Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa
File:                     0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa (raw, json)
Hash identifier:          aEHjBJR+tot99st5VjZtlLq7icvROMNqLWsNxEZPRrs=
Subject key identifier:   6E:6F:D9:45:60:45:4C:20:58:A7:8A:68:EB:CC:AF:BF:4E:6F:51:BD
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F432858484C10216086E10E263F41C700
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        23.239.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:21:60:86:e1:0e:26:3f:41:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=e2cff9a5-9b0c-4017-8cd6-1596fd37215a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:b6:8c:7e:61:d3:90:58:ee:50:9e:a6:b2:
                    3b:75:69:ce:d2:71:e8:01:0d:57:50:ba:51:12:06:
                    96:70:4b:0f:1d:f8:b4:f2:c7:74:65:7b:65:52:55:
                    24:15:da:59:02:54:92:91:19:d3:2d:86:f1:75:06:
                    93:42:93:75:ef:58:65:59:22:04:3e:42:08:85:bc:
                    3f:51:92:70:2e:b3:64:e9:07:9a:61:96:36:cd:84:
                    96:5f:72:70:36:5d:e4:4b:7b:2e:50:30:d1:70:49:
                    8d:78:ab:e5:d2:c9:94:2f:a8:0d:b5:5d:2b:3d:0b:
                    44:8e:ac:29:bc:67:3f:07:04:52:d7:3e:3c:3a:4d:
                    c6:4a:4d:68:ee:3f:ba:f4:ad:ec:ca:85:f9:b0:69:
                    72:db:6d:36:65:a2:2e:f5:63:01:63:fc:3c:fb:ff:
                    93:dc:84:2f:32:6b:20:57:0f:6d:9a:8e:c2:4c:0c:
                    d1:39:80:2a:16:96:fb:58:4c:d7:e5:c6:2b:13:17:
                    71:f7:11:67:8b:f7:31:c9:6a:54:c3:49:d5:a3:b3:
                    3a:89:af:07:4c:26:5b:da:4f:00:e4:e8:c2:98:a6:
                    54:5f:7f:70:7d:6d:19:9b:b5:bc:14:2f:b3:74:47:
                    6b:df:d8:d0:90:15:2e:5d:5e:5b:ee:1f:1f:6a:c9:
                    4e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6F:D9:45:60:45:4C:20:58:A7:8A:68:EB:CC:AF:BF:4E:6F:51:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:5f:27:e6:7a:d2:78:a4:1d:71:25:07:92:ea:3c:9a:80:2f:
         aa:c0:6a:3c:cc:82:b9:54:35:1e:52:83:13:1a:59:85:e8:36:
         c8:e8:f1:bd:84:e0:bb:64:ee:4f:12:02:12:e7:4e:7b:2d:47:
         9d:4d:db:0a:fd:16:7c:2f:94:46:6c:93:95:fa:98:f7:6a:d1:
         af:78:bc:bf:8c:6d:2c:6f:71:46:c3:75:8b:7e:d1:be:2d:b1:
         7f:55:29:1c:59:f5:2b:45:d8:60:cc:93:ce:1d:d3:4a:09:04:
         69:3c:51:15:cd:06:4a:28:2d:17:18:22:53:07:ce:10:3c:99:
         e4:d7:99:ee:42:92:07:45:4e:6f:90:9d:5d:88:b1:d7:c6:af:
         17:75:72:5e:c7:70:f7:3b:e6:40:3b:c6:cf:d6:91:49:36:33:
         cb:fa:db:60:ad:0e:e9:26:d3:ef:8f:51:2e:e8:f1:81:bd:f8:
         ec:f5:83:26:a8:04:12:eb:1d:30:d7:64:90:f0:39:c0:12:a1:
         f9:71:cd:37:49:01:50:bf:f7:41:6e:c7:d1:8d:fd:6e:1b:fa:
         f6:25:fe:24:8e:db:49:14:94:82:4f:34:08:b9:a1:e6:d9:23:
         18:19:3a:5e:0c:1f:64:90:14:7a:b8:28:0b:3f:2a:85:36:0d:
         e4:9d:ef:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:07 2025 by rpki-client