Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/76dd9975-746a-344b-b81a-674850bce36f.roa
File:                     76dd9975-746a-344b-b81a-674850bce36f.roa (raw, json)
Hash identifier:          XSJQgT4bwXMpvrhWA6WWrWkDfQxPcgc1RCDI4cmEhd0=
Subject key identifier:   48:78:F8:CE:85:3D:AD:D4:BB:A7:62:23:DE:3F:8D:8B:05:50:A6:F9
Certificate issuer:       /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
Certificate serial:       010D0C9F432858485E35B3B874BEE80BE3F849A0
Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/76dd9975-746a-344b-b81a-674850bce36f.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     398900
IP address blocks:        23.134.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:b3:b8:74:be:e8:0b:e3:f8:49:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=9ee3284f-e009-4fc1-ae0d-9b7dc0a64531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3f:be:f3:9c:9d:03:3a:c5:1e:22:0c:e9:92:
                    3d:50:0d:a2:68:1a:9b:fb:b0:fb:9a:a1:fe:13:0d:
                    26:e9:42:52:6e:0b:d4:1e:e8:30:81:3e:25:fc:03:
                    63:a6:ab:eb:bf:3c:a7:2d:0e:53:d1:77:70:4e:04:
                    e5:2b:32:d9:ab:d2:2c:0d:2f:5c:97:fd:3b:23:7d:
                    86:73:49:d6:e2:3b:23:f9:50:53:01:cf:33:7f:a5:
                    5d:c7:28:34:4a:f3:d7:a6:d7:aa:50:ad:a1:74:63:
                    70:55:1f:f1:39:7b:51:f3:21:bd:ba:a2:cc:10:48:
                    df:6e:f3:c2:4e:88:d9:15:7f:00:87:28:66:56:cb:
                    f8:79:1a:60:cc:29:96:80:ca:e7:21:d3:f6:bb:c6:
                    ab:e4:4a:03:c7:46:b8:d3:20:27:70:61:c1:65:07:
                    41:ce:65:1b:ac:23:25:fc:a4:e8:e5:f4:e2:c2:e2:
                    0a:80:d3:b9:b8:26:22:e1:15:1a:e2:9d:ab:be:ee:
                    e8:3b:75:69:a4:b2:69:8f:8a:fe:b6:dc:79:a2:e5:
                    33:12:83:74:7a:53:6c:47:90:61:46:ec:5e:97:a8:
                    01:cf:23:b7:29:fb:a6:b5:65:8c:0e:f8:92:99:93:
                    59:bc:27:56:3c:9d:66:58:26:b1:9c:65:89:c7:20:
                    a1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:78:F8:CE:85:3D:AD:D4:BB:A7:62:23:DE:3F:8D:8B:05:50:A6:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/76dd9975-746a-344b-b81a-674850bce36f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl

            X509v3 Authority Key Identifier:
                keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:78:63:74:fc:98:e3:14:59:03:c9:cd:92:01:4a:78:3d:69:
         95:39:be:11:9a:ae:1f:6e:e7:e8:f4:0c:a8:a0:bc:f1:cd:e1:
         e8:7f:26:53:1f:89:b3:86:ee:f5:f1:6e:82:77:ce:d3:04:3a:
         7f:ad:99:2f:73:dd:6b:6e:ee:a3:39:13:16:c5:93:3d:6c:95:
         47:8a:31:c8:5f:6b:a2:2c:40:cf:bc:a7:2d:fb:11:28:39:80:
         87:0d:f6:64:43:81:ab:79:4f:2b:3d:29:4d:ca:54:c8:1a:0e:
         14:a6:06:00:5f:06:65:6d:8e:a1:68:e6:4b:8d:4f:cc:60:a9:
         15:24:2a:b1:f1:df:4d:72:0d:6f:5e:f0:49:43:46:12:ed:98:
         49:11:8d:91:be:26:fb:c1:c5:a2:ed:1c:98:74:0c:de:19:42:
         d7:6b:dc:83:a9:a1:4a:1c:03:96:d6:5e:3f:91:52:81:65:a0:
         c0:b8:72:bc:4d:a7:0e:02:59:c9:67:35:c9:75:6c:82:b5:fe:
         55:e3:15:62:9a:9b:19:07:6a:36:4d:f2:53:9c:0c:58:72:4a:
         c0:33:47:7a:23:e8:46:8a:73:2c:f3:9e:c5:62:7b:fb:26:af:
         ee:b1:1c:53:e8:11:47:45:ef:f6:1a:be:e8:21:3b:aa:5b:37:
         09:6c:28:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:13:12 2025 by rpki-client