Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/a9422bc5-e3dc-3d3d-af95-2c46e7106556.roa
File:                     a9422bc5-e3dc-3d3d-af95-2c46e7106556.roa (raw, json)
Hash identifier:          5HWSHj4Pdvy8Ds9rHafA7XJ2jvghyGgouCBjgjaJscQ=
Subject key identifier:   1A:CD:7C:D6:6A:71:96:C5:DB:64:76:5E:F5:0B:5C:88:B5:B3:20:83
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F43285849F9DFDCA3247DF78D24F14D08
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/a9422bc5-e3dc-3d3d-af95-2c46e7106556.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     62563
IP address blocks:        23.174.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:dc:a3:24:7d:f7:8d:24:f1:4d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=c2673d0f-5779-4ab0-90b5-663f619fdf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1a:ad:ca:16:13:a8:28:9b:b3:29:f2:96:b5:
                    b8:bb:86:ea:cc:30:4c:f1:d9:27:cd:0e:73:8b:32:
                    ed:a9:f0:cd:fa:ad:ad:70:43:2b:50:b0:ef:c0:94:
                    9e:8b:83:d3:fb:72:fe:fc:39:23:18:88:d3:04:73:
                    6d:87:e8:36:bc:5c:56:55:a6:4c:95:2e:d9:b7:94:
                    59:96:bf:6f:11:59:18:d4:e5:b1:a4:ef:04:87:f8:
                    2a:5a:38:a5:47:ba:7c:c9:0d:0f:6c:de:bf:6b:d8:
                    6a:40:1a:2b:62:52:e2:29:23:e4:d1:a7:01:b2:e1:
                    ec:a3:f7:a2:61:9a:f4:78:a0:3f:c2:25:8f:21:6c:
                    79:6f:59:15:eb:5e:3c:6f:a5:ef:eb:0f:0e:7c:66:
                    2e:a0:9b:1c:ce:e2:95:a8:69:69:38:03:5a:b3:4c:
                    12:aa:84:a1:3e:59:01:97:d6:1f:00:79:a2:ba:42:
                    1a:ba:63:56:a1:91:ae:b3:4d:03:f7:39:15:e3:92:
                    95:cc:7a:c5:1b:3f:e0:a6:c6:5b:07:b6:c5:bf:7c:
                    15:eb:7f:39:90:6b:57:92:8c:ba:b8:f2:5f:ef:f5:
                    9c:f2:3a:0c:be:fd:7b:ef:50:94:31:cc:4e:f6:2b:
                    c7:8e:39:19:75:db:b1:86:b5:15:9d:95:fe:9c:89:
                    68:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CD:7C:D6:6A:71:96:C5:DB:64:76:5E:F5:0B:5C:88:B5:B3:20:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/a9422bc5-e3dc-3d3d-af95-2c46e7106556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c7:62:c6:6b:72:50:3e:b3:69:4a:76:48:ab:8b:f3:99:db:
         40:54:5e:88:7d:0b:dc:03:4b:37:a4:7a:2e:df:55:85:4b:cb:
         38:11:54:d8:4b:93:71:80:4e:1a:3d:a2:34:4f:85:8c:fe:7d:
         ce:17:7e:26:17:58:03:4c:89:f9:ff:5d:29:d2:5c:c8:93:b0:
         0d:64:00:1e:f2:2d:45:b3:e8:56:01:4b:27:a7:d0:2b:76:ea:
         48:3d:32:e5:27:af:55:74:b5:0f:72:b0:da:14:2d:66:60:44:
         2c:02:a0:d2:87:e3:98:92:54:f7:70:ba:6b:cd:85:09:d3:6a:
         f2:63:4b:af:dd:40:26:35:3b:f0:47:ae:ed:01:d9:57:b3:94:
         6b:65:b4:04:42:af:5c:4d:64:e2:5d:96:0d:1e:4a:cc:d1:97:
         50:27:bc:7a:fe:04:83:e8:b6:b4:63:a4:89:ad:ca:92:b3:10:
         a3:9e:d4:d1:e3:c7:6b:cf:79:09:96:c4:1e:11:fd:a5:e4:3b:
         31:47:87:31:f5:87:9c:4a:f5:ef:58:41:a6:0e:3a:9c:26:2a:
         c4:97:fb:6e:f7:8b:97:5a:e7:8c:10:47:30:73:97:dc:ec:54:
         c2:03:7d:10:59:90:ea:53:d2:08:b6:50:b9:74:b0:0e:fc:64:
         69:e2:19:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:11:00 2025 by rpki-client