Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/50306751-11fe-35d4-a81d-4a58fc0ec16c.roa
File:                     50306751-11fe-35d4-a81d-4a58fc0ec16c.roa (raw, json)
Hash identifier:          kVdEtyfydgASf319BRIEVgPoveNGOYqMZXagCk5ue48=
Subject key identifier:   1C:4D:7B:5B:7D:DB:B8:57:6B:09:50:3A:D8:F8:56:80:4C:8C:F8:8F
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F43285848D2113F7EBE4D61258F8BF100
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/50306751-11fe-35d4-a81d-4a58fc0ec16c.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     23428
IP address blocks:        23.147.72.0/24 maxlen: 24
                          2602:fb68:140::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:3f:7e:be:4d:61:25:8f:8b:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=f649fb4c-621c-4bc8-8624-e860a77a1681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:17:ae:ee:2c:08:7c:31:ed:ee:b7:78:c2:
                    bf:59:79:67:21:5e:99:a8:b2:a7:40:b8:7e:34:44:
                    0e:c0:1b:d2:53:cd:8f:0e:26:cc:45:33:3e:e2:15:
                    15:d7:20:ae:b5:8e:84:7a:76:05:2d:c4:b4:04:e4:
                    e6:35:4d:f8:82:1c:e5:86:66:e2:48:d5:fe:6c:3f:
                    61:3c:8f:b7:ff:51:cd:84:8e:fb:cd:bf:4c:a6:05:
                    2a:4a:3f:cf:04:4e:a7:32:cd:be:16:f4:e6:68:e7:
                    b9:02:a7:3a:c9:a5:9c:dc:1c:aa:11:30:30:a3:62:
                    a8:89:be:9d:f1:6c:78:fe:16:30:e9:37:f4:e8:57:
                    3d:a9:59:85:4e:f1:03:83:64:b5:20:ab:23:56:13:
                    a6:06:69:0c:47:f8:29:1c:c4:1b:4a:14:bf:5c:78:
                    e3:c3:8e:f5:f0:cf:89:6e:89:70:97:e3:51:fa:3a:
                    d4:9b:2a:f8:60:2b:04:a1:77:09:b5:e0:94:75:bb:
                    3a:0b:47:39:da:ec:04:9f:9c:97:80:ed:60:bf:84:
                    09:a6:8b:d4:6c:36:f2:5d:b3:31:83:8e:50:a9:12:
                    57:eb:5f:93:19:47:e7:82:a6:64:4e:ab:e3:d8:81:
                    ca:9b:c9:3c:20:9d:72:93:56:03:14:7e:bf:c0:54:
                    d9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4D:7B:5B:7D:DB:B8:57:6B:09:50:3A:D8:F8:56:80:4C:8C:F8:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/50306751-11fe-35d4-a81d-4a58fc0ec16c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.72.0/24
                IPv6:
                  2602:fb68:140::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:cf:8c:fd:ab:a6:54:b6:b8:c5:94:88:46:1c:29:28:bd:e8:
         09:d6:c9:91:09:38:ec:98:70:9e:9e:e2:70:1c:61:6f:b5:6c:
         87:ae:67:c6:a5:7f:6e:32:86:a4:20:f9:f3:77:8e:e6:2e:50:
         3f:77:61:6a:f8:63:ff:18:5e:f4:4c:0f:df:40:4d:31:3d:cb:
         b2:d7:93:f6:cd:95:fe:0f:c6:16:ab:46:d0:08:07:a8:4a:69:
         34:9b:ba:a2:09:6d:6b:2a:3b:b0:7a:dd:50:7b:f9:f3:73:30:
         50:d7:31:58:db:31:7c:19:a8:80:15:64:e6:0c:db:de:64:cf:
         7c:64:15:1f:31:21:33:b6:0a:67:c8:cc:7d:8d:04:d9:f4:ad:
         8c:52:63:30:26:e8:fc:05:14:8f:bf:33:99:23:f1:bf:d1:08:
         25:ab:2c:36:1b:19:b4:43:db:f2:53:7d:f4:30:3d:65:6a:c9:
         c7:e4:24:25:e2:ee:c5:24:85:13:a2:2b:33:21:6d:e3:bb:0a:
         d9:1e:d4:a0:d9:ee:8d:4f:6a:33:78:2d:0f:c5:85:19:dc:6a:
         13:9f:c9:80:21:11:ad:7b:e8:25:16:f4:ad:0b:38:dc:93:cf:
         15:5b:af:3a:3d:20:81:07:03:14:5c:78:7e:8e:28:f2:19:4c:
         94:e1:24:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:02 2025 by rpki-client