6a:18:be:96:f1:75:cc:27:b5:c6:c9:f0:63:8d:aa:20:
         5e:83:b0:93:2d:1a:b0:b7:6a:81:ea:e1:56:db:ac:ed:39:04:
         97:79:12:2b:98:90:61:6f:ff:06:2f:2f:5a:af:ce:7b:1c:f5:
         fc:08:8f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:02 2025 by rpki-client