Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/eee51dd1-7b48-3cf0-830e-90458a71df04.roa
File:                     eee51dd1-7b48-3cf0-830e-90458a71df04.roa (raw, json)
Hash identifier:          kDK8MrjTra1GFZ9hA8zCXpQi2Lp3y9rehoOHXFR/tJk=
Subject key identifier:   5F:49:33:1A:61:F8:2D:05:BE:40:EE:61:85:CF:F0:BD:95:F2:2B:97
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F69188F1A0634DB9EA280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/eee51dd1-7b48-3cf0-830e-90458a71df04.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     19157
IP address blocks:        23.86.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:69:18:8f:1a:06:34:db:9e:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=07a8191a-14f9-4779-827c-e42660f9fcdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:07:65:4a:fa:aa:44:3b:7b:ea:0d:52:1c:
                    b6:ff:94:11:52:e5:7c:06:26:df:f5:ba:c3:4f:75:
                    71:dd:83:03:cc:51:81:25:50:2a:87:a2:37:14:2a:
                    66:39:ae:71:af:03:08:25:bc:d8:c2:09:d2:2e:b0:
                    8e:81:d5:c5:d5:76:c3:82:8f:de:09:f5:38:1b:cd:
                    69:ad:3c:2a:d0:82:64:05:52:43:a1:ed:56:68:c4:
                    a5:f1:ba:42:04:4d:80:dd:ad:21:d1:36:c4:1d:fc:
                    de:09:33:74:dd:95:be:9d:9b:26:fb:a9:cd:f2:91:
                    2e:51:38:ad:a0:a9:b9:71:b4:4a:33:d7:da:ce:3d:
                    00:7a:d9:fb:43:e6:e3:03:e7:2a:7f:7e:6d:cd:75:
                    21:df:06:e4:51:f6:46:a6:3f:c2:ba:14:e8:2e:ff:
                    bf:67:27:5e:6a:c7:b7:1d:59:f1:43:84:95:5b:3a:
                    0d:22:89:0c:fc:65:5e:84:d2:a1:b3:dc:20:96:9e:
                    bd:0f:88:fb:4f:70:fa:de:4d:25:de:4f:12:51:39:
                    c3:f9:18:c5:cc:98:fb:81:ea:38:6b:87:f1:98:1e:
                    7b:38:5d:e8:fc:1b:7b:1d:a3:89:26:54:61:52:be:
                    92:9c:e1:61:bc:33:fc:60:88:b1:2c:32:49:89:8e:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:49:33:1A:61:F8:2D:05:BE:40:EE:61:85:CF:F0:BD:95:F2:2B:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/eee51dd1-7b48-3cf0-830e-90458a71df04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e1:17:53:78:50:5a:66:87:93:1e:78:b1:d9:1a:ad:39:11:
         8c:29:f7:09:01:02:d5:60:99:8d:44:4c:80:13:ce:ce:56:8d:
         5b:f0:a3:7b:ac:00:a4:a7:1f:1c:82:d9:57:70:2c:3c:1b:34:
         e4:d8:af:88:a7:88:88:6b:8e:9f:bd:b3:67:c1:67:b3:73:69:
         93:78:02:41:46:a8:1f:86:c3:b4:11:66:81:46:4b:f3:da:e5:
         e0:b3:1d:25:c0:87:07:bd:07:9a:df:15:92:0b:55:23:6e:cc:
         a8:94:9c:9c:56:8a:6d:b3:1f:ab:01:13:59:30:3d:ae:a3:08:
         d2:eb:37:77:69:d0:0c:a1:c8:9e:87:fe:25:e6:84:a7:2d:36:
         5a:38:82:91:9f:64:68:46:ad:47:7e:30:77:46:f7:41:2c:8f:
         f8:fb:97:08:d0:eb:8a:4c:29:64:93:19:af:3b:f9:99:79:f5:
         b6:2f:09:b8:b0:86:9d:76:d3:ce:18:20:3c:16:2f:05:64:2c:
         33:2d:7e:8a:20:50:48:b3:40:6e:61:1c:59:af:92:d2:11:9e:
         5d:b8:1a:a1:e3:37:4d:ef:2d:7c:ba:91:66:9d:1c:03:ac:24:
         c4:d3:5e:25:3d:79:1b:13:22:04:0c:c7:01:60:04:97:20:a2:
         ae:4e:91:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:44:00 2025 by rpki-client