Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/91115247-b441-3259-a41f-3fbc5e5d5de0.roa
File:                     91115247-b441-3259-a41f-3fbc5e5d5de0.roa (raw, json)
Hash identifier:          vtmlCw/rOVbb2859hMMEwNhUvSeHfUNwhm/c8wKvCVw=
Subject key identifier:   14:86:90:A5:CC:35:4C:37:EA:97:26:F0:5D:6E:84:ED:0C:59:56:C2
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285849E22521819A4A84ADD48A1E00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/91115247-b441-3259-a41f-3fbc5e5d5de0.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     209
IP address blocks:        64.192.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:21:81:9a:4a:84:ad:d4:8a:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=5218459f-b6fc-4f14-9aec-4cede280b295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:18:49:4f:f6:2c:95:41:54:51:06:16:c8:0c:
                    98:d6:86:68:5d:c7:e3:09:9b:d2:b3:37:8d:76:ab:
                    da:af:f0:38:05:93:ef:b1:65:ed:c5:2c:7c:52:36:
                    6e:d1:11:c7:e3:eb:09:78:e5:91:02:0a:b1:ce:85:
                    b0:e1:1c:85:27:c1:7a:3a:07:11:cf:8d:88:e4:71:
                    8c:2d:80:bd:11:f2:ab:63:3a:f4:72:cf:eb:56:48:
                    bd:55:af:1b:42:cf:a6:0c:77:24:9d:19:b1:c9:7c:
                    0f:95:a6:52:cd:60:a8:4e:66:be:46:be:1c:87:2e:
                    3d:d4:9d:06:22:0a:2d:64:fd:38:2d:38:7f:1c:20:
                    e8:93:18:66:9e:99:be:ee:f9:2b:43:88:45:b5:bf:
                    16:89:30:bb:aa:2e:51:b8:03:c7:ad:bf:30:4f:06:
                    5c:fd:72:2e:8b:6f:b1:1a:c5:29:b1:4e:f1:90:b3:
                    e5:0a:56:2f:fb:40:21:3b:55:a0:f2:e5:c1:7b:0f:
                    4b:72:eb:d6:17:64:a8:5f:d2:e1:0c:c7:8d:f1:5a:
                    80:46:ff:3b:57:ee:66:7e:3e:f0:f4:bc:71:a4:bd:
                    5e:eb:20:9a:3f:e7:6d:08:9c:77:32:60:b8:bb:0e:
                    de:a6:af:f0:de:fb:21:0b:06:43:66:85:86:24:74:
                    06:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:86:90:A5:CC:35:4C:37:EA:97:26:F0:5D:6E:84:ED:0C:59:56:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/91115247-b441-3259-a41f-3fbc5e5d5de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.192.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:84:70:37:8a:61:d7:fd:9d:93:80:9e:9e:55:bd:61:d4:b7:
         89:b9:ce:bf:2a:8c:5e:43:53:87:4c:5f:62:8b:a0:28:55:9f:
         73:74:b7:97:15:94:7b:98:cd:6b:b5:cf:a3:ce:f1:7f:93:1c:
         fe:e6:9b:9c:b7:a7:42:94:e9:32:a5:26:bc:09:dd:52:3c:e4:
         8d:0f:49:a5:8b:5c:ba:09:2f:c5:d4:14:28:99:81:bd:49:e3:
         aa:d8:67:e7:24:4d:ce:38:c4:06:49:a7:a1:7e:14:a0:70:91:
         ba:f7:d4:ea:2c:ba:2a:34:89:fe:89:15:00:59:8a:5a:16:9e:
         d1:4e:b0:68:e9:af:4a:f5:54:a1:cf:25:c8:9e:e8:bf:23:0e:
         8d:a2:95:7c:77:43:c3:33:e4:b9:80:e7:c2:63:a3:bd:8b:5b:
         ef:db:50:82:fe:23:6b:0c:50:2d:73:ec:75:de:eb:f4:24:49:
         42:8f:f0:5d:ac:93:91:0c:db:f8:98:f6:d7:ee:de:a4:f3:0e:
         fe:2c:19:71:a0:05:27:a2:7a:94:1e:11:ca:2f:13:b3:cd:8c:
         13:be:37:b7:45:45:aa:76:6e:17:e2:4f:ef:97:b2:6a:c9:da:
         f8:c6:de:a7:6d:a9:2d:5e:e9:98:1e:af:bc:ef:67:85:92:af:
         1c:09:8d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:54:16 2025 by rpki-client