Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0f666774-6ef9-4dec-a4fb-3406f053d924/8010b1fe-4f70-3fea-9848-6205ea2e489c.roa
File:                     8010b1fe-4f70-3fea-9848-6205ea2e489c.roa (raw, json)
Hash identifier:          NG0EFo8gbT3FX7UK+YxgTZwSOw9Gtb1xlA5nniQkHr0=
Subject key identifier:   AF:AC:C0:59:8C:6A:4D:EE:BF:E8:42:D4:56:EA:C3:F9:19:DA:3C:57
Certificate issuer:       /CN=0f666774-6ef9-4dec-a4fb-3406f053d924
Certificate serial:       010D0C9F43285848A90EA43FEACE93740EB7FB00
Authority key identifier: FF:DA:50:BF:1E:34:FF:36:C1:25:57:C6:C4:5E:0A:3F:2A:69:B9:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0f666774-6ef9-4dec-a4fb-3406f053d924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0f666774-6ef9-4dec-a4fb-3406f053d924/8010b1fe-4f70-3fea-9848-6205ea2e489c.roa
Signing time:             Sat 25 Jan 2025 09:28:00 +0000
ROA not before:           Sat 25 Jan 2025 09:28:00 +0000
ROA not after:            Fri 25 Apr 2025 08:28:00 +0000
asID:                     7018
IP address blocks:        23.132.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0f666774-6ef9-4dec-a4fb-3406f053d924/0f666774-6ef9-4dec-a4fb-3406f053d924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0f666774-6ef9-4dec-a4fb-3406f053d924/0f666774-6ef9-4dec-a4fb-3406f053d924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0f666774-6ef9-4dec-a4fb-3406f053d924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:0e:a4:3f:ea:ce:93:74:0e:b7:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f666774-6ef9-4dec-a4fb-3406f053d924
        Validity
            Not Before: Jan 25 09:28:00 2025 GMT
            Not After : Apr 25 08:28:00 2025 GMT
        Subject: CN=850108b9-beaa-446b-929f-1f912c7797ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:bf:08:d7:13:dd:6f:0e:e3:00:03:fb:26:
                    36:2a:1a:64:bc:43:e7:97:4b:2b:be:78:a7:de:ac:
                    32:8d:92:6b:cc:75:e4:b1:ae:b5:ee:7a:f4:62:9b:
                    85:76:77:c4:44:50:0f:fb:23:17:17:68:c4:66:19:
                    f1:0c:30:0b:15:06:b3:99:5c:a5:28:33:b3:08:c1:
                    cf:69:08:01:24:e0:58:ad:96:32:0f:fe:5c:7b:57:
                    5c:27:bc:14:f4:e5:8a:69:d8:8e:36:f3:c1:ab:e4:
                    6b:92:61:de:ab:6b:5a:75:4c:73:24:53:7e:de:9e:
                    34:6f:59:b5:da:f5:30:58:a4:19:20:bc:21:fb:9f:
                    b1:71:36:3b:54:5a:00:ed:cd:70:79:3c:65:73:80:
                    a6:e6:ce:2a:d6:ae:c5:ee:1c:0b:39:29:7c:b8:f4:
                    ba:05:c5:ef:a6:5c:aa:f8:ea:fd:14:76:96:7d:cc:
                    ee:d4:0d:e2:45:27:fb:f9:a8:0f:c5:82:64:a5:2f:
                    54:7a:43:35:94:1f:46:cb:b8:80:02:f5:bd:ae:58:
                    df:85:b9:a6:b0:97:04:31:cc:dd:3f:d0:ea:08:3d:
                    3e:d8:f5:2d:f6:a5:f8:cc:50:c7:10:bc:0c:13:c3:
                    ee:d5:4f:45:f3:d6:09:69:55:c3:25:ed:13:64:3f:
                    ef:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AC:C0:59:8C:6A:4D:EE:BF:E8:42:D4:56:EA:C3:F9:19:DA:3C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0f666774-6ef9-4dec-a4fb-3406f053d924/8010b1fe-4f70-3fea-9848-6205ea2e489c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0f666774-6ef9-4dec-a4fb-3406f053d924/0f666774-6ef9-4dec-a4fb-3406f053d924.crl

            X509v3 Authority Key Identifier:
                keyid:FF:DA:50:BF:1E:34:FF:36:C1:25:57:C6:C4:5E:0A:3F:2A:69:B9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0f666774-6ef9-4dec-a4fb-3406f053d924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:34:15:a9:7e:fb:ca:35:42:01:d8:38:da:c7:88:f7:a5:53:
         90:45:5d:4e:4f:06:4e:c7:5d:9e:53:92:c6:1d:85:6d:e9:5d:
         7e:54:7b:e1:4f:4e:0e:bf:e1:a8:1e:f7:b4:a4:3d:1b:a9:1d:
         e1:57:67:ce:85:f5:78:8d:db:e6:55:7d:7a:c4:fe:71:72:a1:
         a5:fc:13:8d:88:63:98:aa:6c:3b:13:04:fe:7d:88:18:2b:35:
         90:33:df:0e:85:2f:70:29:c3:e2:dd:2c:77:ea:53:34:1d:db:
         9d:3f:2a:16:54:2d:d7:3e:b0:60:88:72:c6:89:ea:4d:de:50:
         78:80:cd:b5:ab:66:34:fe:3a:04:86:64:63:b4:90:a4:18:6b:
         2a:8d:b1:e5:c6:58:87:f8:4d:5c:46:b4:6b:28:27:25:4f:dc:
         e1:c2:d5:36:b2:b6:f7:c0:64:25:30:b2:bd:38:c1:2c:1c:04:
         f7:da:a7:4f:e5:e1:38:10:b8:03:67:48:d2:3b:96:e7:8d:6f:
         33:3b:33:af:29:bd:a4:75:83:ea:4b:0f:81:bf:00:1c:77:5f:
         b2:ad:9f:b9:23:88:1a:6a:f4:d8:8d:23:94:99:80:cd:ad:ac:
         88:d1:ea:e8:a4:a2:61:aa:12:e9:91:03:15:20:5e:a3:e8:1c:
         93:80:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:50:05 2025 by rpki-client