Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/71475637-acbb-3d0e-8a47-8d0d358bddfa.roa
File:                     71475637-acbb-3d0e-8a47-8d0d358bddfa.roa (raw, json)
Hash identifier:          8WQxcSu9UTzvSpbKBVPNnvzryyJZz090Uf5SRza7T7M=
Subject key identifier:   35:13:9A:CA:08:7D:33:CA:02:04:AB:5A:8F:B3:98:6C:D8:39:0C:B7
Certificate issuer:       /CN=7981ca6b-952a-4908-a513-7b300be24271
Certificate serial:       010D0C9F4328584A23C0032095CA89AAE0098E40
Authority key identifier: 89:36:30:76:DB:B9:65:1A:6F:C1:5F:84:DD:9D:29:7C:7A:0D:D4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/71475637-acbb-3d0e-8a47-8d0d358bddfa.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     886
IP address blocks:        23.136.248.0/24 maxlen: 24
                          2602:fb62::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:03:20:95:ca:89:aa:e0:09:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7981ca6b-952a-4908-a513-7b300be24271
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=c651e2a6-6730-4bf6-8155-ebc0966b60f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:46:f4:63:42:c5:12:3f:ac:d0:d6:b1:86:ed:
                    29:a4:28:cf:fb:ce:9b:74:3e:de:15:ab:e6:14:6f:
                    0b:27:2e:c9:e3:cf:a2:29:d9:08:7e:bf:cb:24:05:
                    ca:1a:0b:f0:31:fd:05:f4:8b:d7:6f:78:fc:bd:44:
                    ac:d8:af:d4:55:f8:a9:38:b4:34:d4:37:2c:c9:fb:
                    18:50:53:61:34:4b:c5:10:bb:dc:7f:7c:eb:87:e6:
                    ef:0b:3e:de:a5:71:64:b7:68:c4:d6:92:d8:9c:a1:
                    cb:90:55:73:84:35:30:33:40:16:8c:33:9c:4f:63:
                    d7:e1:c9:e7:f5:12:96:f1:86:dd:f4:0a:31:1b:ff:
                    77:57:37:0c:b5:dd:d0:51:85:38:74:ea:e6:03:24:
                    db:98:b4:de:f1:72:3f:0a:61:8f:18:89:67:7d:16:
                    43:e0:e0:a9:44:ac:1f:d8:a3:ba:cd:76:f4:99:30:
                    38:35:23:04:5d:4e:b6:8e:b3:d1:d2:e8:36:d3:3d:
                    70:18:a0:ff:8a:e0:74:84:81:d1:1c:5c:6c:07:c3:
                    dc:70:bb:6a:53:1d:34:1a:96:11:c9:43:6a:e9:42:
                    d7:73:47:37:0b:8c:c8:e5:9e:7f:06:85:d8:06:f5:
                    16:fc:dd:38:c2:cd:42:66:5c:bb:6e:98:16:f2:f3:
                    73:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:13:9A:CA:08:7D:33:CA:02:04:AB:5A:8F:B3:98:6C:D8:39:0C:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/71475637-acbb-3d0e-8a47-8d0d358bddfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.crl

            X509v3 Authority Key Identifier:
                keyid:89:36:30:76:DB:B9:65:1A:6F:C1:5F:84:DD:9D:29:7C:7A:0D:D4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.248.0/24
                IPv6:
                  2602:fb62::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4d:55:12:66:1e:3c:e7:1b:ce:5d:56:42:a0:99:18:d1:5f:
         01:3f:8c:c0:48:30:05:ea:d3:72:df:1d:0b:2f:5a:0b:52:2c:
         c2:e8:f7:da:26:b9:77:17:86:b5:2c:dd:6d:a2:3b:2b:83:05:
         ba:17:d8:ba:3c:1b:a3:41:d9:cf:41:99:25:24:f9:3c:9b:7e:
         a0:15:2b:0f:1e:47:73:46:8f:0b:30:c5:3a:2d:f0:b1:b7:cc:
         00:5b:a9:01:ff:17:e7:12:6c:9b:15:90:e2:c6:d2:d9:6f:2a:
         19:34:97:cf:a8:0b:de:86:ff:ab:ee:a1:47:90:a3:75:2e:51:
         2b:32:80:42:75:43:9f:28:a4:d5:93:4f:10:3f:78:2f:b4:57:
         53:80:57:10:eb:a8:7d:53:38:da:a8:f7:ba:a3:d4:6d:07:45:
         fb:e2:33:0a:6e:3f:29:44:31:4e:5c:84:ee:a3:74:6b:82:4a:
         ce:f4:f7:4b:6c:bf:50:0d:d1:4b:58:42:33:94:59:a0:81:81:
         12:43:a8:8a:80:dd:ec:7b:8d:88:ab:d2:6b:1f:6c:6d:9a:2e:
         dc:39:77:12:d7:1d:13:37:cf:32:4d:53:89:6e:c8:d1:b4:33:
         1b:dc:45:3d:20:3d:5e:4e:85:5a:fa:95:05:1d:90:81:74:8e:
         2d:71:c3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:46:46 2025 by rpki-client