Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/e0878dc4-e471-38f3-8737-f21b100be089.roa
File:                     e0878dc4-e471-38f3-8737-f21b100be089.roa (raw, json)
Hash identifier:          2OXkY6wIjc4NHJO2s+484NJ8UFeQMQ/H1PHEWGZ1nCY=
Subject key identifier:   C7:58:01:78:6A:E6:47:47:E0:EB:F2:19:10:8F:C0:3B:C8:D3:12:9E
Certificate issuer:       /CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26
Certificate serial:       010D0C9F43285849A784C203996BC2ECCA2D9500
Authority key identifier: 9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/e0878dc4-e471-38f3-8737-f21b100be089.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     40676
IP address blocks:        23.159.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:c2:03:99:6b:c2:ec:ca:2d:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=79f06fcc-8587-484c-b2b2-a5363b9091a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:f6:02:2e:4f:aa:f8:56:11:26:f0:24:67:
                    20:98:7a:ed:4f:d7:d9:2d:e1:b4:5c:30:14:1b:93:
                    9f:de:24:0d:10:4e:b2:c7:cc:30:e2:33:5a:3e:24:
                    51:5f:0a:44:68:ea:26:da:26:2a:7b:55:08:50:e9:
                    e1:4d:07:dd:ce:ff:32:93:ee:56:1b:12:b8:2c:67:
                    e0:58:c9:89:82:24:09:ef:05:a2:98:59:c3:5e:3e:
                    5c:59:a9:e6:f6:c5:d9:9e:20:99:3d:eb:13:7f:d0:
                    66:d0:b9:e6:1f:31:0f:b6:58:89:25:1c:1d:d4:30:
                    94:c3:a6:f5:e0:4c:05:d3:7b:f2:8f:25:17:6f:7b:
                    fe:df:39:5e:8c:cd:e9:f4:48:41:fe:a1:7a:3b:38:
                    36:f2:63:b2:6d:8d:6b:94:06:1d:38:af:9a:ed:ec:
                    dc:38:d5:3b:d0:e1:0b:53:6e:da:6d:fc:37:46:fd:
                    81:a1:d1:36:d0:71:57:f7:5a:b6:ab:74:9d:d3:34:
                    d3:c6:07:09:68:79:75:8b:52:74:2a:c2:fc:7c:b2:
                    04:e2:43:dc:90:58:be:c9:62:2f:23:03:44:e9:fb:
                    c8:81:4a:6c:38:3d:6a:5e:58:da:70:37:86:68:5d:
                    dc:e8:04:35:cd:be:6a:0a:42:93:1d:cb:c9:fe:8a:
                    55:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:58:01:78:6A:E6:47:47:E0:EB:F2:19:10:8F:C0:3B:C8:D3:12:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/e0878dc4-e471-38f3-8737-f21b100be089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl

            X509v3 Authority Key Identifier:
                keyid:9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ab:32:ce:87:c5:77:f6:0a:74:47:9a:0a:69:83:b0:10:98:
         51:70:8c:df:88:34:ea:09:b6:64:b3:86:bf:6c:91:fc:f2:0d:
         c1:b8:bd:7b:98:98:b8:d6:39:67:ca:4f:45:1c:30:44:6c:35:
         bc:ba:84:aa:ae:41:73:a5:e3:f4:ff:e7:a6:c2:a2:65:f2:d1:
         a9:63:7d:f0:d8:4b:ac:68:b0:5c:a5:7e:1a:06:8c:fb:0e:00:
         68:4e:ec:ab:91:aa:b2:31:cb:71:53:da:b8:95:d2:7b:c5:ff:
         63:bb:ab:95:c3:cb:6e:2a:27:cd:5a:fa:d2:84:99:7f:be:64:
         8c:43:17:3f:14:cd:06:2d:dc:8d:92:25:6a:0b:91:1b:68:17:
         9a:41:2d:ed:88:93:db:0b:7e:77:be:27:39:71:33:8b:f9:aa:
         e4:3b:80:96:79:d9:1c:5b:fb:2a:1d:52:fd:6a:b0:6d:fc:2a:
         5a:9e:9a:4f:42:85:2f:6d:d8:f7:67:c4:bd:a9:7a:7b:6e:b6:
         e4:e9:eb:f9:ba:d1:d0:c0:5e:61:4d:d3:d2:32:3b:9c:a6:11:
         36:7a:a4:f6:54:57:8a:bd:dd:2e:92:42:6b:83:70:06:3b:27:
         77:e2:da:89:ea:ac:d4:55:7d:f7:73:32:03:a7:d9:88:d6:e8:
         cd:20:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:40:07 2025 by rpki-client