Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/578652ad-873b-31f7-8cb3-6aa669dd9e4d.roa
File:                     578652ad-873b-31f7-8cb3-6aa669dd9e4d.roa (raw, json)
Hash identifier:          fj2e4mSkIy9kgEwpdGWalOypjRI3/6tBBkalKqnnO24=
Subject key identifier:   AD:9C:D4:FD:14:5B:3E:89:CC:30:50:91:BA:A9:3D:26:90:99:5F:AA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848BBBB8A7344C6AB1231696A20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/578652ad-873b-31f7-8cb3-6aa669dd9e4d.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     16625
IP address blocks:        23.210.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:8a:73:44:c6:ab:12:31:69:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=26cf4b3d-2f35-4c11-aba8-8c5560a17233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:7e:55:17:ff:5f:f5:b7:17:bb:35:e5:68:
                    47:f8:76:24:17:00:77:74:a0:f5:ea:5d:e9:50:4b:
                    e3:86:ac:1d:8b:c4:ff:be:47:89:23:53:31:4a:f3:
                    ba:cc:56:62:ad:92:a2:25:ae:78:76:ca:d1:d3:3a:
                    2d:ff:1f:36:0b:42:4d:2f:9e:43:19:1b:d1:f8:5f:
                    fb:6d:92:8e:32:12:9e:24:24:15:35:0a:af:5d:a6:
                    9c:9a:3a:4a:b8:0a:cc:76:a5:3a:d8:39:3a:47:4f:
                    60:c2:57:6b:8d:f6:e3:f0:d1:7a:81:da:69:57:59:
                    45:68:55:24:24:b2:6b:4b:e2:cf:79:21:18:e3:bb:
                    93:83:bc:fd:f2:e3:60:e8:8e:24:0a:6e:f0:f6:75:
                    30:72:50:2a:ae:71:0b:6e:a2:59:5c:32:bf:15:2e:
                    e0:cd:15:e8:74:11:40:28:5f:56:bd:43:1c:b9:f0:
                    87:1d:f9:e8:a1:20:f1:62:e0:3e:8d:9b:d0:2b:00:
                    52:44:29:2f:95:dd:11:93:db:78:b9:b4:f0:f2:8f:
                    18:97:0c:7d:cd:a1:3a:f6:fc:1f:ef:1c:0b:64:d6:
                    d6:4b:66:87:d5:be:9d:20:19:f1:73:bd:9d:3b:24:
                    59:b9:6d:5f:43:4b:85:99:fa:6a:c9:50:54:fd:a7:
                    7c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9C:D4:FD:14:5B:3E:89:CC:30:50:91:BA:A9:3D:26:90:99:5F:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/578652ad-873b-31f7-8cb3-6aa669dd9e4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.210.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f7:98:5c:5f:2b:f3:e4:7a:c9:40:49:2c:7a:4a:e4:ea:77:
         ea:8f:0e:0d:34:42:0b:36:66:65:cb:0f:3d:7d:df:2f:09:82:
         2f:3b:84:6f:df:21:87:a3:73:ba:7d:04:f7:03:41:7d:26:46:
         73:61:c9:d6:e0:10:79:c4:85:e2:45:b6:ae:ca:55:6c:85:70:
         6b:8c:b9:cf:0a:53:96:1d:73:c0:d0:9f:54:53:75:e5:c7:4a:
         d9:54:22:47:2e:a5:cb:af:92:3d:01:62:a9:c5:40:66:5c:65:
         32:26:a0:ae:dc:7d:e2:80:f2:06:c8:bb:62:b5:fa:c6:b6:a4:
         12:3d:0e:56:cc:16:94:cd:c5:45:f9:f5:f1:68:4d:d7:a8:ac:
         d3:12:7b:50:2a:97:ad:e9:d1:da:7f:8a:12:b7:a0:65:d4:81:
         1a:75:92:bf:70:9c:09:4a:7a:03:16:32:82:71:1d:bb:e4:84:
         c8:f5:7e:74:e9:22:2a:d9:57:da:bc:28:bd:d2:5b:78:13:4f:
         12:78:b3:c5:75:f4:c6:7c:7c:6b:66:f2:01:fd:4c:41:31:3a:
         41:d8:5d:81:f9:89:bc:e3:44:07:7b:1a:cd:97:dd:bd:90:2b:
         d7:22:60:8c:ab:84:37:f0:81:33:9d:e0:36:b8:c5:36:f0:7d:
         b8:00:22:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:14 2025 by rpki-client