Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/82d04256-69e2-330e-8e16-321e8a747b4e.roa
File:                     82d04256-69e2-330e-8e16-321e8a747b4e.roa (raw, json)
Hash identifier:          fQDdqcn8idiEtwsE1/AijOaFWL+bWmDnLnswIip0CVE=
Subject key identifier:   AC:F9:4D:4F:96:B3:19:92:C5:B7:60:EF:C1:1F:C0:4F:95:D2:FC:3E
Certificate issuer:       /CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810
Certificate serial:       010D0C9F43285849912F2C952A10320ABC6BED1C
Authority key identifier: FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/82d04256-69e2-330e-8e16-321e8a747b4e.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     63213
IP address blocks:        23.83.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:2c:95:2a:10:32:0a:bc:6b:ed:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=9ab5ad4f-1bc4-48a1-824b-a3b714f4c260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ad:65:43:1d:82:77:ae:b7:70:d5:6d:7b:4c:
                    2f:45:8e:cb:91:c3:1d:db:ec:4a:4c:f5:39:d1:9d:
                    71:1f:79:0a:0a:54:2d:55:96:c4:a6:08:18:a4:54:
                    08:42:b5:b8:d8:1b:73:7d:d0:21:9b:64:fc:c1:14:
                    cb:7d:1f:72:87:8d:40:86:9e:ca:31:bb:81:cf:15:
                    88:cc:72:d8:6d:4d:f6:9e:ff:c4:93:b3:21:30:8f:
                    cc:8b:45:f9:14:a5:e8:bb:0e:68:4f:e1:0c:45:f1:
                    71:87:9b:98:10:28:c9:cf:22:fc:7b:55:11:04:58:
                    ae:3c:3c:0a:8e:bd:d0:4b:72:31:74:5f:cf:8c:60:
                    de:93:da:71:5e:2b:7e:38:e1:78:21:3e:fb:75:9b:
                    81:21:24:8f:cf:28:49:e2:de:00:c1:1f:ba:85:73:
                    16:27:44:77:ac:89:4c:3a:c1:f8:42:f7:46:0f:0f:
                    e7:91:03:a9:0f:3b:c0:a3:e3:b8:e8:8c:45:5a:62:
                    50:99:ec:23:d3:68:b5:88:cc:48:97:a4:9f:e2:8d:
                    fa:76:28:96:b8:a7:32:5c:84:6c:38:26:fb:fa:6a:
                    94:f5:20:a7:15:8f:92:b8:49:a6:c3:d5:6d:e7:d7:
                    9a:7b:14:e0:0a:aa:7e:6f:cb:4e:07:d3:28:6b:b6:
                    5b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F9:4D:4F:96:B3:19:92:C5:B7:60:EF:C1:1F:C0:4F:95:D2:FC:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/82d04256-69e2-330e-8e16-321e8a747b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl

            X509v3 Authority Key Identifier:
                keyid:FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.83.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:52:9d:b0:bb:d2:24:d8:60:de:45:ed:0c:77:c2:68:8b:cc:
         c4:49:db:1a:33:a3:62:5d:03:a6:8d:80:38:80:1f:17:28:b4:
         81:ab:c8:24:0e:61:cb:3e:db:8e:e7:8c:ea:7e:f6:cf:3e:e1:
         18:89:a1:d3:28:6b:fa:7d:15:92:34:cd:10:14:e7:c7:55:e2:
         73:e2:e8:10:d6:b1:f4:d3:04:ba:80:32:86:43:fd:ce:47:c6:
         fc:5e:dd:94:ef:0a:e0:82:71:3e:c8:09:1b:f7:58:24:29:5c:
         41:ba:3f:40:70:4f:62:3d:f1:99:92:59:db:fe:52:7c:c0:f9:
         9d:2c:c3:a7:a1:87:65:cb:f8:79:20:59:fd:2f:a7:5c:10:be:
         34:52:11:e6:c8:e8:66:54:b1:b1:54:83:92:83:84:52:db:f8:
         a3:72:ea:8f:53:07:b5:5c:0b:b1:a0:8d:ce:69:76:46:44:28:
         7b:ee:53:c6:88:99:5e:87:5c:8c:74:ed:8a:97:9d:27:5a:66:
         fe:78:78:f1:17:d9:72:38:cd:f6:de:de:a2:f1:5b:83:2d:b3:
         58:bd:84:f0:7a:f7:1c:81:a9:71:4d:d3:0f:4a:a0:43:6e:c5:
         72:ca:60:d0:61:c6:12:cb:d7:37:e1:0e:80:97:31:84:1c:2e:
         52:3f:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:23:22 2025 by rpki-client