Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e19302d3-54e3-3784-8553-4362e2b89940.roa
File:                     e19302d3-54e3-3784-8553-4362e2b89940.roa (raw, json)
Hash identifier:          H9+0rgp9VjMIyiG5/0Bh60bRmMznUGAnJIXRelrlefQ=
Subject key identifier:   7B:DC:3A:72:51:E7:82:F2:82:69:A9:1E:4E:25:38:81:13:29:F4:D8
Certificate issuer:       /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial:       010D0C9F43285848D211397A10762052B3119840
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e19302d3-54e3-3784-8553-4362e2b89940.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     210645
IP address blocks:        23.151.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:39:7a:10:76:20:52:b3:11:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=cba10c7a-c9db-4d47-a022-43d75e1d6605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:a9:4f:02:14:ad:c0:f9:26:02:1b:54:64:
                    e5:ab:54:f4:b3:3b:fa:19:90:36:3a:7d:b1:86:42:
                    39:a5:78:09:e3:ee:6c:00:0a:fa:6a:cb:dd:c1:5a:
                    75:b8:87:94:03:4e:0a:0f:8e:8c:7d:b9:6d:b7:b0:
                    c6:e6:e7:fc:fe:2f:c3:15:9a:e6:0b:4a:83:6d:aa:
                    e7:57:25:61:95:71:98:56:bf:35:ae:78:42:31:8a:
                    26:1f:18:80:75:3e:9f:bd:24:03:97:75:2e:c9:11:
                    fa:48:b3:a4:32:a6:d0:e3:ab:3e:ee:cf:46:f0:2a:
                    87:b6:b9:73:c5:7c:18:54:6c:17:b2:ae:53:e2:2b:
                    a6:18:a0:29:23:af:a1:e0:06:0b:2c:38:84:8d:a2:
                    96:d3:f9:01:a0:64:82:b0:cf:4e:da:d3:21:63:be:
                    21:8c:18:9c:2e:14:22:6d:3f:53:b8:94:d8:44:8d:
                    eb:1d:ea:3e:6d:db:ae:ad:b1:97:dd:3f:02:99:4b:
                    fc:ab:7e:3d:06:82:16:85:82:a7:04:70:35:06:c6:
                    5f:fb:4c:42:ed:37:8f:6c:dc:9b:74:55:1b:c3:bc:
                    68:be:07:6e:07:47:c0:c6:68:ba:f7:2b:f2:a3:23:
                    0b:c8:b8:b3:b0:8f:87:a7:45:68:e1:09:e6:17:e2:
                    aa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DC:3A:72:51:E7:82:F2:82:69:A9:1E:4E:25:38:81:13:29:F4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e19302d3-54e3-3784-8553-4362e2b89940.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c9:0b:53:64:a4:8b:ec:45:10:a3:74:b2:18:c1:7e:4f:3b:
         53:e1:bf:0d:b9:8e:f6:6f:c5:ec:5a:28:7f:21:1f:a1:4e:61:
         93:a7:fd:3c:1f:4b:85:81:d4:51:4c:f0:ed:05:74:1e:ba:ea:
         ee:62:de:d6:f8:43:cf:19:f6:d6:5c:5b:fe:43:d1:f3:ea:6b:
         c4:23:d8:a5:96:1c:18:dc:32:df:05:d8:e0:d5:d3:8f:d0:4b:
         fd:84:46:ac:2e:a3:94:b8:0b:0d:25:dd:bc:59:75:3e:6e:e6:
         e8:b3:b2:fe:3d:e7:84:21:43:07:f1:ac:3d:75:4a:e0:f6:df:
         46:1a:85:d6:55:55:60:c8:72:b8:2e:b4:5e:a2:48:75:11:7d:
         bb:85:7d:80:2c:64:2b:0a:47:30:8a:b4:6e:66:86:62:9a:4d:
         8b:6e:3f:5e:61:49:94:71:c9:2f:1d:2c:ca:7e:37:ee:01:a8:
         24:4e:82:b0:17:9c:92:f2:10:45:13:a6:55:f8:ed:9d:93:78:
         bd:b2:40:e5:3b:50:8b:8c:8c:1c:99:50:81:60:1e:5c:43:5d:
         fc:48:8b:1f:8c:eb:27:11:ef:cc:93:34:b3:72:f0:d2:f8:c2:
         77:57:ff:8c:54:ca:ba:6c:af:6f:7b:5b:c6:36:0f:8a:66:42:
         95:f3:76:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:29:44 2025 by rpki-client