Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/e0662cb3-9b18-3aa1-9744-fbf30a45354f.roa
File:                     e0662cb3-9b18-3aa1-9744-fbf30a45354f.roa (raw, json)
Hash identifier:          u8UprzgZ4dmcrt5ZHjpFDGYMtGD9iRGhuHX23UNlr0Q=
Subject key identifier:   72:20:09:05:E7:09:33:35:CA:55:A0:EA:7F:A4:E7:78:AE:B1:A8:11
Certificate issuer:       /CN=46ea6d07-9209-4ad1-b0bf-fcd8f5018c70
Certificate serial:       010D0C9F43285849C0A4EC2154D91D1277D0BF20
Authority key identifier: 8F:48:41:BE:AD:4F:8B:F9:40:81:A0:90:C3:70:23:AC:91:68:36:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/e0662cb3-9b18-3aa1-9744-fbf30a45354f.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     1030
IP address blocks:        23.167.56.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:ec:21:54:d9:1d:12:77:d0:bf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ea6d07-9209-4ad1-b0bf-fcd8f5018c70
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=0d686e62-231d-484b-b421-71b88d8b4a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c6:c6:c2:8b:b4:9d:fc:8c:d8:f2:3e:03:a1:
                    41:5d:56:87:26:9a:62:f5:ea:d1:72:ed:08:ae:17:
                    27:8f:e4:a4:5b:5e:29:05:52:ba:de:4a:90:7e:f1:
                    cd:51:7a:2c:78:2b:98:96:57:34:59:cd:40:dc:90:
                    e0:a4:84:73:08:1e:38:9a:99:16:2d:5d:88:ef:b4:
                    49:9f:25:b6:d3:96:1c:67:aa:e1:ba:f8:64:b8:46:
                    2c:8f:af:16:d7:22:5d:29:e7:00:fa:aa:b9:94:76:
                    10:fd:5a:7a:a4:a5:77:4a:b3:a8:dc:c4:3f:f5:3d:
                    97:48:91:30:fe:39:7a:ba:7f:d4:fb:1a:c3:43:2e:
                    f8:d0:7b:d5:65:e7:22:8c:ee:c5:56:70:90:8e:0e:
                    b4:42:03:a1:4e:ad:76:06:c6:4f:26:8d:fb:78:1c:
                    6a:be:a8:c5:49:65:c3:f5:e3:b7:69:28:e8:b9:ad:
                    cc:1b:e1:63:89:8a:e7:64:10:d6:47:f2:d4:17:3f:
                    ec:89:51:2b:e8:d5:f1:43:ce:08:a6:1c:14:16:75:
                    fe:8c:ef:56:32:95:e5:35:e9:4c:92:5b:49:01:b5:
                    a0:92:3e:a1:eb:1e:f7:d6:47:88:75:ad:73:2b:4f:
                    1b:98:a9:c5:e2:7e:42:84:d2:32:d8:28:39:61:98:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:20:09:05:E7:09:33:35:CA:55:A0:EA:7F:A4:E7:78:AE:B1:A8:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/e0662cb3-9b18-3aa1-9744-fbf30a45354f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.crl

            X509v3 Authority Key Identifier:
                keyid:8F:48:41:BE:AD:4F:8B:F9:40:81:A0:90:C3:70:23:AC:91:68:36:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ab:d7:dc:4f:6f:61:9a:38:32:44:51:84:8f:15:2a:21:10:
         90:96:51:e9:4d:0a:8d:6c:31:94:a5:23:5e:a7:0c:0e:bd:fa:
         1c:44:b7:3d:a1:c2:14:b5:30:91:d5:5c:e4:1e:2f:6c:c6:c3:
         3e:43:9d:df:20:57:84:29:8b:80:93:d9:c0:2f:94:6b:ef:bc:
         d4:0c:65:3c:03:9a:eb:7a:64:7b:27:45:d8:22:a9:b8:45:98:
         82:3a:40:56:fd:00:3f:e1:fa:3a:a4:06:86:16:42:83:d6:c0:
         ad:a2:e5:03:3b:50:0e:c2:72:c3:2e:8b:d0:4a:c9:6d:81:e0:
         fa:db:42:fd:a6:f8:b2:b0:b7:4d:f8:d9:aa:c3:7e:dc:7a:2b:
         d3:30:b2:4a:0d:52:52:0e:4e:51:d5:82:1b:58:7b:5c:81:25:
         f7:0a:1c:f5:16:ff:a2:9d:55:37:60:1a:b3:86:e1:47:43:9c:
         c1:4f:f9:40:bc:13:23:45:bb:17:9c:24:38:18:7c:b3:b7:70:
         8b:ce:ca:04:78:e6:ef:b7:e2:59:6a:bc:53:24:2d:c7:d7:1a:
         92:d2:2f:c0:9c:ef:5b:24:01:06:20:c2:e3:59:f8:5d:53:9f:
         1b:af:6a:ca:77:db:23:27:c8:2f:fb:28:b4:69:d0:5e:c4:94:
         49:ea:10:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:55:00 2025 by rpki-client