Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c07ba76b-d545-36f9-8eea-aa690d2a7f20.roa
File:                     c07ba76b-d545-36f9-8eea-aa690d2a7f20.roa (raw, json)
Hash identifier:          PA8i70cqDEYUZ4bfIICb6EupTTgeQokNbSzzOjXgt+k=
Subject key identifier:   04:D5:72:48:16:DF:B3:0A:84:E9:50:D6:0C:38:DB:C6:9C:DD:9A:22
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A3AB2316336113ED73B65780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c07ba76b-d545-36f9-8eea-aa690d2a7f20.roa
Signing time:             Thu 23 Jan 2025 11:08:28 +0000
ROA not before:           Thu 23 Jan 2025 11:08:28 +0000
ROA not after:            Wed 23 Apr 2025 10:08:28 +0000
asID:                     20940
IP address blocks:        23.56.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:ab:23:16:33:61:13:ed:73:b6:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 23 11:08:28 2025 GMT
            Not After : Apr 23 10:08:28 2025 GMT
        Subject: CN=5777fc85-d779-40d3-b891-f1c807a475b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:b5:28:87:4f:d2:f2:9f:63:2a:b4:09:ff:
                    68:83:4e:c3:cd:cd:2d:2d:25:bc:ce:ab:a8:31:4c:
                    01:53:ae:4b:a8:3b:a0:ec:04:9b:3b:5c:b2:2b:05:
                    86:33:42:18:67:d0:75:80:e2:ee:9a:ec:93:63:ad:
                    88:c5:09:3e:6c:fa:5b:a5:6b:74:55:ee:05:64:ef:
                    15:5e:70:97:ba:a9:44:1d:97:c0:c1:ac:90:52:d5:
                    d6:b6:84:37:cc:47:50:a9:d2:b5:6d:63:b5:19:5b:
                    e9:60:32:a4:c9:04:47:be:1d:bc:3b:aa:ef:a3:cc:
                    55:fc:38:13:98:c1:8e:04:bd:49:cb:39:4e:5c:eb:
                    76:17:0e:bf:43:24:d5:e9:8b:39:cf:b6:d0:5c:ab:
                    1b:0d:44:c7:6f:4c:d3:30:e0:d3:e4:1c:da:8b:fb:
                    f8:73:87:0d:65:2c:84:6e:39:c3:cc:d3:04:fc:54:
                    6f:66:fe:ae:b0:3b:1e:6f:97:15:28:4f:79:bb:bc:
                    7b:0c:a0:97:2c:ff:a4:0e:26:4f:41:5e:cb:73:3d:
                    99:85:f7:4d:a4:04:f6:db:8d:e0:82:d9:f4:10:10:
                    a3:ed:55:bd:9a:23:a8:f5:4c:68:ae:d4:03:35:a2:
                    9d:03:38:1a:23:8d:5b:02:69:90:48:ef:c0:61:8f:
                    f5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D5:72:48:16:DF:B3:0A:84:E9:50:D6:0C:38:DB:C6:9C:DD:9A:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c07ba76b-d545-36f9-8eea-aa690d2a7f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.56.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f0:f4:af:89:bd:75:34:d3:42:4f:ab:62:e2:b3:b4:49:12:
         87:35:b5:bb:e2:05:76:61:db:94:e1:78:9d:1c:ba:a6:e3:f2:
         1d:e3:c8:3d:08:82:c8:d0:57:69:64:04:8e:37:dc:f0:32:cb:
         b4:81:47:7c:66:a5:24:78:ec:30:72:66:c8:4c:af:57:84:c4:
         3e:e2:1c:86:30:12:d2:ed:b9:bf:61:b2:70:0c:86:3e:51:ff:
         ba:95:e6:72:cc:fd:27:c3:bf:1a:36:7a:f3:2d:43:57:71:f9:
         c0:b9:af:57:11:db:d4:b4:49:8e:52:c3:61:9f:e0:bf:f5:f1:
         06:fc:f7:78:bd:8d:6b:2e:04:81:65:e8:42:e1:ed:09:d4:22:
         ca:99:86:a5:ab:48:77:46:48:51:7a:0e:38:a0:e0:8b:a8:99:
         7e:46:37:f1:d0:da:42:71:3b:e3:84:37:61:9f:bc:ea:f5:12:
         bc:5d:55:4d:39:76:e3:ec:c8:5e:b9:5f:96:b7:03:62:5f:3f:
         92:0b:2f:2a:d4:98:83:30:ba:47:4f:42:d3:78:1b:d4:e6:c6:
         2c:06:e4:39:85:33:f1:e1:4f:8c:6b:ea:73:08:8f:c7:28:b3:
         1e:46:8c:be:e3:65:97:2a:f9:3f:2e:9d:c4:63:12:56:67:07:
         ea:d0:c7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 15:03:44 2025 by rpki-client