Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/a46787cc-0fb1-3bba-b30f-f7c86fd5fa54.roa
File:                     a46787cc-0fb1-3bba-b30f-f7c86fd5fa54.roa (raw, json)
Hash identifier:          ac1aZIAU7xtErY/cTAVmNxGXNVMU2n9PY6TzPdp7itk=
Subject key identifier:   3E:22:BF:CF:FA:61:8C:C2:0E:F6:E2:02:16:51:0D:C9:5E:31:A2:BD
Certificate issuer:       /CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
Certificate serial:       010D0C9F43285849C63A28ACC5E734330447B180
Authority key identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/a46787cc-0fb1-3bba-b30f-f7c86fd5fa54.roa
Signing time:             Wed 07 May 2025 13:01:01 +0000
ROA not before:           Wed 07 May 2025 13:01:01 +0000
ROA not after:            Tue 05 Aug 2025 13:01:01 +0000
asID:                     134176
IP address blocks:        23.185.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c6:3a:28:ac:c5:e7:34:33:04:47:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
        Validity
            Not Before: May  7 13:01:01 2025 GMT
            Not After : Aug  5 13:01:01 2025 GMT
        Subject: CN=e2ce0335-dfd7-4929-90d2-14903e7f9387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d5:ce:c7:43:e7:98:65:3e:cb:d5:84:e4:80:
                    ca:26:81:2c:ab:8f:91:ef:4a:41:1a:92:8e:92:94:
                    6d:c7:40:db:3c:7f:fd:37:ef:0a:85:be:b3:5a:74:
                    33:80:67:05:90:28:54:a0:e0:d8:c8:b8:ba:7e:af:
                    6f:58:93:ec:a5:ff:64:9a:03:4b:ca:39:05:eb:e7:
                    e7:4a:7a:92:07:2c:a8:c8:7f:37:9f:e5:9d:3e:ff:
                    2f:5f:0d:36:11:d6:bf:2c:6d:27:be:d8:68:f1:ec:
                    7e:cb:70:1c:2a:45:20:76:49:c2:4f:5b:97:c8:3c:
                    61:c1:15:e7:67:1a:83:77:03:9d:21:0b:73:40:83:
                    b7:0d:17:f4:16:34:2e:8c:fe:8b:ab:4c:e0:41:e4:
                    3f:0c:34:25:30:ac:cc:4f:59:6b:b6:a5:be:c7:7c:
                    7d:a5:0d:a3:fe:3c:23:46:67:b3:0f:b5:00:2d:cc:
                    be:48:3d:f4:6a:be:c2:47:53:76:d0:92:6b:8c:b6:
                    6f:50:fc:d0:ec:03:e7:a3:dc:51:a5:94:b3:0f:cb:
                    57:5b:5c:ca:0c:fa:da:c7:12:50:9d:cc:8a:41:29:
                    0e:14:cd:40:d5:5e:c8:98:92:94:5d:61:31:43:21:
                    01:46:3b:5c:0f:b7:d4:fc:65:9a:f5:db:5a:7e:d7:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:22:BF:CF:FA:61:8C:C2:0E:F6:E2:02:16:51:0D:C9:5E:31:A2:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/a46787cc-0fb1-3bba-b30f-f7c86fd5fa54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl

            X509v3 Authority Key Identifier:
                keyid:02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d1:d1:51:b3:12:5c:d6:8b:4f:bf:a8:53:98:70:78:9e:b6:
         58:28:59:7f:3f:12:a1:39:be:d2:6d:8b:26:83:62:27:1e:b6:
         37:34:12:67:aa:f5:a0:2e:9f:d9:14:34:4b:94:87:e2:0a:9f:
         ff:f8:d5:ef:7c:2b:ff:33:90:e4:eb:c2:f0:c1:18:cc:56:f4:
         a6:f7:63:ea:43:f9:98:35:29:3b:9f:4c:83:b6:42:1b:f9:1c:
         26:db:94:89:04:37:6e:2b:42:bc:41:5d:2c:0d:91:b9:b1:97:
         f6:4c:95:fd:af:bf:f0:1b:3d:a2:04:1c:c7:d3:10:3f:e5:82:
         da:d6:d4:8d:0b:21:23:4b:b8:30:16:51:df:02:b8:c8:f3:0a:
         e0:d0:9f:99:ad:52:3e:dc:04:a6:09:33:45:79:bc:4f:4a:23:
         50:c8:78:dc:8a:ad:03:ef:86:5f:4f:8f:5d:29:8c:f2:0d:14:
         1f:04:4a:ef:82:ce:a2:59:32:fb:a7:9e:db:21:8f:51:4f:af:
         40:b1:f5:30:31:95:5b:3c:02:7f:b4:50:7d:22:b8:91:2c:6e:
         29:20:68:7c:97:e1:81:e3:6e:d6:20:04:ec:1d:e5:26:81:8a:
         59:08:cf:81:cd:0b:a5:38:c3:69:b6:11:64:32:b0:e1:ce:60:
         e5:56:2d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:31:47 2025 by rpki-client