Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/58d18a9d-961e-38a1-898a-cab3732b33e7.roa
File:                     58d18a9d-961e-38a1-898a-cab3732b33e7.roa (raw, json)
Hash identifier:          +ykG87z+FL5wwXwSpg71vZXjlZk1taScHu3Ve3/Lx+w=
Subject key identifier:   72:D5:A7:09:3D:F2:F5:0A:7C:4D:E0:0F:81:33:98:9A:9C:DF:8D:9D
Certificate issuer:       /CN=df45c214-cd13-454c-ac2d-2978c76c6f7f
Certificate serial:       010D0C9F43285848F6222D37B2CA40226285B2C0
Authority key identifier: D8:2F:F5:F6:19:80:33:AB:69:54:1A:B3:28:6A:5E:90:45:D5:62:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/58d18a9d-961e-38a1-898a-cab3732b33e7.roa
Signing time:             Sat 22 Feb 2025 00:04:36 +0000
ROA not before:           Sat 22 Feb 2025 00:04:36 +0000
ROA not after:            Thu 22 May 2025 23:04:36 +0000
asID:                     46355
IP address blocks:        23.135.36.0/24 maxlen: 24
                          2602:f6db::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:22:2d:37:b2:ca:40:22:62:85:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df45c214-cd13-454c-ac2d-2978c76c6f7f
        Validity
            Not Before: Feb 22 00:04:36 2025 GMT
            Not After : May 22 23:04:36 2025 GMT
        Subject: CN=55a96312-c24f-4785-b125-b28a83ff7d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:56:f7:fd:43:54:11:0e:e8:f8:30:e9:ac:
                    78:83:88:00:ff:93:77:ec:7e:d5:09:56:76:e2:86:
                    cc:32:a0:82:95:ce:02:24:ec:e6:7f:16:44:74:5a:
                    e2:b6:fc:6c:5a:6d:d8:ad:5a:bd:5b:8a:11:d2:e7:
                    41:7c:a7:06:9c:9b:48:19:b3:4f:bc:b3:7a:89:8e:
                    a8:e7:e1:a5:02:ab:a4:b6:5e:8b:ef:07:2b:22:9e:
                    07:4b:28:e9:c0:1b:01:be:58:b1:12:e8:b8:a9:ca:
                    03:56:77:b3:f6:92:12:a9:af:70:65:38:c2:16:00:
                    4d:d5:c5:c9:b0:13:99:62:48:28:f0:57:d8:47:f7:
                    0f:87:fa:e4:86:5d:b6:01:8d:69:7f:67:e1:2d:11:
                    dd:8c:9f:18:8f:b7:81:46:e4:cc:fa:e0:11:e8:28:
                    d4:cc:eb:af:f0:8a:dd:31:53:15:6b:cd:5e:2b:9d:
                    bd:6d:91:11:e5:47:dd:9d:6a:b4:13:17:04:39:22:
                    0b:e2:02:2d:b5:03:8e:9e:00:78:24:97:a4:3b:9f:
                    87:95:13:34:a2:03:6b:d4:95:93:eb:b2:ad:d7:df:
                    f7:21:df:fa:d9:e9:2d:ce:ec:11:86:27:44:91:41:
                    1d:51:6a:65:56:5a:0f:db:f1:9e:e5:90:b1:ca:23:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D5:A7:09:3D:F2:F5:0A:7C:4D:E0:0F:81:33:98:9A:9C:DF:8D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/58d18a9d-961e-38a1-898a-cab3732b33e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2F:F5:F6:19:80:33:AB:69:54:1A:B3:28:6A:5E:90:45:D5:62:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.36.0/24
                IPv6:
                  2602:f6db::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ca:27:42:08:d9:0a:22:e9:04:1c:e1:86:53:7b:4d:98:b3:
         b4:b1:c6:b1:2b:bf:45:01:7e:ea:fc:ef:fd:33:32:eb:19:39:
         42:dc:66:18:73:76:a6:a2:52:9f:d8:c4:22:8b:4d:86:e6:38:
         ae:ea:b7:28:a0:79:35:30:0b:5b:99:8e:5f:ae:6b:74:b6:69:
         b0:9f:3a:c2:be:dd:b0:64:00:f1:10:bf:64:56:66:bb:7e:d5:
         4a:29:fa:a8:35:76:06:04:ef:4a:d6:cc:ca:16:5a:2d:cb:4d:
         66:df:f8:87:ae:c2:fb:81:cf:a3:28:e9:b6:0e:ea:4c:44:81:
         37:ce:a5:df:e5:67:db:15:c3:96:42:5b:9b:e5:ff:ab:86:a3:
         06:4c:b6:ee:b2:60:9d:59:10:e8:bd:d1:27:2f:d8:15:21:a1:
         15:fe:43:82:3a:7a:c4:55:06:f1:8d:c7:51:80:57:97:7d:ff:
         1b:84:c9:90:ff:bb:51:81:cb:d8:14:3e:44:76:be:f8:fc:f6:
         82:a7:f7:b6:7f:ea:e7:09:a4:06:d9:56:bf:0e:49:38:b6:fe:
         dd:0c:b1:1c:de:0f:8e:08:56:65:3d:85:2c:ae:9c:25:14:be:
         14:9a:4c:f3:63:75:be:57:0d:56:78:fd:9e:89:c8:30:30:36:
         26:76:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:03:08 2025 by rpki-client