Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/6e1d6edc-5115-3bb2-9391-33f0124d055c.roa
File:                     6e1d6edc-5115-3bb2-9391-33f0124d055c.roa (raw, json)
Hash identifier:          yS6LvV9BbkVdxr8a4XXlV3lOCmjgAztkCaEiGcQeYco=
Subject key identifier:   41:16:F4:89:25:EE:F7:05:85:EE:4E:F5:5F:F7:D1:DC:AF:8C:A5:55
Certificate issuer:       /CN=480e68d2-5883-4233-9f17-992a2ca71e2b
Certificate serial:       010D0C9F43285849EA852043020B36884F0CE100
Authority key identifier: 26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/6e1d6edc-5115-3bb2-9391-33f0124d055c.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     43737
IP address blocks:        23.92.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:20:43:02:0b:36:88:4f:0c:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480e68d2-5883-4233-9f17-992a2ca71e2b
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=2b97f885-ce59-41cd-b955-fd9b7b1b1680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f6:af:85:69:5a:83:1a:42:eb:d6:68:06:09:
                    9c:3a:0d:ff:a7:d7:c2:90:5d:9d:a2:a0:c7:e8:2e:
                    26:25:61:69:01:42:91:b4:dd:9b:a3:98:8e:43:67:
                    88:35:1e:37:09:ae:ae:4f:83:c7:49:17:f0:e7:75:
                    e5:99:fe:9a:c1:d4:36:d5:1c:80:57:48:f8:c9:ee:
                    15:81:47:77:64:93:c2:a4:ba:aa:5e:62:62:bd:1d:
                    09:72:48:ba:a1:e3:6d:e8:92:c7:eb:27:61:be:c2:
                    d9:ba:3c:53:fb:ac:be:45:0a:71:0a:3d:28:9f:b9:
                    ca:9f:b9:62:b1:64:c3:48:9f:f5:de:0b:25:8c:b0:
                    54:38:d2:f0:5c:04:42:1f:10:57:03:c1:78:a0:a0:
                    44:03:8a:86:6d:19:e5:ca:9c:e3:ff:c1:49:e0:c1:
                    01:5d:94:62:f9:21:eb:16:01:61:e3:e9:99:0e:ab:
                    8a:61:5f:d3:c8:83:71:08:b8:e0:fa:40:5a:c1:a5:
                    36:12:72:8a:ee:0f:7f:01:fb:8f:a0:26:05:4f:ce:
                    95:f7:c1:6c:14:32:bb:f6:8c:86:37:92:7b:93:59:
                    22:de:33:6a:b0:a1:7c:be:36:de:cd:82:89:04:40:
                    54:60:b1:a9:c9:40:47:bc:84:c2:09:8d:f2:96:95:
                    48:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:16:F4:89:25:EE:F7:05:85:EE:4E:F5:5F:F7:D1:DC:AF:8C:A5:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/6e1d6edc-5115-3bb2-9391-33f0124d055c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl

            X509v3 Authority Key Identifier:
                keyid:26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:e9:2b:61:42:26:5e:e3:7a:bf:32:17:1e:b3:4f:bc:bf:7a:
         61:e7:19:18:92:eb:bc:b7:81:4f:c9:41:7f:ed:4b:b7:87:d8:
         8b:b7:78:00:68:74:ba:89:a7:12:eb:3f:62:41:1f:a1:62:08:
         65:94:73:ef:ff:c9:89:a6:6b:7b:9a:45:19:b1:69:04:be:71:
         ab:53:ff:f8:c8:39:2f:0b:cc:fd:e0:b9:cf:c2:37:8b:f9:2a:
         8f:6d:35:07:d5:07:a9:3f:cf:07:bf:a4:f0:30:c9:42:8d:cd:
         ab:4b:aa:d6:2c:bd:d9:a0:c2:43:b4:ba:8f:3e:97:c8:d1:f8:
         9c:c1:83:95:e6:92:ab:e5:6b:0a:0f:c5:1c:3c:3c:97:b6:be:
         13:fb:ba:69:2a:49:70:01:4a:7c:4d:50:be:01:79:c8:5b:39:
         ee:38:37:bc:b5:21:93:a5:a9:26:f9:55:0d:8a:9a:d0:bc:57:
         88:54:f3:89:86:05:2d:0b:00:f9:13:33:bb:d3:3c:85:cc:aa:
         b7:e1:b2:c6:be:bc:a2:23:66:7f:4e:d0:68:df:2d:3c:21:2d:
         7e:91:08:4a:87:6f:95:41:05:cb:92:5a:5c:b3:14:fa:9d:4b:
         b2:2f:e0:1d:0f:db:e2:a9:11:9e:40:76:52:91:95:37:ee:7a:
         0a:f8:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:32:11 2025 by rpki-client