Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/57cbe266-8395-37ce-a58a-a3ee3d4fd90a.roa
File:                     57cbe266-8395-37ce-a58a-a3ee3d4fd90a.roa (raw, json)
Hash identifier:          mj4R0gUM644XXyRTmcCLj6S6Os7CFWsipCPpCgYddx4=
Subject key identifier:   9F:E9:86:05:FA:DC:7C:F1:E2:56:04:3A:F0:67:93:AE:71:23:6D:20
Certificate issuer:       /CN=5a791677-2f6b-4828-a754-1d16b76a8a68
Certificate serial:       010D0C9F43285849271913304A420AB511B55480
Authority key identifier: 02:D8:E5:C8:93:A4:F8:02:B6:34:D9:B5:1F:8F:41:55:BB:6A:99:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/57cbe266-8395-37ce-a58a-a3ee3d4fd90a.roa
Signing time:             Tue 11 Mar 2025 13:00:51 +0000
ROA not before:           Tue 11 Mar 2025 13:00:51 +0000
ROA not after:            Mon 09 Jun 2025 13:00:51 +0000
asID:                     46951
IP address blocks:        23.131.28.0/24 maxlen: 24
                          2602:f768::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:27:19:13:30:4a:42:0a:b5:11:b5:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a791677-2f6b-4828-a754-1d16b76a8a68
        Validity
            Not Before: Mar 11 13:00:51 2025 GMT
            Not After : Jun  9 13:00:51 2025 GMT
        Subject: CN=c005614d-4d62-4ec7-9491-592c14dbf2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:51:65:4d:82:c0:3f:b2:39:4c:0d:cf:81:
                    e9:66:72:b2:7f:5f:7b:99:40:6c:dc:b9:e3:01:1d:
                    8d:77:9b:e5:05:d9:de:2a:12:96:21:6e:33:d3:df:
                    6d:e6:cb:6c:9f:54:1c:80:1f:d9:38:05:93:4e:73:
                    82:10:49:0e:06:37:24:55:4b:af:13:20:00:84:dc:
                    1b:df:c0:17:55:68:40:b2:49:e4:f7:32:1d:2d:90:
                    37:c4:0d:9a:ba:05:0d:4a:5f:5d:4a:44:ab:57:3e:
                    8c:ab:87:96:ae:57:54:17:71:87:e8:b6:5b:14:53:
                    2b:71:16:89:1f:d9:85:b1:8b:1c:63:0c:ea:28:f8:
                    96:31:0d:22:ac:9a:19:26:3b:18:a4:fc:ff:57:73:
                    b8:d3:87:49:59:30:db:ff:36:69:d3:cf:a9:d7:0c:
                    13:99:80:42:e8:d1:40:9f:a5:b6:99:27:f3:49:67:
                    5e:db:66:78:75:b4:c8:0f:bb:8c:f8:6c:64:40:0b:
                    5c:3f:f3:75:0f:61:85:e5:ba:fd:fb:2a:be:40:21:
                    14:9d:c2:c7:bb:3f:d0:b0:86:91:11:6a:4c:28:a2:
                    3a:ae:0b:d6:70:62:3c:c6:92:06:8e:29:5a:6b:4e:
                    39:3a:d7:ed:63:24:7a:ef:05:44:18:26:10:28:49:
                    10:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E9:86:05:FA:DC:7C:F1:E2:56:04:3A:F0:67:93:AE:71:23:6D:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/57cbe266-8395-37ce-a58a-a3ee3d4fd90a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.crl

            X509v3 Authority Key Identifier:
                keyid:02:D8:E5:C8:93:A4:F8:02:B6:34:D9:B5:1F:8F:41:55:BB:6A:99:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.28.0/24
                IPv6:
                  2602:f768::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f8:e6:d7:d7:09:4b:b7:52:c9:f9:af:bf:3b:12:b5:b0:8a:
         8c:b4:9c:2e:d0:aa:d2:06:aa:cf:db:fb:5d:e8:3c:f4:07:c6:
         65:5c:5c:28:c5:8a:43:e4:e7:02:37:fd:70:59:d4:8c:c6:67:
         9c:10:bf:9e:34:f5:42:18:3c:0d:ad:0e:83:00:a7:81:f1:9d:
         0c:d0:ae:b7:bf:49:64:7a:d1:c0:cf:10:9b:4a:ab:f6:1b:e5:
         14:c6:70:78:ad:c0:00:7c:09:f4:7a:03:ed:b5:a8:93:35:07:
         7a:cc:39:fe:39:84:33:ae:b9:46:c1:69:08:db:09:9a:ca:4e:
         9c:59:4c:96:8a:98:82:34:01:a4:f2:f1:54:ef:5e:0b:2c:a3:
         16:c9:e5:6c:58:51:29:3a:3f:26:99:b6:88:7c:67:0b:5a:99:
         27:71:99:d7:e1:3b:a8:7d:00:eb:b6:8b:31:24:9f:aa:cc:29:
         c4:5b:59:22:39:92:d9:8e:0b:02:7e:2e:6c:22:45:fd:9d:91:
         34:fb:4c:b4:7d:5f:0a:e4:7e:c4:a0:29:bc:22:bc:0a:c9:89:
         49:64:94:7d:3f:55:12:f1:e4:93:3e:da:36:87:7d:3f:b5:a1:
         f7:e1:e0:41:76:74:fc:9f:a3:c7:7a:1f:ff:21:5b:bf:6a:16:
         f0:8a:ce:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:09:48 2025 by rpki-client