Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43df64f3-db22-3339-86ed-4c41a39fb6ce.roa
File:                     43df64f3-db22-3339-86ed-4c41a39fb6ce.roa (raw, json)
Hash identifier:          vSUftVcgqpE9XPjk4GdTE9XpsWIX62Vg2Oc1FvztkWY=
Subject key identifier:   A9:96:71:BC:50:34:3A:3F:74:08:A3:C0:E0:14:C0:14:AE:D6:2F:65
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A400DC4A14A33543D341B900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43df64f3-db22-3339-86ed-4c41a39fb6ce.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        23.194.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:dc:4a:14:a3:35:43:d3:41:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=7155060c-ca11-41ed-ba33-b33cbb3dd0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5b:fa:60:d6:af:cb:4f:38:48:06:98:46:ac:
                    1c:8e:65:15:5d:29:e7:6b:2b:e0:05:ce:3d:63:a3:
                    e7:51:6e:f9:69:95:4c:01:9f:73:32:13:fa:1c:57:
                    f0:10:18:39:d7:dd:59:ca:1d:fd:56:03:75:cf:cc:
                    76:4c:a2:ab:76:43:1c:2d:da:06:be:9f:8b:4e:fb:
                    57:0b:50:6b:97:25:de:69:e3:00:41:db:13:32:14:
                    c7:c0:86:15:49:63:65:d8:b1:5f:97:e1:db:22:96:
                    97:11:ad:47:62:26:a2:46:e4:eb:89:fe:28:e9:1a:
                    55:6e:2b:74:04:60:17:d2:9c:f9:52:50:15:20:42:
                    ef:70:76:3c:d3:27:c8:ef:29:32:c5:78:c9:19:66:
                    ef:12:80:88:b5:7f:0a:1a:be:6d:20:34:04:87:e5:
                    de:61:b6:72:33:df:3f:aa:a0:75:4f:6e:91:28:c5:
                    5e:55:1f:19:f5:30:52:22:f7:0c:f5:0e:b9:ba:56:
                    5d:f6:02:3c:94:e9:07:f2:5f:63:d8:27:b8:63:e0:
                    27:dc:15:2a:8a:20:cd:3c:5f:02:53:b0:89:d0:2b:
                    40:58:dc:6b:cf:61:6a:3e:92:0f:36:1e:ee:19:d2:
                    e1:d7:12:95:26:7c:80:93:34:b7:af:12:6a:55:d3:
                    8b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:96:71:BC:50:34:3A:3F:74:08:A3:C0:E0:14:C0:14:AE:D6:2F:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43df64f3-db22-3339-86ed-4c41a39fb6ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.194.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8f:32:a5:ef:f4:b9:25:6c:ad:67:24:9b:6e:a4:71:98:0f:
         6e:9b:5d:49:3b:61:29:b4:fa:75:85:84:77:a3:4d:97:13:b8:
         24:c3:cd:0c:af:10:29:46:e8:fd:8f:5f:95:04:4c:e7:8f:0a:
         14:3b:5e:27:8b:bd:d0:06:08:b4:33:91:23:64:2d:1f:36:d9:
         8d:5b:90:1a:6c:85:a0:4d:75:17:04:2b:ec:c3:b9:85:b9:39:
         46:41:d6:19:ba:ed:3e:40:c6:36:29:6f:55:a1:6c:ff:24:18:
         7b:d3:31:79:6c:74:dd:b5:24:04:0d:fb:64:71:39:f3:5a:c3:
         d7:15:1b:1b:af:b5:0c:81:e6:19:16:2b:c7:1d:3f:95:cb:fb:
         f2:70:b9:49:76:44:f7:1e:c3:47:f2:32:fa:7d:1d:c9:09:79:
         c3:24:9a:f7:fb:65:cc:fe:9b:3a:a6:53:ec:9d:35:e9:46:27:
         6f:90:41:70:18:f8:34:0f:6f:61:ad:85:9c:39:6d:0b:fe:b5:
         a5:22:83:c6:af:57:08:72:9d:2c:3e:e7:5d:a0:db:35:74:1f:
         13:3a:62:22:4f:4a:7b:db:b4:3a:7f:f9:9a:65:5b:68:46:95:
         c7:54:59:3f:7f:14:9d:d7:a5:b6:ec:14:2b:4c:5c:e8:2b:db:
         17:66:4b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:33 2025 by rpki-client