Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/54999924-5032-3b39-ac1c-a58f234e2e45.roa
File:                     54999924-5032-3b39-ac1c-a58f234e2e45.roa (raw, json)
Hash identifier:          loGxMdTW2XFP/V9ilfuMHgEcpuAR0axRYSSUgrGkDpk=
Subject key identifier:   F6:82:FD:74:D1:43:E4:C0:0B:5D:45:B4:D2:FA:A2:C2:8F:8D:54:52
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285849B844B97C549B7A9F341F4B80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/54999924-5032-3b39-ac1c-a58f234e2e45.roa
Signing time:             Fri 02 May 2025 13:01:00 +0000
ROA not before:           Fri 02 May 2025 13:01:00 +0000
ROA not after:            Thu 31 Jul 2025 13:01:00 +0000
asID:                     26842
IP address blocks:        64.158.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b8:44:b9:7c:54:9b:7a:9f:34:1f:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May  2 13:01:00 2025 GMT
            Not After : Jul 31 13:01:00 2025 GMT
        Subject: CN=d3025079-77f0-4b85-9378-cc90a4c3b374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:ce:f2:aa:5e:fa:42:b6:88:15:6f:51:af:
                    d8:38:4a:f2:4b:b6:75:7e:a6:60:dd:28:dd:d2:66:
                    28:44:2c:82:ba:ca:f4:40:33:91:06:55:5a:9f:c5:
                    9e:bb:25:ad:d9:0b:6b:3e:1f:c8:cf:ed:46:66:6b:
                    1a:ad:90:f3:1d:7d:4a:da:76:a0:78:eb:5c:f2:c8:
                    ff:af:62:56:1d:5c:23:65:8d:47:01:4d:e4:38:83:
                    79:a9:a7:9b:80:f3:86:5d:3c:19:07:dd:ee:a6:ca:
                    b1:dd:ab:59:56:ad:ac:9a:91:5d:2e:ad:a4:ac:6a:
                    34:64:c8:a9:0f:99:c7:b7:8e:16:5e:64:e5:fb:14:
                    a6:05:87:cb:b0:a7:00:47:2d:bc:d7:95:4b:c3:13:
                    ba:1b:c3:fa:00:9d:1a:14:95:e4:48:03:ef:9f:45:
                    bb:3a:86:2e:a7:b2:c4:85:4f:20:f5:88:11:31:bb:
                    5f:d5:06:d4:0c:45:50:de:2d:d9:a8:71:a7:69:bf:
                    09:ec:fa:e1:3c:8b:6c:99:9f:e0:a8:9c:16:1c:b8:
                    bd:13:e2:be:b6:13:2e:45:bd:b8:5f:a9:7a:a0:77:
                    d2:f3:05:ea:bc:76:6f:80:23:88:60:96:61:e6:c8:
                    d5:09:2d:6f:2b:52:db:2a:b4:f1:38:a6:26:e1:46:
                    62:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:82:FD:74:D1:43:E4:C0:0B:5D:45:B4:D2:FA:A2:C2:8F:8D:54:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/54999924-5032-3b39-ac1c-a58f234e2e45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.158.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:9c:b1:21:e9:00:8f:ad:09:22:a8:8f:68:36:70:0c:a8:22:
         d3:c6:f1:74:5a:d0:7e:96:e4:14:21:07:23:a8:c1:b0:86:fc:
         84:96:97:d8:22:7e:f3:b6:74:e5:56:33:bf:47:ac:63:9a:ba:
         4e:74:2a:3a:f5:16:d3:ec:53:74:71:e4:43:bc:76:0a:85:07:
         78:a1:cf:75:e7:f7:e7:d0:29:95:f1:5c:05:a6:17:aa:62:ee:
         5f:21:93:94:d4:19:3c:fb:42:00:f6:c2:3d:db:75:52:59:6f:
         41:87:9d:59:cc:bd:a4:2a:55:43:57:c2:2f:ee:3b:72:b9:4e:
         e6:6e:b1:1d:73:f3:f9:35:fa:7e:0d:1f:58:83:e5:3e:88:c4:
         30:3e:5e:02:86:8d:eb:db:3d:ae:67:3f:e6:e1:ee:9f:55:12:
         79:9e:77:1d:b2:1d:57:0f:4a:c9:d8:51:f0:4d:e4:6a:53:6b:
         56:26:71:69:1d:e1:bb:bb:88:43:e7:15:75:5b:8f:0b:7b:83:
         34:59:b3:dc:a9:63:30:e7:5c:7b:e2:06:9b:f9:97:bb:4b:ff:
         27:7a:f7:22:8d:ce:cc:f7:bd:9c:6e:b2:91:99:9c:ea:ab:f3:
         2e:74:d8:f6:6c:44:75:68:e4:19:79:00:75:3f:71:21:0d:72:
         a6:c6:4b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:15:36 2025 by rpki-client