Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/c2f943f4-97db-375e-a1b7-bb9bf7e268a0.roa
File:                     c2f943f4-97db-375e-a1b7-bb9bf7e268a0.roa (raw, json)
Hash identifier:          ditwP7vRALPi5xIJ9mRoTMb0rQzO/GRBZoBCGtyGMoE=
Subject key identifier:   67:B3:9C:01:2B:56:F2:21:FB:90:EB:C1:AC:46:77:30:C4:0D:1C:B7
Certificate issuer:       /CN=caeef20a-a900-4970-b7d6-9b8c54fb0052
Certificate serial:       010D0C9F4328584975445F2ED92A60B411877B00
Authority key identifier: A8:35:F2:C3:15:98:64:2C:0F:BD:89:10:8B:E1:62:E3:A4:57:58:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/c2f943f4-97db-375e-a1b7-bb9bf7e268a0.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     14618
IP address blocks:        23.148.128.0/24 maxlen: 24
                          2602:ff0d::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/caeef20a-a900-4970-b7d6-9b8c54fb0052.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/caeef20a-a900-4970-b7d6-9b8c54fb0052.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:5f:2e:d9:2a:60:b4:11:87:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caeef20a-a900-4970-b7d6-9b8c54fb0052
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=d7f1448f-d826-4b80-8c46-15d91f1b1976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:88:79:82:9e:5e:1b:86:76:dc:fc:93:f2:26:
                    31:c1:68:20:a2:e0:3e:31:78:be:8a:8b:87:b2:27:
                    77:bf:e9:4a:6c:44:16:58:2b:fa:98:cf:65:50:87:
                    52:20:55:2b:38:20:7e:b4:a7:c9:75:ef:88:63:e6:
                    4b:01:35:49:ad:8e:72:61:05:3f:15:3a:32:67:4d:
                    09:45:a0:73:7b:89:6a:0c:a2:5e:0e:5b:32:df:56:
                    10:60:2d:f9:ab:0c:29:da:78:ef:fc:ba:b9:8c:c8:
                    08:69:de:43:cf:5b:d5:da:b4:c9:41:bc:ca:88:af:
                    89:90:e3:d4:32:38:61:c4:86:72:97:05:00:3d:1b:
                    d7:38:df:7b:29:51:cb:08:8d:13:5f:44:12:81:e6:
                    b4:ca:9d:c7:6d:02:37:80:d7:f0:35:73:58:df:e7:
                    b3:83:0e:38:f8:ad:48:32:d5:e7:17:ec:8b:11:41:
                    ba:2b:23:3c:76:2e:f1:ed:be:0d:af:39:8a:e5:33:
                    85:7e:23:d4:95:65:d6:71:3f:92:d7:24:ed:be:a1:
                    0f:9d:0a:50:f9:64:78:20:a2:f4:2e:32:87:ab:00:
                    2d:7d:d2:32:71:45:44:82:f1:2a:e7:0c:03:9e:26:
                    66:8d:7f:91:8c:e5:dc:d1:fa:8b:96:bf:fb:ab:ed:
                    e2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B3:9C:01:2B:56:F2:21:FB:90:EB:C1:AC:46:77:30:C4:0D:1C:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/c2f943f4-97db-375e-a1b7-bb9bf7e268a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/caeef20a-a900-4970-b7d6-9b8c54fb0052.crl

            X509v3 Authority Key Identifier:
                keyid:A8:35:F2:C3:15:98:64:2C:0F:BD:89:10:8B:E1:62:E3:A4:57:58:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.128.0/24
                IPv6:
                  2602:ff0d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:21:a4:97:63:70:da:3f:43:d8:4d:3b:28:29:bc:40:3b:89:
         12:a6:15:a8:57:9d:d4:f4:ed:e3:e5:8e:c5:cd:4e:6a:d0:3b:
         10:ba:b9:4c:83:2b:d3:17:08:f4:b1:5c:e2:25:c7:bf:c2:68:
         66:e7:c8:61:5c:c9:bf:ac:35:7b:9d:d8:d5:c2:4b:7a:95:7b:
         27:f2:dc:33:f1:d4:c2:46:38:ca:70:9d:22:89:01:5a:e2:60:
         06:a1:cb:75:b1:06:c0:c3:90:5e:0f:c3:7e:e2:5f:ad:be:13:
         67:93:46:48:08:02:e8:4a:c9:e5:cb:6f:04:eb:a6:b3:13:dd:
         c3:14:1a:da:74:1d:54:a7:87:72:86:2f:f2:7c:5e:17:2a:de:
         38:83:94:eb:7d:f5:59:ac:0a:9a:f0:11:26:a0:3b:6a:af:46:
         40:99:b9:1a:47:e5:0b:cb:69:3d:c8:1f:5b:4e:ff:d9:48:51:
         f6:6f:19:6a:7a:f1:3d:6a:13:85:6b:06:7d:48:e8:80:dd:6e:
         04:07:44:cd:93:0b:1f:6b:0d:db:06:da:99:07:cb:7c:51:b0:
         29:cd:06:63:34:e3:05:e4:75:31:8c:6b:95:7b:08:1f:eb:b3:
         dc:c0:70:96:21:03:12:bb:55:80:c1:e6:34:f1:5a:87:d8:c2:
         b9:2c:a2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:16:02 2025 by rpki-client