Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/1603cbf9-6136-3a09-b863-4ccf1942a0c5.roa
File:                     1603cbf9-6136-3a09-b863-4ccf1942a0c5.roa (raw, json)
Hash identifier:          NJnXagZnOKpcwykUC2qNt3Q21qdssAufeoLejlkLtqg=
Subject key identifier:   A8:C6:60:E6:08:B3:C0:AE:CA:9F:6D:E0:05:00:06:25:82:7F:89:8C
Certificate issuer:       /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
Certificate serial:       010D0C9F432858498E648A4FBFDB196EBB3AAE80
Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/1603cbf9-6136-3a09-b863-4ccf1942a0c5.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        23.162.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:8a:4f:bf:db:19:6e:bb:3a:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=3e2dfbc5-6f63-46a1-95ae-96eca79a7e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:1b:ba:17:15:73:0f:b2:df:3e:50:c5:d8:
                    1e:97:6f:ef:8f:5b:8a:d8:ee:23:bd:10:14:69:40:
                    31:2e:41:ab:eb:c3:b0:83:c3:0e:55:49:38:8e:bd:
                    fd:40:45:81:37:ed:2a:0e:2b:86:4c:a0:d9:d1:6b:
                    19:d1:fe:84:d8:6e:b4:6e:ab:a9:bf:47:23:4d:45:
                    c4:9e:0e:18:0d:5e:d3:97:67:ba:46:a4:b1:4f:84:
                    9f:d2:c6:97:04:61:ee:25:4c:9e:28:02:a1:a7:ac:
                    09:f7:71:76:63:f6:46:55:4d:6d:68:1b:a8:72:b9:
                    9c:6f:89:96:48:09:1c:77:b9:f1:2e:c4:4e:b3:14:
                    f4:b7:86:61:57:9e:8f:fc:4c:00:33:4d:70:fb:2e:
                    7d:74:49:39:b9:c4:d8:5b:c2:a4:ae:cb:b4:13:f1:
                    44:cc:d5:96:dc:d4:ea:ac:3a:d1:e8:8d:1d:ed:7c:
                    25:2c:d1:77:6f:1f:06:5d:ae:62:f7:b2:2b:54:74:
                    5d:2c:d4:33:d0:73:ac:f8:50:3a:ee:9c:a2:8c:24:
                    01:c7:02:17:90:38:27:e1:a0:e1:c2:40:e5:de:62:
                    bf:57:8c:64:5f:1b:82:89:57:98:da:79:ce:6c:1c:
                    b3:bc:19:1a:b8:b9:a2:fa:34:fb:90:d7:83:45:a3:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C6:60:E6:08:B3:C0:AE:CA:9F:6D:E0:05:00:06:25:82:7F:89:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/1603cbf9-6136-3a09-b863-4ccf1942a0c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl

            X509v3 Authority Key Identifier:
                keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a5:04:26:de:aa:2e:67:5b:86:a3:4f:51:51:d5:28:ff:70:
         29:80:f0:e1:dd:c5:90:8a:03:da:e7:43:4d:01:4e:20:19:a9:
         e8:b1:6b:9d:08:c8:60:7c:af:b2:25:4a:4d:9e:73:ef:4b:a3:
         6b:e4:6c:36:82:60:b1:d4:6b:e2:6e:83:68:5c:0e:f6:e2:68:
         2f:db:e5:d6:24:31:04:a9:0e:7c:61:d0:04:18:ae:99:d5:27:
         5f:6d:1d:8c:48:a3:fe:44:2b:f0:c2:5b:53:45:d6:3c:6c:f8:
         22:7f:11:bd:cd:d5:16:ca:f4:b0:14:d3:d6:88:30:4a:8b:07:
         1e:db:bb:57:ee:7f:4f:05:f1:ab:d7:34:22:ad:96:2a:f0:e6:
         f0:c1:ce:bd:6d:92:eb:27:3f:47:96:87:7d:b6:54:f1:f6:e2:
         23:dd:75:e2:ae:85:46:df:c9:ac:e5:79:09:31:93:72:8d:50:
         87:1f:a8:0e:a1:37:84:76:38:d6:04:b8:f8:51:ae:03:8e:02:
         b9:dc:44:9b:65:f1:eb:26:90:40:38:a2:03:57:b2:ca:ba:47:
         e9:3f:61:be:e1:53:30:77:35:2e:e8:69:9d:2f:7f:f2:34:a6:
         4f:fb:4c:54:9d:3f:3f:a3:8a:08:18:f3:96:ba:67:03:9d:19:
         16:16:c6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:07:09 2025 by rpki-client