Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/23a8d9f5-35a3-3aec-b4ea-004d3fb3e214.roa
File:                     23a8d9f5-35a3-3aec-b4ea-004d3fb3e214.roa (raw, json)
Hash identifier:          ZH+gny6hsQpClQR3NlZxd5iILFr/m6TczK1RTXce+ok=
Subject key identifier:   79:4D:FB:43:E6:3A:BF:D8:89:0B:6E:0C:FB:C1:42:11:4F:DC:FF:C0
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F43285849AD1A0E7264202B7C6A0C1F40
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/23a8d9f5-35a3-3aec-b4ea-004d3fb3e214.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     393262
IP address blocks:        150.252.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:0e:72:64:20:2b:7c:6a:0c:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=a1096ad4-9cde-461a-a60f-128a9cc93ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:a6:da:55:96:ea:05:f2:f4:e1:ba:bf:9b:
                    97:d6:e5:75:a3:40:3a:0a:ab:2a:48:d2:a7:6b:27:
                    80:78:4d:33:11:25:30:e9:7d:2d:a3:c9:2e:0f:b2:
                    ca:76:f8:03:f2:01:dc:73:16:6e:9d:24:7a:13:4e:
                    be:f4:23:db:ad:91:c7:fc:52:48:03:77:73:f0:b7:
                    b2:9f:63:df:9c:7e:e2:fa:62:37:f6:e2:6b:15:5b:
                    d0:8f:93:d1:74:bd:27:c8:89:22:e2:a3:0a:23:48:
                    04:6b:fa:18:20:58:7f:93:1a:a9:b1:34:6d:e4:5e:
                    f0:a1:44:f4:e0:fe:87:68:32:c5:00:dd:14:d4:df:
                    93:fe:6a:bf:d7:9d:06:25:92:11:79:84:83:77:3c:
                    e5:a2:4f:65:7d:eb:14:51:ec:68:32:9d:f0:d9:ff:
                    71:c7:37:2c:34:85:de:72:d7:7f:bd:5b:ee:1f:15:
                    61:9f:36:20:f5:e8:f1:66:46:93:f0:30:4e:5b:af:
                    84:8f:59:cb:d3:25:cf:79:c8:40:45:bc:cc:56:d2:
                    bf:dc:b2:16:f7:5a:15:e9:46:64:7a:f0:76:da:4b:
                    ce:ea:26:d9:3a:44:ba:04:c6:ac:ff:7c:96:4f:f1:
                    40:6e:a9:cc:69:a8:0c:c4:cf:9b:1f:91:97:70:fb:
                    d8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4D:FB:43:E6:3A:BF:D8:89:0B:6E:0C:FB:C1:42:11:4F:DC:FF:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/23a8d9f5-35a3-3aec-b4ea-004d3fb3e214.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:50:9f:ff:8b:32:2b:37:2b:d2:2b:41:e1:fc:33:e6:05:6b:
         79:51:e8:e0:df:93:7e:33:f8:62:06:b7:f9:54:20:aa:26:e1:
         5a:5e:06:da:fb:25:de:c8:a3:85:e4:c3:62:c1:47:0c:b5:5f:
         94:03:d1:c4:11:c0:67:01:24:63:2d:00:a3:e0:23:a0:51:a3:
         10:cb:43:c4:0e:5e:9e:db:68:73:40:e6:1f:af:db:85:0f:3c:
         59:1c:24:94:06:92:7a:f0:2e:0c:b9:57:7a:6c:5b:5a:41:af:
         3d:96:74:da:1a:92:80:7d:47:84:9f:61:84:73:14:fd:4b:ae:
         ed:de:2f:df:d5:34:c9:dc:c7:66:02:5e:ca:62:b7:e9:e8:93:
         50:b6:38:4c:2e:82:01:02:41:d3:e0:20:d1:e1:8a:0f:76:c5:
         08:8a:85:bc:c6:0e:9b:2f:58:d3:9a:d2:ab:11:b9:98:57:6a:
         54:6b:c2:58:82:16:05:9f:a4:15:5d:9b:48:76:7f:b1:1c:57:
         96:7b:7e:c5:0e:83:d6:f6:ce:4b:0a:0a:f4:d2:ca:9b:37:50:
         d5:03:df:3e:88:75:b0:e4:34:55:26:64:78:80:14:95:dd:2a:
         b0:b0:49:d6:aa:08:65:47:01:77:a9:dd:41:41:b5:22:87:78:
         1e:66:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:04:53 2025 by rpki-client