Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/347e369a-0146-3b2f-b2c7-dcb14cc91ef5.roa
File:                     347e369a-0146-3b2f-b2c7-dcb14cc91ef5.roa (raw, json)
Hash identifier:          IBTfC9Y5D3pFhSraFn8fQCLJYdhrlKIZaOUYKpP9Hro=
Subject key identifier:   42:F2:EC:18:66:0E:48:D8:33:6A:1C:AC:54:A4:40:5A:BA:B2:4B:4B
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F43285849DF5A5BCEC549BDFF29B7F6E0
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/347e369a-0146-3b2f-b2c7-dcb14cc91ef5.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     139267
IP address blocks:        23.166.226.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:5b:ce:c5:49:bd:ff:29:b7:f6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=dab8b112-d444-4330-98aa-df6b29c90feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:d4:47:65:61:b3:f0:e7:d4:28:d4:62:0e:
                    dc:c3:a3:01:73:22:64:15:a8:ea:c7:76:2a:76:90:
                    3d:04:74:79:d4:e9:51:af:a5:99:43:30:f6:28:10:
                    69:2a:e5:21:54:46:58:1f:20:6c:73:ec:c1:fd:b4:
                    fe:33:14:eb:02:89:36:60:6a:41:7b:89:05:2b:4c:
                    0e:2b:c8:59:a5:89:1b:5d:1b:80:15:20:35:28:d4:
                    9b:b8:ff:27:11:b0:83:fa:b5:cc:7e:82:6f:f5:e0:
                    58:d0:66:06:64:0a:4d:68:2b:14:9d:d6:c0:35:3a:
                    b2:65:48:9b:f7:93:52:e1:8f:f4:c7:20:49:31:40:
                    d3:4c:57:d7:8c:7e:55:84:31:64:bb:78:4d:df:48:
                    4e:db:e8:48:12:0a:67:a6:9f:53:ee:f7:89:5d:9a:
                    be:75:2c:09:65:9e:c0:12:a4:76:cb:a8:95:e6:ef:
                    e6:1a:8c:f8:67:ff:8a:88:e6:ba:53:ee:31:38:4c:
                    15:71:12:62:ed:51:08:41:65:92:90:71:e3:09:fa:
                    23:a0:5c:3a:b3:46:b3:c6:db:5a:a6:3a:a1:fa:ab:
                    f6:0c:ee:bc:fd:10:4e:4d:38:46:71:2a:3b:0a:1d:
                    ae:ff:e6:d5:04:97:af:c2:6a:5a:3c:e6:f6:b0:26:
                    ec:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F2:EC:18:66:0E:48:D8:33:6A:1C:AC:54:A4:40:5A:BA:B2:4B:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/347e369a-0146-3b2f-b2c7-dcb14cc91ef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:3f:6c:83:3e:77:a9:44:44:d1:83:67:37:be:6b:2b:9f:06:
         ed:25:85:92:c2:13:e3:fc:c3:91:7a:1e:94:57:0c:7f:9b:3f:
         30:2c:7e:d1:11:0d:e8:33:55:9d:dd:f5:1d:b3:a2:47:aa:39:
         fa:8b:df:90:4f:6e:de:a7:7b:44:93:2a:41:c9:f4:ba:0d:c8:
         b6:41:a4:6a:bf:ab:77:b6:8c:2e:76:77:31:13:b4:53:fb:27:
         79:6e:e9:f2:cd:12:bb:92:cc:b5:43:cb:d7:a9:0d:f7:1b:32:
         57:15:8b:95:58:e2:08:5b:8f:7a:1e:94:1a:db:af:56:65:9c:
         47:c4:1a:c5:ab:89:60:2a:85:b8:50:a8:2c:29:c8:f1:33:6f:
         9a:c1:2c:39:e3:45:93:a5:36:36:d9:06:f2:f9:d7:4e:a7:16:
         b0:d3:05:c3:36:ff:38:6f:66:a3:52:07:7c:4d:54:2e:df:95:
         22:15:95:aa:1e:84:d9:3d:d4:6d:e1:29:26:05:a5:b2:d0:54:
         79:78:d1:84:e4:b4:8f:af:2d:da:af:d8:f6:4c:18:94:1b:f2:
         4f:21:97:a1:0c:4e:8b:e8:a3:04:f7:bc:15:c1:e3:0c:03:4f:
         fa:e7:dc:59:9d:a3:e6:1d:58:3b:9c:aa:a3:f6:4e:be:55:6a:
         e8:af:19:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:12 2025 by rpki-client