Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/68b3d500-685c-3e96-9137-6a74b385d1b6.roa
File:                     68b3d500-685c-3e96-9137-6a74b385d1b6.roa (raw, json)
Hash identifier:          35N2Vmpu4+Kh24JRNkvCy8N5RPHddDs18PNx6XCsDN8=
Subject key identifier:   9B:54:22:EE:42:7C:14:90:CB:23:3B:B5:86:EE:E0:99:49:54:33:97
Certificate issuer:       /CN=de848e16-b429-4505-9234-f6d889fd1438
Certificate serial:       010D0C9F43285849ABB49C1504F52C70543B1A80
Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/68b3d500-685c-3e96-9137-6a74b385d1b6.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     399820
IP address blocks:        23.146.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:9c:15:04:f5:2c:70:54:3b:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=5bb67de5-b57e-4f62-bc6b-6dd8aa4af34a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:e7:84:94:d0:c7:12:2d:1e:ef:1b:11:7b:
                    2d:52:91:c7:c3:45:56:f0:82:cd:9f:3d:51:69:22:
                    7b:46:b8:31:76:4b:c0:95:5c:89:8f:76:ae:91:fe:
                    50:2f:ba:2b:7b:ff:3e:99:67:2a:2d:a8:55:8b:70:
                    40:0b:71:8e:a7:ec:2d:2e:83:47:c6:d2:52:64:f7:
                    da:55:79:6b:aa:e8:02:52:e5:e0:0a:cf:bb:5e:dd:
                    d3:e9:15:45:d3:31:22:53:36:fd:bb:e9:a4:79:eb:
                    d1:51:77:a5:85:a1:b9:16:ab:f4:5f:48:3c:e1:ca:
                    56:e3:fc:79:af:91:a0:1d:18:ea:46:75:04:f3:86:
                    8f:d6:42:03:39:f6:06:1e:0c:30:02:4e:87:cd:01:
                    5f:b6:c9:c5:6b:f1:10:80:ed:74:5a:2a:96:56:91:
                    32:61:63:fe:3b:cb:e0:04:37:eb:86:93:fc:b0:14:
                    18:bb:80:88:01:1b:d4:e0:4f:6a:0b:f2:95:18:85:
                    e5:f7:2d:c8:29:9a:d7:38:07:2b:27:47:f9:df:02:
                    f8:dc:64:20:47:3e:d3:0b:3c:79:73:14:b0:5a:ec:
                    61:73:f9:5c:ed:39:aa:da:b8:e8:b9:1d:84:3a:88:
                    f5:46:ca:6f:52:e9:dd:94:5c:25:e2:b8:6c:36:af:
                    2e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:54:22:EE:42:7C:14:90:CB:23:3B:B5:86:EE:E0:99:49:54:33:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/68b3d500-685c-3e96-9137-6a74b385d1b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl

            X509v3 Authority Key Identifier:
                keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e5:23:e4:5c:f2:2a:89:08:39:aa:14:c6:80:7d:57:23:b9:
         08:58:72:dd:97:79:9f:da:0c:f8:79:a6:80:8e:4c:e4:c6:c2:
         c7:76:5a:fe:89:1d:cc:54:c2:84:01:e9:76:e8:96:b7:90:3b:
         31:f2:e3:c1:cc:c6:da:93:5f:61:20:1a:ee:25:78:11:23:77:
         ec:f9:f2:cb:0b:b4:ac:38:e3:af:15:46:ea:24:49:dc:30:2a:
         d3:55:d0:1a:42:8c:87:59:46:e5:71:92:cf:f8:a9:92:51:5f:
         09:10:78:e9:1d:64:0b:3e:41:a9:92:e7:e5:3c:5e:89:a3:8c:
         0e:f4:03:d6:da:9a:4d:70:a7:9b:37:93:50:9b:44:4d:77:ba:
         9a:41:eb:6d:9a:08:7e:34:c5:7f:14:39:5f:e4:93:06:15:8f:
         33:95:52:f6:82:9b:01:7f:d0:d1:3c:ed:1d:6c:0b:b3:86:27:
         85:a2:c1:6b:8f:6b:96:17:7b:1d:8a:be:40:db:f1:a0:7d:58:
         f2:ed:c6:6d:bc:eb:d7:df:19:2f:8b:8e:bf:8c:08:3a:e9:a7:
         f8:f6:70:78:26:57:2e:2d:fb:bb:bb:9e:70:47:61:7b:a2:7a:
         af:b3:de:71:b3:10:fa:0c:1a:dd:f0:d4:69:63:8e:a8:6a:b7:
         32:c7:6f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:14:09 2025 by rpki-client