Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/b51105e6-2fc7-3391-ae18-9142d950cee2.roa
File:                     b51105e6-2fc7-3391-ae18-9142d950cee2.roa (raw, json)
Hash identifier:          O6p3SfW8MD5nDl/ADBl2aij4GTgAAAuTwXnxAw3VbqY=
Subject key identifier:   6A:9C:0B:83:5E:2B:8A:A5:92:6B:55:FF:B0:A9:59:27:54:A3:81:9D
Certificate issuer:       /CN=17adcaa9-9cb4-4d9a-8104-fe64ebb3770b
Certificate serial:       010D0C9F43285849B57A1FAC87B93F8E500ABB40
Authority key identifier: E4:E1:07:8A:A1:3D:17:D5:EA:71:D3:1D:80:18:CB:7B:33:95:1D:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/b51105e6-2fc7-3391-ae18-9142d950cee2.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     62467
IP address blocks:        23.186.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:1f:ac:87:b9:3f:8e:50:0a:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17adcaa9-9cb4-4d9a-8104-fe64ebb3770b
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=06537af5-042d-45bb-aab9-a22782a9368c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5e:df:93:2c:0f:25:5c:81:b7:fc:83:5c:2a:
                    52:e9:b4:46:03:93:72:6a:63:63:23:4d:50:ec:ab:
                    cc:a4:28:04:b4:40:d1:48:c4:51:58:f4:86:b1:8d:
                    38:dd:cc:48:04:6f:77:e7:71:41:e5:cc:71:14:3b:
                    20:90:49:b4:29:07:1e:92:ee:a8:60:99:65:44:34:
                    ec:cf:87:d3:b8:58:e9:d0:7e:95:8d:e6:ed:a7:32:
                    04:2d:f2:74:45:23:73:a1:12:9b:17:a2:f0:1d:9f:
                    81:7e:95:a2:82:08:66:11:27:c6:8d:10:93:15:5d:
                    3e:a0:91:04:e6:03:ab:72:59:2c:c4:31:ee:e6:42:
                    8f:5e:a5:4e:73:2d:1d:66:b4:80:df:18:32:d7:b3:
                    94:e6:ff:82:d0:48:b6:06:6b:7b:c5:04:63:2d:67:
                    41:5a:1d:5f:52:6b:e9:70:1e:2e:cb:e9:5e:ef:17:
                    34:3c:38:5a:b2:e4:24:a5:a2:71:54:77:98:15:b4:
                    60:99:df:a4:e4:0a:0e:78:49:3e:42:8d:d6:10:59:
                    33:9c:57:cb:e7:95:67:87:75:41:0b:14:98:45:0d:
                    09:0b:13:4a:44:3e:b6:67:88:af:83:71:32:32:60:
                    6c:b0:6c:f3:d2:1b:d0:19:e0:b2:41:d4:1a:a9:6f:
                    3f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:0B:83:5E:2B:8A:A5:92:6B:55:FF:B0:A9:59:27:54:A3:81:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/b51105e6-2fc7-3391-ae18-9142d950cee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.crl

            X509v3 Authority Key Identifier:
                keyid:E4:E1:07:8A:A1:3D:17:D5:EA:71:D3:1D:80:18:CB:7B:33:95:1D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:e8:24:87:9c:8c:2e:5d:f7:ac:49:e9:8b:22:a4:3c:0b:fe:
         eb:09:61:3e:80:ca:d9:cd:98:44:c3:71:26:f9:6d:16:fd:41:
         fa:bb:7f:db:0b:0c:f6:3a:c6:1b:20:9a:de:ff:d3:43:1f:3c:
         28:b7:b7:86:22:76:c6:17:9d:6b:33:f1:3f:89:8b:36:12:6e:
         31:de:b8:61:0b:f8:65:44:cc:e7:d9:53:d3:ac:6c:18:36:53:
         9b:f4:1b:40:42:09:42:e6:ac:9b:f1:ed:de:ef:ed:85:3f:08:
         57:92:6e:56:ee:06:54:04:0d:74:ae:55:d2:90:74:f0:23:1d:
         3e:21:a7:f8:44:fb:e3:df:29:e0:5e:22:46:f7:2d:4e:6f:27:
         75:91:64:a1:2b:63:87:55:23:e0:70:ef:c6:a6:07:e2:eb:33:
         7d:a8:c9:9f:0e:0d:46:d8:d8:6b:3b:eb:84:6d:5d:47:3c:c7:
         9a:49:dc:0f:61:cd:1b:0e:c5:24:c1:0c:8f:0d:e3:57:56:14:
         92:be:a3:68:ef:a6:91:36:02:40:b4:74:7f:58:09:51:40:3b:
         f8:ca:6b:6e:07:ca:12:00:84:5c:0c:ae:a0:f8:2c:03:f4:f4:
         c6:22:15:f1:81:2b:be:75:49:e8:e5:c8:f4:e1:30:a4:4e:de:
         d3:a6:39:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:36:49 2025 by rpki-client