Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/1ff7a22c-c2b6-33c8-a22b-b1de73c41fe6.roa
File:                     1ff7a22c-c2b6-33c8-a22b-b1de73c41fe6.roa (raw, json)
Hash identifier:          L4XICa0PJxe4bkzE9MQOkShM0+z7sfR1y5kU2SUrCyA=
Subject key identifier:   CD:87:E1:D0:24:9C:7B:82:49:C1:2E:68:AF:8E:6D:BD:18:E8:C2:4F
Certificate issuer:       /CN=18489a14-d237-40bd-ae7a-25fe7c7561ef
Certificate serial:       010D0C9F4328584A2EEAC0282E55C4F7D70D88C0
Authority key identifier: BB:7B:55:BC:B8:3E:D2:78:FE:4F:27:20:25:0B:3F:8C:F1:BA:07:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/1ff7a22c-c2b6-33c8-a22b-b1de73c41fe6.roa
Signing time:             Sat 14 Jun 2025 01:00:49 +0000
ROA not before:           Sat 14 Jun 2025 01:00:49 +0000
ROA not after:            Fri 12 Sep 2025 01:00:49 +0000
asID:                     54256
IP address blocks:        23.153.168.0/24 maxlen: 24
                          198.252.222.0/24 maxlen: 24
                          2602:2d9::/32 maxlen: 32
                          2602:2d9::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/18489a14-d237-40bd-ae7a-25fe7c7561ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/18489a14-d237-40bd-ae7a-25fe7c7561ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:ea:c0:28:2e:55:c4:f7:d7:0d:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18489a14-d237-40bd-ae7a-25fe7c7561ef
        Validity
            Not Before: Jun 14 01:00:49 2025 GMT
            Not After : Sep 12 01:00:49 2025 GMT
        Subject: CN=2a453ca5-24de-4940-8e9c-f7e52c157f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:c7:a4:2d:8f:0c:56:72:44:3c:a5:02:40:
                    ef:06:b2:74:68:a3:3f:a7:0d:bf:50:d4:3d:59:72:
                    94:90:d6:24:01:ab:2f:5b:a2:79:30:7b:e3:da:10:
                    4a:ae:6e:9e:60:14:20:f0:68:48:8d:04:3a:5f:5f:
                    25:17:c6:44:d4:b2:3e:03:1a:d2:58:18:bb:5d:a0:
                    29:bc:6a:3c:6d:80:d1:02:dd:c4:4d:dc:42:82:53:
                    96:f5:19:38:34:62:0a:ae:73:bc:1e:56:27:fb:9e:
                    ad:f3:a7:09:d9:d1:f4:05:16:40:34:8e:e8:00:dc:
                    24:98:59:f2:9e:75:95:31:f2:c4:61:81:96:89:39:
                    7e:c8:9a:2c:a8:a0:4e:95:d4:11:aa:f8:0b:3c:8a:
                    c1:f0:f8:c5:86:6e:7c:f6:96:ad:7d:e0:c2:17:0c:
                    76:53:be:cb:bd:1e:65:51:94:ea:0e:93:94:34:78:
                    91:03:c2:99:c6:30:fd:00:68:0c:74:18:d8:6f:b8:
                    41:73:22:d1:7b:f8:2c:0b:4f:60:b7:4a:41:ae:9b:
                    22:56:dc:f4:cf:36:d0:b8:90:02:31:82:eb:20:e2:
                    c3:a5:b2:af:15:f9:61:13:98:b8:5c:c2:8f:74:59:
                    00:61:02:f5:19:c6:ec:4a:2f:f7:9c:0a:39:77:ec:
                    00:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:87:E1:D0:24:9C:7B:82:49:C1:2E:68:AF:8E:6D:BD:18:E8:C2:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/1ff7a22c-c2b6-33c8-a22b-b1de73c41fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/18489a14-d237-40bd-ae7a-25fe7c7561ef.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:55:BC:B8:3E:D2:78:FE:4F:27:20:25:0B:3F:8C:F1:BA:07:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.168.0/24
                  198.252.222.0/24
                IPv6:
                  2602:2d9::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f6:ff:98:58:18:fe:a4:13:ba:25:c3:28:0e:25:45:89:c9:
         35:72:65:6c:d5:ce:72:cc:b5:81:ef:27:8e:0b:f2:ce:13:a5:
         10:27:1f:78:e5:01:3e:f4:bb:8a:a2:05:8c:b7:6f:22:6a:ed:
         b0:ca:37:fc:59:af:e3:b8:94:bb:4e:27:6f:ee:53:79:5b:9d:
         07:c7:71:76:69:d7:ce:a9:98:3e:79:9e:db:1a:8e:ac:36:3f:
         93:ee:97:4d:19:e8:b6:6c:9a:cb:08:5f:15:74:84:68:53:26:
         5e:f3:83:eb:2f:a8:b0:b7:ec:f4:7b:51:eb:ec:58:14:1c:48:
         8a:9e:a0:2c:2c:b4:5d:ca:8c:8a:bb:52:1d:9f:ad:4b:56:7e:
         6e:54:b0:93:a0:b4:98:2e:1f:91:a4:65:18:42:79:a5:9d:04:
         65:90:21:cf:4c:e4:54:69:bc:3f:35:a9:42:36:c0:f3:fd:bb:
         32:3a:2b:6f:5f:86:77:bd:aa:b6:5b:2e:cb:3e:36:d9:ea:79:
         ac:57:0d:4d:0d:be:d0:c1:5e:70:d3:fc:29:5e:b6:6d:79:bb:
         8e:ee:1d:44:e8:6d:87:a4:3d:08:e7:ac:06:6d:76:b0:8d:75:
         cd:61:21:44:1b:7e:12:13:d6:95:43:c5:72:7a:79:85:58:cc:
         2b:48:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:20:46 2025 by rpki-client