Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/9787b498-f81f-37d7-a779-d4e727560c5b.roa
File:                     9787b498-f81f-37d7-a779-d4e727560c5b.roa (raw, json)
Hash identifier:          Wmn/5OH2JvQlQccMnk1xLVPBNgEk+KBgbmJsBxjAN3M=
Subject key identifier:   43:9A:6D:BB:72:A4:97:66:B1:FF:EE:0E:9E:45:AA:39:3F:23:04:D9
Certificate issuer:       /CN=f838c026-61f9-443d-b867-26f60a99d561
Certificate serial:       010D0C9F43285848CC7B9E2C24FD0B69140B928C
Authority key identifier: 23:47:1B:D2:AE:7E:16:EB:A1:A9:45:E8:0E:82:11:88:74:9A:B2:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/9787b498-f81f-37d7-a779-d4e727560c5b.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     30205
IP address blocks:        23.168.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:9e:2c:24:fd:0b:69:14:0b:92:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f838c026-61f9-443d-b867-26f60a99d561
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=653b33f6-6c8a-4c8f-8096-eafcbe7f9065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4e:46:1f:e5:62:84:d1:1d:69:58:91:1b:c3:
                    32:1e:3f:25:d1:f0:ec:a5:56:f8:54:c0:2a:c3:c1:
                    db:f9:6f:4a:14:1f:67:6f:cb:19:ec:eb:9c:0d:64:
                    18:ae:4a:84:8b:f5:b3:1e:cd:1d:4c:33:33:ee:9d:
                    3e:e3:b1:de:bb:2b:16:18:f4:c4:fc:cb:2a:71:47:
                    ec:71:1a:15:e6:7b:8d:dd:db:0f:f6:a4:54:48:f9:
                    3f:c6:82:56:98:e7:b9:5a:ac:10:7e:fb:3b:ae:e7:
                    f5:8a:83:a3:74:bc:ea:c6:ba:18:df:d3:43:a5:3c:
                    93:0d:be:13:d3:ac:ae:af:48:6a:01:be:09:cd:fb:
                    1f:8e:19:18:81:ef:c4:d0:34:80:bb:0b:be:22:8e:
                    02:7e:5a:40:a1:76:7a:b2:da:bd:ce:5f:86:35:46:
                    9c:d0:6d:31:41:a3:d7:f7:19:e3:92:7a:6e:08:71:
                    59:59:d5:2a:3a:88:c9:a2:40:ba:93:c0:f1:5d:9d:
                    ea:42:31:dc:ce:27:2f:2d:ff:db:1d:06:c0:2b:2e:
                    de:64:99:56:2a:2f:05:e3:37:0c:51:44:8e:c5:95:
                    72:d9:97:6a:21:8a:0f:e2:53:dd:15:2e:03:97:43:
                    9e:83:04:83:a6:77:44:24:3c:e5:70:15:08:21:9e:
                    a2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9A:6D:BB:72:A4:97:66:B1:FF:EE:0E:9E:45:AA:39:3F:23:04:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/9787b498-f81f-37d7-a779-d4e727560c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.crl

            X509v3 Authority Key Identifier:
                keyid:23:47:1B:D2:AE:7E:16:EB:A1:A9:45:E8:0E:82:11:88:74:9A:B2:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:cf:d5:1a:87:85:97:3a:96:75:cf:51:93:e8:eb:04:d1:19:
         8c:38:06:9a:da:46:ca:52:62:7f:14:97:9a:45:4b:3a:dc:59:
         2c:1c:6f:1c:9d:47:30:d5:6b:dd:31:6a:ab:40:75:3e:10:c9:
         dd:f0:fd:70:a4:36:65:0a:b8:9c:cb:1c:cb:e9:a1:e0:e1:f5:
         94:d4:d1:84:62:ff:eb:e5:e9:78:29:02:c0:2b:f6:1b:4f:48:
         b3:44:2a:b6:df:f9:c7:0a:bd:9c:4e:7e:bd:54:e4:e8:19:fc:
         4a:78:5c:95:e0:57:a9:97:82:bd:18:bb:24:66:0c:01:25:82:
         b7:6b:41:80:f1:9b:35:2a:d5:c1:86:46:d8:1c:17:79:8d:6a:
         e3:2f:4c:e6:e8:a6:e2:a3:a3:6e:45:7a:9b:5a:03:72:ed:df:
         62:3d:21:4e:05:70:e7:4a:dd:38:a8:14:a0:5e:b0:26:53:00:
         0c:08:ca:90:c1:e1:58:37:28:fa:58:35:18:d6:2b:df:de:5d:
         cf:e2:15:35:6c:af:1f:1c:4c:72:81:f7:1d:a4:f3:64:d6:75:
         58:dd:23:58:41:dc:55:c2:d0:20:f5:d7:4a:3d:77:79:b5:4c:
         23:db:dc:53:87:11:87:a7:f9:84:f1:4e:3a:62:66:78:50:84:
         44:92:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:20 2025 by rpki-client