Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/8c68a5f0-2451-350c-9c9d-d8c6d1b21b38.roa
File:                     8c68a5f0-2451-350c-9c9d-d8c6d1b21b38.roa (raw, json)
Hash identifier:          jVYQzcP92ZWG4CPExHj8+40+zyg3N05wdErmxbPn/4M=
Subject key identifier:   F5:01:48:64:EC:75:45:37:C6:DA:D6:84:B9:1D:3C:30:36:95:70:2B
Certificate issuer:       /CN=093d143f-009a-4f7c-beb4-ce9c73352417
Certificate serial:       010D0C9F432858494303F8D408727AD183A6A240
Authority key identifier: C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/8c68a5f0-2451-350c-9c9d-d8c6d1b21b38.roa
Signing time:             Fri 21 Mar 2025 13:00:50 +0000
ROA not before:           Fri 21 Mar 2025 13:00:50 +0000
ROA not after:            Thu 19 Jun 2025 13:00:50 +0000
asID:                     398395
IP address blocks:        23.164.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:43:03:f8:d4:08:72:7a:d1:83:a6:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093d143f-009a-4f7c-beb4-ce9c73352417
        Validity
            Not Before: Mar 21 13:00:50 2025 GMT
            Not After : Jun 19 13:00:50 2025 GMT
        Subject: CN=4b6210cb-ad34-4109-8bb5-f0ee6ae4181f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:d4:57:48:69:fc:15:ce:37:46:fb:68:ab:
                    8e:ed:57:db:b9:c2:1b:6f:48:60:85:0e:98:2e:d2:
                    d5:5d:d9:b2:71:65:15:49:23:61:d6:d4:29:de:47:
                    2c:ac:05:86:59:54:b7:21:27:ba:d6:08:ec:48:df:
                    7c:04:29:df:62:17:7c:89:7c:15:c6:fd:2f:d1:9d:
                    26:3a:99:31:38:19:72:70:c9:a4:2e:92:cf:92:4d:
                    4a:1c:34:ad:b1:d6:50:13:52:11:cf:64:64:3d:b8:
                    7d:b4:7d:b2:a5:ef:c9:ab:26:30:4a:80:5a:d1:65:
                    a7:96:b0:9c:48:a1:86:68:08:cb:a6:97:74:5c:ea:
                    9c:f2:e0:ab:f7:d5:81:1e:0c:b6:c1:d1:ae:02:fe:
                    a8:7b:c8:ff:96:ad:84:aa:d3:fc:7f:fb:9b:60:e3:
                    b0:7e:47:f7:43:00:21:3e:83:2a:67:f4:92:cc:61:
                    e1:95:9e:43:7e:a0:37:a2:8c:82:3f:02:11:7b:8d:
                    2d:8b:f8:94:23:89:34:4b:8c:e8:9a:7e:51:da:5a:
                    14:82:d9:46:b5:36:52:30:1d:48:e6:21:ef:23:b8:
                    bf:5e:fb:1d:8b:c1:d4:ef:1a:e7:05:53:4e:2c:12:
                    bf:ab:82:9f:9f:e3:dc:a5:65:32:a1:c5:30:73:5f:
                    d0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:01:48:64:EC:75:45:37:C6:DA:D6:84:B9:1D:3C:30:36:95:70:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/8c68a5f0-2451-350c-9c9d-d8c6d1b21b38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.crl

            X509v3 Authority Key Identifier:
                keyid:C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:62:51:7e:6b:b1:ee:4c:09:0d:4d:fc:f3:c5:0b:6e:75:f4:
         e8:cd:b1:a6:05:48:34:67:af:88:bf:f0:c0:81:c5:c5:5f:30:
         bb:4a:e8:ea:a1:ec:27:e5:67:a2:56:af:ae:c0:9f:fa:74:44:
         fc:ff:13:81:2b:11:69:83:38:77:b0:18:72:e7:57:92:2c:69:
         b3:ff:40:a4:b9:14:b6:cb:d9:8c:bf:a0:89:b2:d9:76:6e:14:
         1a:df:72:28:27:55:6d:c8:25:52:ff:9e:e5:79:f6:9a:4d:20:
         2b:f4:a6:e7:e9:42:25:36:d3:d1:7d:bc:7c:4e:cb:eb:e6:3b:
         45:b6:d0:b5:42:b7:cd:15:59:1d:32:b5:cb:1f:81:eb:93:2e:
         b5:0e:85:16:7a:f9:d1:a5:e6:a7:50:85:6a:13:47:83:24:28:
         13:2f:f4:39:9a:bb:63:27:1e:48:e2:9a:9e:f1:b2:07:d9:45:
         0c:43:0b:fe:bf:69:50:d7:d7:95:33:ac:1d:52:56:a2:d0:52:
         0c:3a:c9:a6:65:18:12:38:e5:5e:b4:41:dc:df:98:3a:72:0d:
         46:f1:c0:2e:29:6c:a6:54:a2:74:40:2e:46:30:40:11:60:d4:
         40:14:80:fa:8b:c3:24:c9:e9:4b:63:49:ed:94:ec:dc:11:a0:
         fb:25:c9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:07:26 2025 by rpki-client