Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/bc429191-75db-38f2-b3f6-58944bfff934.roa
File:                     bc429191-75db-38f2-b3f6-58944bfff934.roa (raw, json)
Hash identifier:          Y688UGKq9EUH4ZbvQrT6B5z1JzB/xhnqsmoAlp78Wfg=
Subject key identifier:   DE:02:8C:25:FD:E3:BF:A1:53:C5:5D:05:53:BC:1F:00:69:47:1C:66
Certificate issuer:       /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
Certificate serial:       010D0C9F43285849F71525D095D523E36E3FD860
Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/bc429191-75db-38f2-b3f6-58944bfff934.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     27523
IP address blocks:        23.175.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:25:d0:95:d5:23:e3:6e:3f:d8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=72870853-dcdd-462c-a85d-3e196a869d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6f:02:3d:20:aa:ca:f3:54:84:88:aa:a2:73:
                    91:d7:b6:c9:76:bb:17:13:e2:d1:97:06:c5:1a:7e:
                    f6:70:0a:d1:5a:18:31:26:bb:d5:39:cb:2f:11:2f:
                    8b:6d:41:0e:76:e7:fa:a7:8b:1c:b2:d4:4c:bf:fb:
                    94:07:da:16:42:41:38:1c:a6:a5:9a:16:67:0a:d8:
                    aa:f3:f5:c2:35:ed:50:fa:21:4d:9a:42:15:d3:b3:
                    68:06:8b:cb:18:cb:6c:3c:db:b2:cc:c2:cf:34:d1:
                    18:85:86:cc:a4:d6:8e:f5:38:76:44:5f:74:81:2e:
                    8b:64:48:0d:d8:12:ce:28:3f:ac:a2:89:3d:20:8f:
                    40:a6:0b:04:66:c6:ac:5d:09:da:31:45:0d:6e:83:
                    52:8a:40:2f:77:70:0f:fb:f1:8b:f8:9f:fa:90:06:
                    d2:e4:8d:bc:b7:a1:09:1a:7d:c4:9c:06:f2:db:46:
                    9a:81:74:5d:e8:95:1a:e5:c3:4f:38:e2:74:f0:3d:
                    79:be:71:13:3d:f6:ce:b6:bc:66:ee:c6:6c:a2:f2:
                    6d:0b:8b:06:5d:2e:73:e8:c9:4d:d1:e8:63:8c:86:
                    17:14:39:33:e2:30:48:64:17:cb:5a:33:9f:1d:73:
                    8a:1f:a9:ed:8d:39:d4:d4:9a:75:25:79:05:0c:e9:
                    b9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:02:8C:25:FD:E3:BF:A1:53:C5:5D:05:53:BC:1F:00:69:47:1C:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/bc429191-75db-38f2-b3f6-58944bfff934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:93:de:4c:52:4e:22:78:74:0b:5f:2f:89:73:84:3b:a4:e2:
         79:69:bf:73:00:a0:71:c7:95:60:16:9d:5c:84:eb:36:f9:6a:
         13:c8:92:65:11:b9:b5:aa:2a:c0:2b:6d:f3:e3:bd:f6:a9:b8:
         e8:66:3c:01:ea:01:7b:30:b8:aa:16:eb:59:ec:0d:82:e2:a1:
         c0:7d:99:8c:90:a0:a5:1e:b4:ed:f1:ab:26:83:04:56:3f:e7:
         63:e1:95:67:1b:5c:7a:cd:6e:16:85:31:6c:59:96:6f:27:07:
         7a:b7:be:fb:96:7d:b8:0a:df:e8:cd:dd:7c:07:eb:9e:a6:61:
         4b:54:9a:68:94:21:7c:d2:cd:1e:ff:e4:bf:17:89:0b:e5:2c:
         53:de:19:ef:74:94:01:98:77:73:84:43:b1:02:83:d7:f0:b7:
         52:cc:46:e1:99:03:d8:35:50:32:a5:be:92:6f:84:6d:1f:76:
         0d:cc:2d:ae:1a:d8:4f:a3:12:e3:cc:d0:a3:e4:c8:17:4a:16:
         be:cd:07:02:2e:25:9d:2b:22:7e:ca:be:9d:70:43:36:a5:c6:
         72:ae:a2:f2:82:6c:d5:6e:23:54:55:2f:b1:9d:a1:9c:ca:51:
         61:fd:e0:ae:70:a6:86:21:04:42:8f:f0:65:0d:2d:78:60:33:
         47:55:07:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:46 2025 by rpki-client