Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/09c08d2e-de43-37bd-ad1b-1356bceb680f.roa
File:                     09c08d2e-de43-37bd-ad1b-1356bceb680f.roa (raw, json)
Hash identifier:          wIk3uqj/2us+z7J7gVxZKd0jyAUrsJ3VFFLjDgCU9/c=
Subject key identifier:   BD:71:CF:84:BA:46:11:6A:8B:94:EE:C6:AB:F9:C5:A4:D3:DB:57:95
Certificate issuer:       /CN=467861ee-0aa8-4688-af94-7d540e2ddc56
Certificate serial:       010D0C9F432858491D11EB706EFBB348C8994C00
Authority key identifier: 13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/09c08d2e-de43-37bd-ad1b-1356bceb680f.roa
Signing time:             Fri 07 Mar 2025 22:48:22 +0000
ROA not before:           Fri 07 Mar 2025 22:48:22 +0000
ROA not after:            Thu 05 Jun 2025 21:48:22 +0000
asID:                     400529
IP address blocks:        23.161.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:11:eb:70:6e:fb:b3:48:c8:99:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467861ee-0aa8-4688-af94-7d540e2ddc56
        Validity
            Not Before: Mar  7 22:48:22 2025 GMT
            Not After : Jun  5 21:48:22 2025 GMT
        Subject: CN=7ea6d5d4-d933-4de3-835e-ebd4f8d984d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c3:6c:25:99:da:1f:f9:ae:c7:5c:64:4f:35:
                    27:9a:14:3b:c6:2b:e1:1a:e0:7e:1d:f0:80:76:ae:
                    5e:80:6c:ef:8e:a5:58:fd:3b:96:05:26:8c:01:04:
                    05:e1:29:ab:dc:71:19:0c:89:48:f4:12:27:50:e0:
                    b3:ff:cb:e6:88:90:76:2a:27:58:0e:1a:17:80:8a:
                    6a:d7:1f:19:38:96:47:9f:04:03:3e:f1:ab:1b:c9:
                    d2:ee:53:c2:04:05:47:2d:ed:1c:1d:e8:f0:e0:35:
                    07:8f:2d:d3:9b:21:bf:13:c4:c5:de:18:73:99:b9:
                    48:b7:07:d0:52:7a:ca:e0:b6:8b:aa:f2:b9:b9:e6:
                    22:7d:22:c9:12:b0:11:75:4c:08:f9:1a:19:8d:e3:
                    57:3c:0d:38:28:07:54:5f:bb:fb:3b:8f:37:65:e7:
                    49:a5:b3:86:9d:7d:fd:ba:8a:d7:84:49:aa:31:42:
                    f8:d6:7a:cd:a8:df:8d:d4:ec:57:d6:25:e4:a3:18:
                    b9:f6:df:ff:82:8c:fc:89:9f:fc:72:d9:e2:56:cc:
                    b3:bf:2b:a5:0b:8f:7f:ee:b9:7c:86:9f:8f:1e:33:
                    e2:d0:bc:25:1e:0a:68:21:77:dc:5e:5c:ca:88:a0:
                    f4:05:58:02:2c:de:70:70:81:63:4c:b5:1c:0e:de:
                    e2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:71:CF:84:BA:46:11:6A:8B:94:EE:C6:AB:F9:C5:A4:D3:DB:57:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/09c08d2e-de43-37bd-ad1b-1356bceb680f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.crl

            X509v3 Authority Key Identifier:
                keyid:13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:3f:59:4d:c5:d6:5e:11:38:56:67:ed:22:a7:b9:93:70:aa:
         8a:ef:ba:dd:50:f9:2e:2b:be:2f:4e:f1:42:b8:95:37:c1:0e:
         ef:43:69:9b:57:2a:2a:3b:7c:8c:b2:f4:7b:30:e8:8d:e9:19:
         15:88:33:26:ff:0a:b7:a8:83:60:eb:5b:90:2f:da:d0:24:dc:
         05:3b:92:07:dd:89:de:93:e8:bb:5a:f2:14:4b:08:34:d5:8c:
         81:20:84:c6:60:5d:c6:d2:16:9f:ea:b4:b5:c4:8b:81:08:a8:
         5c:b9:1b:ec:ee:30:39:0b:ef:40:bf:c1:8d:bc:b5:fe:c1:86:
         81:62:5b:b7:14:76:b9:e8:78:41:80:f2:90:be:ec:7b:c2:9b:
         a5:ca:eb:18:b2:ec:77:8f:43:24:cc:08:ba:cf:8b:e2:55:e7:
         25:dd:62:1c:d9:b9:23:cc:97:75:e2:2b:61:08:af:38:22:97:
         eb:d3:58:95:4c:fc:d6:a0:6f:9e:9d:8c:fe:ae:2c:50:a4:87:
         d4:dc:a6:d8:38:25:de:a6:d7:b3:4b:c5:57:8f:08:e8:40:28:
         37:5e:84:39:fc:dc:f8:bb:64:10:8f:ce:a4:06:22:04:c3:54:
         6b:a1:6c:ad:96:78:54:c3:94:6c:cd:e5:42:c3:f6:11:3a:07:
         f1:4f:ed:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:31:40 2025 by rpki-client