Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/373356e7-dce4-35d9-af44-51f6844e979e.roa
File:                     373356e7-dce4-35d9-af44-51f6844e979e.roa (raw, json)
Hash identifier:          w2OjYF/pozYnWXFYtPDZ9BBFnwPyBOaMuC90fEq70Ew=
Subject key identifier:   FF:6C:08:C9:92:79:8B:7A:2A:2D:9B:44:63:31:6F:75:04:E4:0D:9F
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F432858499C59E863788AD0E831468500
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/373356e7-dce4-35d9-af44-51f6844e979e.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     40934
IP address blocks:        23.249.54.0/24 maxlen: 24
                          23.249.57.0/24 maxlen: 24
                          66.35.20.0/24 maxlen: 24
                          66.35.21.0/24 maxlen: 24
                          66.35.22.0/24 maxlen: 24
                          66.35.30.0/24 maxlen: 24
                          96.45.43.0/24 maxlen: 24
                          173.243.131.0/24 maxlen: 24
                          209.40.108.0/24 maxlen: 24
                          209.40.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:e8:63:78:8a:d0:e8:31:46:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=058d181a-e8f3-48b2-939a-a8f1000b7ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:8e:0d:6b:36:cc:fb:2e:a2:ec:e8:41:e2:
                    e3:07:56:68:4f:1c:02:79:59:a4:18:21:e5:a5:e9:
                    45:92:39:03:ff:f8:f0:64:69:5a:7e:37:96:1c:20:
                    8d:90:c4:e4:1c:39:2b:e6:69:cb:f1:3d:ce:c7:16:
                    ca:44:53:f5:68:02:a0:c2:31:7c:67:35:56:01:e2:
                    dd:85:0a:33:5c:04:8e:1e:40:56:cf:07:82:9d:96:
                    8e:08:21:72:80:c8:05:d0:ea:cd:7c:22:ba:83:10:
                    40:27:e9:76:88:73:21:32:e5:6e:20:af:c7:aa:24:
                    c1:ca:1b:a8:12:ed:4c:19:23:13:b8:49:62:23:a9:
                    17:a8:35:72:8f:7b:14:44:4d:1f:74:b2:a7:87:71:
                    fe:1d:55:63:38:9b:9e:34:f9:d9:94:f9:d7:48:09:
                    21:ea:2c:9f:ae:ed:91:97:bf:05:d9:c5:56:cf:c3:
                    8e:e4:47:02:28:99:57:a8:a9:dc:84:24:62:ed:4f:
                    b7:cb:0d:03:58:e7:f2:9b:e6:e6:3b:9a:d5:54:40:
                    44:83:d3:a9:bc:2e:0c:6d:e3:09:91:e4:01:74:fb:
                    f4:d0:12:90:28:a5:3e:07:5c:80:a9:e9:dd:5b:9e:
                    59:90:c9:43:a9:d1:55:9f:ba:50:d9:a5:ba:76:00:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6C:08:C9:92:79:8B:7A:2A:2D:9B:44:63:31:6F:75:04:E4:0D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/373356e7-dce4-35d9-af44-51f6844e979e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.54.0/24
                  23.249.57.0/24
                  66.35.20.0-66.35.22.255
                  66.35.30.0/24
                  96.45.43.0/24
                  173.243.131.0/24
                  209.40.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:30:e2:8f:de:c7:c9:9d:9c:d4:cc:3f:2b:b1:cb:0b:ac:6d:
         6a:c2:80:95:e1:a1:a3:bc:f1:b4:b2:23:2a:4b:db:a7:b3:06:
         47:f7:4d:54:f5:2e:7f:70:c6:63:d1:ba:42:e5:4f:fa:98:3e:
         5f:93:aa:40:6f:f4:f7:c9:b2:84:3a:e2:ad:02:50:9a:8b:24:
         4d:e3:b7:b2:a5:e1:b7:51:33:3c:01:2f:1e:3c:a9:cc:e3:11:
         11:89:6e:39:6a:2b:d6:02:7d:87:85:58:01:51:7c:98:61:65:
         80:7e:c9:65:54:85:37:15:1d:db:1f:bf:dc:af:ca:21:8e:2a:
         d4:00:0b:ad:54:94:18:bf:1d:6a:2a:7a:02:cd:54:c1:b2:2c:
         ab:bb:a6:2c:f3:f0:06:e2:d7:56:cf:c5:8f:d4:a7:8b:ab:df:
         78:3e:60:16:f6:b2:1a:7b:da:0d:cc:66:c5:46:2f:a8:65:9e:
         f7:f4:ee:f5:c0:9b:f5:3a:16:43:8f:a0:5a:fd:f7:ba:d7:9e:
         4f:f4:83:0d:f7:41:2b:3f:db:48:38:98:85:b9:93:de:ea:d7:
         0f:52:c6:be:9f:62:b0:a6:5d:f4:10:91:0b:89:58:71:96:00:
         e3:98:41:91:ec:38:c8:22:7b:3b:45:7e:7d:d9:1e:6c:a0:30:
         c6:e3:51:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:13:35 2025 by rpki-client