Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/a3043348-feb3-355e-9267-dde5b9f23b95.roa
File:                     a3043348-feb3-355e-9267-dde5b9f23b95.roa (raw, json)
Hash identifier:          vslwBKpPMd1qEcgo56tZqcmjfpxpCdimM6yCxVf2jf8=
Subject key identifier:   16:18:37:12:0C:CF:AE:3E:52:96:0F:6B:10:F6:DF:15:B0:42:48:F8
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F432858498FC9BECDFFDA200037CBC7C0
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/a3043348-feb3-355e-9267-dde5b9f23b95.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     396422
IP address blocks:        23.159.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:be:cd:ff:da:20:00:37:cb:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=affa4502-5485-4db6-802f-4696c3c45f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4f:71:d0:38:6b:24:c7:ff:14:53:8a:50:53:
                    0a:04:50:76:77:58:89:5d:c5:6a:3b:76:af:1b:c5:
                    d7:59:15:0e:f7:e8:e4:86:14:7f:1e:ae:1e:ef:38:
                    56:7c:96:09:1b:5b:eb:11:d6:fc:33:68:9b:4c:66:
                    a3:14:96:7e:67:e3:0f:36:60:56:4d:0a:55:93:3f:
                    78:23:de:be:3f:00:ec:56:53:62:22:cc:df:b0:3c:
                    6f:24:03:6f:5c:76:a2:f0:1b:a1:44:b7:7f:f3:23:
                    2b:87:8b:30:0a:24:61:81:af:6a:c7:4c:99:e8:b1:
                    e4:3f:13:86:5e:4c:41:9f:43:58:99:01:a3:31:30:
                    cd:36:98:c3:a3:af:de:55:55:1d:67:3c:5c:9c:95:
                    c8:66:83:2e:ea:77:93:a8:58:74:6d:50:1e:98:7a:
                    92:cc:ff:ee:07:8b:6e:01:29:3b:fc:fa:f8:58:36:
                    71:d7:31:01:e6:dd:a4:f4:7d:99:6a:ca:b7:43:f3:
                    4e:88:d8:54:47:37:66:ca:f3:34:e6:e1:34:0a:80:
                    74:e1:b8:c8:16:06:13:fc:63:75:e2:53:47:a5:44:
                    72:d4:2a:59:92:48:6f:f6:42:d6:f8:76:34:96:30:
                    a2:ee:db:f7:04:53:7c:dd:c6:bf:64:d7:86:1a:02:
                    f4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:18:37:12:0C:CF:AE:3E:52:96:0F:6B:10:F6:DF:15:B0:42:48:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/a3043348-feb3-355e-9267-dde5b9f23b95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:4a:d4:fd:84:e7:eb:b0:9a:de:49:b8:b8:fb:52:18:fd:b9:
         2e:03:9d:48:c0:ed:3e:7c:0a:17:fa:a1:41:78:44:5e:54:29:
         4e:76:df:e9:8f:ee:ce:52:7b:06:b3:ba:09:ce:cc:2b:80:45:
         5a:d5:e2:69:46:e9:f6:b3:75:0f:ca:63:fe:f0:39:bf:d7:89:
         75:b1:79:87:1f:bd:a4:14:d3:9e:29:01:c3:1c:82:c4:a1:a8:
         c7:87:2d:af:be:48:fa:d1:7f:00:7f:c5:94:8b:b2:4b:ce:a7:
         94:e5:8c:94:29:3f:38:b7:85:d3:5e:68:eb:16:c2:1c:4a:34:
         56:96:3d:df:cf:39:22:98:55:12:b6:29:fa:38:3f:f0:75:06:
         d4:1f:e3:c8:20:a9:b8:b5:43:da:b0:8f:93:6c:60:d5:0e:55:
         6e:8c:5a:b5:41:1c:07:85:6d:d6:b7:82:94:10:dd:18:33:a5:
         3d:9a:89:c3:ce:91:15:13:ae:7a:cc:56:40:ca:b0:b4:15:83:
         22:93:a1:fd:2a:b3:52:5c:e3:3a:fd:b0:79:cb:21:ff:a3:d6:
         e6:3e:cd:29:51:d9:dc:70:e1:2d:c4:61:49:f7:3f:47:db:07:
         1e:69:bc:b3:9e:69:31:8a:61:58:9c:02:ec:6c:90:76:1f:b8:
         99:06:1c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:38:33 2025 by rpki-client