Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/e397c739-b478-394f-ae21-89fd0af584d8.roa
File:                     e397c739-b478-394f-ae21-89fd0af584d8.roa (raw, json)
Hash identifier:          SJPIXLUWRKJzf9lkcfNyyzJ00I/SKk1jxyEoL5F+qro=
Subject key identifier:   F4:39:D8:41:33:AC:5E:50:D1:3B:CA:D8:0D:9E:C0:15:A6:E8:5C:D3
Certificate issuer:       /CN=0c4c7001-7459-4ca5-93d2-88612666a768
Certificate serial:       010D0C9F43285848EC969479D06BF10A2F1DFDC0
Authority key identifier: 56:CD:66:92:09:2D:4C:45:34:F8:56:58:5A:20:ED:02:F3:BE:39:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/e397c739-b478-394f-ae21-89fd0af584d8.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     16925
IP address blocks:        23.149.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/0c4c7001-7459-4ca5-93d2-88612666a768.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/0c4c7001-7459-4ca5-93d2-88612666a768.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:94:79:d0:6b:f1:0a:2f:1d:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4c7001-7459-4ca5-93d2-88612666a768
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=e30bbb23-e050-4eac-9a2c-ea75b730f2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b8:cf:92:46:ea:0d:a0:a0:9c:55:c4:b3:73:
                    e0:ae:b4:3e:89:62:2c:0a:e2:d6:32:23:d6:22:ed:
                    f8:91:19:9b:d7:6b:a5:10:2e:d5:96:13:a2:5c:2b:
                    32:38:38:93:a3:f5:90:3d:c0:97:9f:6b:af:aa:46:
                    40:ad:61:f6:47:f9:5d:8f:d0:37:88:40:17:6e:e9:
                    0d:e4:76:24:81:55:92:3f:d1:20:5a:8d:ec:e8:00:
                    b1:70:3e:42:c8:09:58:bb:64:70:d5:0c:e4:f0:7b:
                    8d:44:b8:17:2c:a8:cb:23:cb:64:66:3a:ed:cf:13:
                    76:83:ab:a0:a4:a9:b5:1d:2f:e4:74:f9:01:77:8f:
                    fe:ba:bc:8a:f3:d7:e7:7d:79:dc:3e:1e:72:04:62:
                    3b:f5:32:85:be:fa:b9:0f:3c:7c:ca:6a:c5:40:31:
                    be:57:df:ed:f6:5b:5f:a2:62:2e:b9:b4:85:68:78:
                    28:0b:ae:f3:ee:27:7d:f1:a0:0b:ad:f8:31:70:97:
                    65:18:da:1c:27:fe:85:b4:e6:b7:7e:91:81:de:1d:
                    2a:00:98:3b:de:c7:57:e3:32:ab:a7:d6:8d:51:0d:
                    3c:16:2f:dc:ff:8d:fa:4c:98:42:61:b6:0a:a9:e8:
                    ac:a5:87:b1:4c:df:ce:48:0e:f5:56:e7:4b:78:15:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:39:D8:41:33:AC:5E:50:D1:3B:CA:D8:0D:9E:C0:15:A6:E8:5C:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/e397c739-b478-394f-ae21-89fd0af584d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/0c4c7001-7459-4ca5-93d2-88612666a768.crl

            X509v3 Authority Key Identifier:
                keyid:56:CD:66:92:09:2D:4C:45:34:F8:56:58:5A:20:ED:02:F3:BE:39:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:2c:86:f1:f0:83:5b:9b:fb:97:49:8a:49:20:2b:3d:97:7d:
         37:24:e4:79:a4:68:f3:99:3f:3c:5c:57:61:7e:79:71:27:a2:
         a3:64:1e:8e:6c:71:b0:01:f2:8f:d9:8e:66:95:6c:d6:0d:4b:
         6a:2c:e8:30:f4:23:f9:f4:09:63:9c:f1:a0:ef:33:f4:42:b5:
         31:a9:19:49:ee:da:93:e3:ea:87:d0:50:e2:7d:0a:b9:37:f2:
         c0:ce:fd:54:09:12:ab:84:ae:d7:3b:36:3a:0c:14:ff:6e:85:
         42:dc:89:6b:e4:65:46:a1:bc:c9:39:72:93:0f:89:aa:06:ed:
         96:60:d3:92:43:d3:63:a2:93:88:9e:0f:c5:27:ab:e7:6e:34:
         27:61:81:71:aa:52:2d:59:38:50:14:3b:51:05:39:51:b5:35:
         6d:fd:5f:1d:de:5e:5a:79:e4:2c:85:eb:ed:b3:95:ce:54:c8:
         1e:94:c4:90:17:2d:ff:7f:d8:bc:0f:a9:08:93:6f:90:c2:0d:
         9e:10:34:7b:b5:c4:50:cc:3b:3a:7e:3e:35:06:0a:57:d1:4b:
         0b:e5:5d:4d:ad:b8:2d:6a:8a:bf:f6:b1:c3:cc:b6:f5:4f:4f:
         af:84:62:03:64:0a:b3:6f:b6:99:23:dc:6d:b4:9e:20:1a:7b:
         5a:be:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:50:17 2025 by rpki-client