Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89c1d277-7641-3c70-9cea-851fdd81b4f6.roa
File:                     89c1d277-7641-3c70-9cea-851fdd81b4f6.roa (raw, json)
Hash identifier:          deu/2gx+4JiZlblZWnGAt+MZqlnX+lSsOS3tORY9/oE=
Subject key identifier:   C8:1D:DD:6D:04:A9:0B:EA:94:02:E4:F6:FD:7D:66:01:C1:95:21:5F
Certificate issuer:       /CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
Certificate serial:       010D0C9F4328584A2ABACE7F371404984F6FB6E0
Authority key identifier: F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89c1d277-7641-3c70-9cea-851fdd81b4f6.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     12243
IP address blocks:        23.172.0.0/24 maxlen: 24
                          23.176.16.0/24 maxlen: 24
                          158.51.76.0/23 maxlen: 23
                          158.51.76.0/24 maxlen: 24
                          158.51.77.0/24 maxlen: 24
                          198.98.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:ce:7f:37:14:04:98:4f:6f:b6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=07face34-8734-4ff3-9828-34357f73944a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c7:de:3f:a1:b8:5b:35:9c:aa:62:17:16:57:
                    90:82:76:93:f5:bb:88:e3:f6:59:d8:a0:13:0f:f2:
                    d1:e1:f9:35:6d:70:bb:ad:87:92:c6:fb:9a:c6:fc:
                    4d:e4:24:c5:32:1e:01:9e:62:25:d6:47:0c:59:b5:
                    49:63:f4:2d:71:ea:df:c8:4f:c6:1c:ab:01:6a:be:
                    5a:d0:bc:a9:ed:17:c5:f2:c5:a3:09:67:50:fa:42:
                    e6:bb:05:0c:c2:16:47:a3:94:f2:d9:ad:26:37:98:
                    64:b6:7d:ba:99:9e:a2:53:9b:fc:26:fa:86:6a:80:
                    6b:ff:6f:ab:94:ca:92:57:db:b1:bf:df:3c:21:23:
                    a7:27:53:81:8f:81:14:78:ba:74:31:7f:70:3c:10:
                    e9:cc:d9:bc:3f:9f:39:86:0f:c0:09:46:3b:13:10:
                    ff:82:4f:54:18:94:5c:82:69:a5:ef:25:0f:b1:fd:
                    b0:47:bc:f7:1c:2e:25:93:1f:7b:86:b4:e8:8e:ac:
                    07:9e:7f:1b:e5:6d:25:ee:ba:2b:b3:30:07:43:ab:
                    f6:98:ac:2b:2d:30:2f:5b:68:01:79:83:86:af:22:
                    fb:90:08:cf:94:0d:c3:87:a0:a0:6c:5d:c1:14:7e:
                    8e:8a:46:03:99:37:d0:74:81:34:1b:25:78:b2:c1:
                    58:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1D:DD:6D:04:A9:0B:EA:94:02:E4:F6:FD:7D:66:01:C1:95:21:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89c1d277-7641-3c70-9cea-851fdd81b4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl

            X509v3 Authority Key Identifier:
                keyid:F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.0.0/24
                  23.176.16.0/24
                  158.51.76.0/23
                  198.98.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:be:06:8d:7d:50:53:6a:c6:66:36:e4:1d:83:50:cf:21:5f:
         7a:65:03:fe:ae:2c:af:16:f0:0c:a8:5f:1e:e4:19:d4:58:b3:
         98:65:fc:74:ce:e0:e9:65:38:42:78:60:9f:22:a0:42:04:ac:
         cb:81:04:6f:7d:a1:f9:e7:ab:1c:af:be:86:ea:dd:ba:ee:de:
         b0:fe:3f:d0:f1:65:f6:67:4e:a7:7d:65:7d:d7:96:2b:35:90:
         be:6a:71:cb:ac:66:ff:6b:da:5b:21:dc:a7:d0:49:dd:52:07:
         5c:8e:c7:06:11:54:35:fa:ba:16:19:5b:f2:0d:df:30:06:c1:
         91:55:6a:bb:00:b9:92:e1:50:d7:4d:fd:47:93:05:da:a4:6f:
         a1:59:9b:8f:75:31:ae:7f:bd:b2:3a:d1:90:1f:2b:e0:63:af:
         a0:1c:2b:93:5a:d8:b6:c4:d8:e3:85:4c:53:3f:d8:68:3d:22:
         49:f9:a8:dd:ba:22:4a:b3:00:b2:94:79:02:e6:14:4a:3e:37:
         2e:28:86:66:5e:ad:96:38:73:92:82:ec:4e:ac:c5:2b:bc:f9:
         fb:9d:ac:c9:0b:47:30:c0:e4:ca:e0:b3:b2:9d:ee:0d:84:12:
         ac:d1:73:b4:35:d6:e9:3c:85:de:70:23:f1:36:29:71:91:ca:
         94:a6:ae:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:02:08 2025 by rpki-client