Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c6518211-2c67-39fd-87e2-1efd39c4c9a1.roa
File:                     c6518211-2c67-39fd-87e2-1efd39c4c9a1.roa (raw, json)
Hash identifier:          nHRc0DMgItyrEY2aqd+Kb2T6zsxCxYauKuzbI5tVZKs=
Subject key identifier:   B8:32:A9:A6:EC:6B:01:1B:AE:8E:A4:64:BB:C8:9E:9C:64:8C:5F:48
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285849CE9A4CAEC7E3D9C00BC198E0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c6518211-2c67-39fd-87e2-1efd39c4c9a1.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     26114
IP address blocks:        8.46.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:4c:ae:c7:e3:d9:c0:0b:c1:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=97e64699-7c38-4da1-8d46-161887fac15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a4:24:7a:b5:af:ee:fc:11:ec:76:92:c1:e1:
                    57:d6:e9:50:1b:97:7e:d9:79:5f:8c:e9:dc:7f:ba:
                    23:f0:c9:90:2a:c6:76:8f:3d:1c:3c:ae:08:51:b4:
                    df:b2:20:c7:00:c1:cf:0f:8a:f6:dc:2e:76:29:e6:
                    6c:2b:fb:f2:c9:8d:f4:b6:b6:e4:be:01:da:f7:8a:
                    e6:b2:3e:7b:c8:c6:fc:82:7e:1b:dd:88:e1:20:88:
                    82:d3:ab:85:1a:68:20:a7:e5:b9:08:26:45:70:e4:
                    31:05:4e:47:b6:19:d6:ff:03:71:1a:58:80:76:f4:
                    51:16:93:ee:8c:52:a4:c7:57:ba:a6:b5:7e:3d:fb:
                    61:80:67:41:7d:a8:62:cb:e7:bd:6c:af:b8:22:15:
                    79:10:83:23:9c:db:80:82:d6:fd:8c:04:52:86:72:
                    f9:00:ae:07:87:fb:7e:6e:f7:99:4e:29:91:ff:cb:
                    6e:a8:b9:25:ce:10:5a:8d:80:af:40:95:b0:e2:a7:
                    e5:34:21:6b:02:44:cc:be:29:2d:2a:68:41:b3:77:
                    10:05:b1:db:de:43:91:7f:0c:a9:aa:41:27:a1:35:
                    c6:7e:3b:67:ed:95:07:ed:bd:24:b8:5a:d1:bc:c0:
                    0e:1c:a7:a2:cd:5f:5e:e3:9d:62:3f:ce:83:90:35:
                    a4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:32:A9:A6:EC:6B:01:1B:AE:8E:A4:64:BB:C8:9E:9C:64:8C:5F:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c6518211-2c67-39fd-87e2-1efd39c4c9a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.46.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:3f:a0:cd:0f:bd:29:c5:86:54:3d:8e:e0:d1:23:aa:7a:76:
         72:93:4a:68:0d:d2:ef:93:28:15:29:55:8a:84:bb:20:ae:dd:
         85:12:15:b9:cd:ab:42:26:0c:be:93:3e:69:1f:fd:92:84:a4:
         bc:7f:cd:13:8d:f9:95:bb:a9:ef:9a:60:92:54:c3:f6:be:0d:
         5f:ff:eb:45:ed:b8:cb:99:c4:6e:2e:85:66:45:b8:d2:2d:8d:
         96:4e:1c:91:4b:79:88:ea:17:04:fb:d2:ee:cc:45:e2:bd:fe:
         42:8d:b9:92:8f:01:f6:85:5d:4b:53:26:f3:25:e0:01:57:95:
         39:20:08:d1:f4:de:e4:98:b5:1a:ff:8a:cb:c7:81:93:39:84:
         56:d6:91:91:48:01:2b:df:6c:82:19:5e:e9:5e:a4:66:a2:03:
         01:e6:d4:75:f8:0d:c5:32:79:e5:ac:1e:a0:5d:f4:db:22:a8:
         d4:55:b1:06:27:0f:1e:ad:7e:3b:78:b0:c9:41:7d:7c:fe:2e:
         85:45:16:07:08:2a:6a:38:dc:fa:9d:f9:bc:fd:67:ef:cf:49:
         58:57:0a:fc:1a:90:18:13:cd:49:35:87:ae:43:80:f7:f3:2b:
         88:57:a0:f7:81:88:a5:f1:60:48:3d:60:e1:f3:12:e3:9e:bd:
         8b:34:15:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:33:50 2025 by rpki-client