Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4706fcd0-3421-3338-a47c-94a86380b634.roa
File:                     4706fcd0-3421-3338-a47c-94a86380b634.roa (raw, json)
Hash identifier:          A7zsbxVSCIdG5+BK/UWzUVWfIQviNtYiUgiha36P6HI=
Subject key identifier:   A9:49:B2:F7:89:E8:15:53:76:C8:D0:BD:A2:F5:53:E2:92:94:0B:C4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848BE8640D59AE77796C59C7640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4706fcd0-3421-3338-a47c-94a86380b634.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        23.216.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:40:d5:9a:e7:77:96:c5:9c:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=dc27067f-79e8-47b3-b951-ee7bbb6a6f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5e:41:fb:1f:7d:63:f8:c4:eb:86:73:8d:48:
                    87:95:0a:3b:9b:e5:ea:29:2a:b3:ba:91:e6:c0:ae:
                    da:3e:c3:a5:b9:86:c5:f9:d0:62:b1:1b:5c:5f:58:
                    e1:b5:f0:c9:fe:50:f2:67:ab:fd:99:f4:99:3e:a6:
                    b5:63:ae:df:9f:f5:64:4a:87:19:da:cc:12:e8:6b:
                    3e:41:17:0a:1a:0f:a0:1a:a2:1d:40:51:11:47:04:
                    6b:3e:10:ac:ef:1d:64:b7:45:87:84:5b:69:13:4a:
                    33:7b:99:b1:af:a8:60:cd:82:00:e6:91:72:6c:26:
                    1a:29:fa:c8:4c:b9:24:c4:ff:6d:bf:33:f2:6d:65:
                    46:ad:ee:cf:49:14:39:ef:01:7c:4b:ee:c2:1b:b5:
                    fb:b1:e4:83:21:b4:3f:fa:94:34:13:45:53:78:70:
                    28:bf:55:bf:2c:bd:4e:cd:15:9f:bf:b5:aa:e2:32:
                    12:a4:b7:50:46:7f:92:f7:0f:de:d7:dd:55:59:b3:
                    9c:34:63:38:c8:02:7c:2e:c4:d0:ae:9f:bf:e5:30:
                    5f:b4:a1:7a:b6:3b:c7:f6:34:ec:28:22:12:ef:99:
                    41:ce:f4:77:83:b6:06:78:39:6d:00:64:4d:fb:b2:
                    73:89:c1:97:10:80:b9:b3:e5:6a:46:16:9b:05:b5:
                    64:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:49:B2:F7:89:E8:15:53:76:C8:D0:BD:A2:F5:53:E2:92:94:0B:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4706fcd0-3421-3338-a47c-94a86380b634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.216.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:98:f1:94:12:34:b5:0d:73:54:e1:8b:6d:f3:d0:f2:0f:a0:
         bc:1e:e6:ac:e4:2e:bb:c2:79:50:b3:3d:cc:c3:1d:73:6c:37:
         92:b9:53:08:cd:b0:f2:55:b8:60:06:02:67:ba:f7:45:53:c0:
         7d:87:2e:62:f6:da:1e:3b:3e:9e:b6:9b:36:76:36:e8:de:17:
         f2:53:aa:33:e4:23:52:74:3e:7a:e1:a5:ef:58:c7:5f:09:80:
         55:7d:2f:20:b1:e2:b3:eb:8b:8f:f5:36:48:4f:08:db:74:13:
         6e:20:5f:06:94:f4:20:1b:54:f6:31:41:8f:20:4c:63:f9:15:
         25:71:25:8e:b6:67:b7:69:3d:df:f6:14:31:f1:3c:2b:bd:8b:
         f7:78:08:9d:d7:73:d0:b9:2c:86:e2:a3:52:60:09:0b:72:0a:
         d9:dd:cd:da:91:a1:d3:dc:24:cf:a2:73:5c:5c:cc:2a:56:26:
         79:db:27:86:76:f6:5c:11:46:15:ff:9a:d5:c6:15:0c:dd:d7:
         71:ff:1d:be:9b:ff:f1:56:47:1b:8e:f2:6b:5a:f8:e9:79:ce:
         38:fe:4e:68:f1:3f:2d:bb:cf:3e:ba:10:70:5c:ef:c7:fe:94:
         28:d2:59:3b:75:59:9f:33:a2:35:ac:c8:f4:d3:1c:7b:80:e4:
         50:9e:89:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:16 2025 by rpki-client