Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b2d29925-e4d4-3315-93d6-9b5b9e4a6884.roa
File:                     b2d29925-e4d4-3315-93d6-9b5b9e4a6884.roa (raw, json)
Hash identifier:          SSsHl7qat6XkmNgIOlfHsLTSaJOeDAYRofWGbMKX8zc=
Subject key identifier:   88:52:D0:5F:95:43:0B:B4:E2:37:E4:B5:58:37:DF:EA:10:E1:73:7F
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F43285849DF5A5BB7FF20C4A86D1FEFB0
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b2d29925-e4d4-3315-93d6-9b5b9e4a6884.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     62707
IP address blocks:        23.166.226.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:5b:b7:ff:20:c4:a8:6d:1f:ef:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=ea3111eb-d68e-4871-b72f-59b995964268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f7:0b:27:95:ca:0f:0f:26:07:03:f9:a1:6d:
                    0a:8c:1e:cf:09:55:80:c0:01:eb:e0:4b:f7:d5:68:
                    49:db:9b:61:e1:96:8d:8a:99:42:32:35:09:ff:9e:
                    17:76:52:69:6a:20:f0:11:8c:1b:89:ec:c9:16:19:
                    64:56:dc:f2:77:0e:ee:1c:52:b3:2c:b0:40:2d:0f:
                    f2:c4:9d:42:67:d1:e0:9a:5e:ba:79:61:f4:44:e2:
                    96:1a:a6:ef:05:c4:67:d2:7b:4b:d1:ac:3b:39:b8:
                    f4:35:1e:ac:c8:91:24:a2:fd:9c:52:85:64:5f:af:
                    f2:2b:d6:fb:45:ee:91:82:5b:e1:d6:e3:ba:24:71:
                    78:a2:1e:8c:83:5b:64:dc:86:8f:11:6c:e4:f4:c6:
                    7b:65:84:6c:5f:43:f2:ef:5a:57:e4:cf:7b:94:c5:
                    b3:30:a7:38:32:44:ac:9f:13:01:7a:52:b6:aa:89:
                    30:66:aa:4e:01:5c:5e:38:f9:14:32:9f:ff:6f:ff:
                    24:9c:8b:db:3e:60:94:41:fd:04:69:92:81:66:db:
                    09:00:1d:16:af:d3:94:e2:99:1b:48:a8:b7:65:c9:
                    6a:ea:53:7c:80:53:07:68:85:99:a5:91:cb:1d:bd:
                    04:2b:05:c6:f0:e6:aa:37:13:f5:2c:c1:56:96:31:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:52:D0:5F:95:43:0B:B4:E2:37:E4:B5:58:37:DF:EA:10:E1:73:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b2d29925-e4d4-3315-93d6-9b5b9e4a6884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:4a:bc:3e:50:12:bc:44:b7:e5:b9:85:94:84:ae:a4:f9:da:
         21:60:14:74:21:94:f8:e4:56:e5:9d:a9:ce:5a:8a:25:31:7f:
         4f:60:e4:2f:f9:13:41:6f:fa:97:93:76:cf:de:14:e7:cd:61:
         a3:29:b2:f5:a3:06:d6:45:f9:03:14:60:95:46:25:f2:de:9b:
         61:e1:5e:92:e9:55:e3:d4:9f:c1:0a:42:c5:69:dd:19:51:52:
         0d:27:a9:cb:b8:3b:56:a1:29:ee:81:a8:09:ad:73:d3:78:f8:
         84:46:38:08:b9:e7:4e:db:d8:fa:48:eb:a0:f6:67:f9:da:c7:
         60:f8:dc:45:ea:e0:88:83:18:0b:c7:85:ac:63:17:58:b5:0e:
         a2:39:a2:fa:98:fc:9e:ad:61:fa:77:d2:7f:33:1a:b5:29:fe:
         a3:64:51:93:73:8d:3c:ff:db:e3:c2:d4:56:9a:1d:a2:4a:e2:
         b4:10:ab:17:3a:a2:69:35:77:74:32:86:2c:18:37:29:dd:15:
         77:6c:57:76:3f:82:c2:cd:c3:0a:b5:46:ce:bb:7e:fe:4a:ac:
         3a:d2:e0:d1:87:8a:93:51:47:95:3e:63:93:2c:df:02:09:81:
         be:30:ae:f7:81:c7:be:86:8b:f5:9d:84:6c:c9:f1:84:b9:80:
         51:f7:b1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:03:27 2025 by rpki-client