Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/b765a089-28a9-359f-bb37-aaa584ca4e9a.roa
File:                     b765a089-28a9-359f-bb37-aaa584ca4e9a.roa (raw, json)
Hash identifier:          yUL8f+Pi7XA030ArXwiG4YXjbGhh0kO/9voqaHfx8ys=
Subject key identifier:   F3:69:8C:71:6A:FD:89:EC:01:F6:8A:C9:B8:09:73:4F:EB:A7:35:57
Certificate issuer:       /CN=5144f613-8a75-4802-bb71-45eaf8220874
Certificate serial:       010D0C9F43285849E2253AF1E121E45D89CA8300
Authority key identifier: 16:91:34:03:FE:9B:AF:66:4A:F1:B8:F0:CA:38:03:A4:B9:C4:C2:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/b765a089-28a9-359f-bb37-aaa584ca4e9a.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     8796
IP address blocks:        23.169.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/5144f613-8a75-4802-bb71-45eaf8220874.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/5144f613-8a75-4802-bb71-45eaf8220874.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:3a:f1:e1:21:e4:5d:89:ca:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5144f613-8a75-4802-bb71-45eaf8220874
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=ccaf1a93-9f44-4b9f-85ff-a58cd31841f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:76:86:b5:9d:23:11:83:ad:fc:57:43:7f:
                    8a:50:25:fa:fc:eb:30:0c:db:33:fc:25:34:14:b6:
                    e9:d0:9f:72:ec:1a:58:39:b4:0f:1c:f0:a3:73:0b:
                    bb:fa:63:cf:90:18:3f:ae:66:91:62:a2:a3:65:b0:
                    d2:ff:5c:1a:e7:51:7b:92:0a:b8:33:a3:28:d1:97:
                    b1:bf:26:3d:a2:ea:19:ab:ca:70:5a:9f:1c:7c:50:
                    fd:c8:49:74:55:24:b1:90:13:56:aa:09:cc:99:5a:
                    b0:36:37:9b:a0:9d:6e:13:84:df:4e:01:82:b9:2b:
                    3c:63:10:ee:2a:f3:c0:0a:83:f9:b7:0d:48:8d:33:
                    13:45:22:06:53:cd:0f:9e:ac:34:59:58:dc:83:ad:
                    7f:71:4b:69:29:f2:70:0d:7f:bf:7a:7b:b0:9d:b1:
                    50:54:70:7a:e1:29:5a:94:ba:4d:73:61:0f:1f:cf:
                    9d:a4:38:2c:43:6e:de:bc:90:81:21:aa:86:e5:d5:
                    85:87:4b:25:5b:15:2a:27:08:23:ad:18:23:34:b8:
                    6d:db:b7:1e:35:f9:89:00:f5:af:58:bf:30:5f:81:
                    a3:bb:c0:cb:89:76:0a:83:f4:79:eb:74:69:d7:51:
                    56:55:55:59:92:fd:32:4b:d5:a8:de:60:df:fd:7b:
                    f0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:69:8C:71:6A:FD:89:EC:01:F6:8A:C9:B8:09:73:4F:EB:A7:35:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/b765a089-28a9-359f-bb37-aaa584ca4e9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/5144f613-8a75-4802-bb71-45eaf8220874.crl

            X509v3 Authority Key Identifier:
                keyid:16:91:34:03:FE:9B:AF:66:4A:F1:B8:F0:CA:38:03:A4:B9:C4:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:bc:2a:7f:a3:3f:17:71:d9:5e:e2:32:1c:15:88:94:90:2e:
         a2:f9:94:15:37:fd:4f:a4:11:ab:8f:fe:63:34:99:56:a0:3d:
         db:12:ae:cd:58:1f:25:f5:48:96:44:c7:c8:7f:2d:c9:c6:15:
         a9:46:67:ab:88:fa:f1:80:fa:28:ff:2f:33:22:90:69:5f:e8:
         26:d6:b4:f4:8a:9b:68:fa:fb:89:45:61:dd:fe:70:80:4b:52:
         fa:40:15:78:27:1c:81:01:97:31:19:89:a7:61:ed:0c:c0:c7:
         83:35:b4:e0:c8:9f:e5:6c:80:b2:f2:32:34:a1:d0:1a:8b:10:
         51:ad:c0:81:81:2d:7e:ce:ef:d6:2d:07:42:1b:6e:2e:b2:71:
         7e:2b:5f:ac:ef:7f:8f:3d:87:b9:33:04:71:d1:4d:89:52:e2:
         21:c7:e4:fb:b7:70:3c:d6:f9:43:35:d4:e5:e4:2c:5d:94:d0:
         68:86:38:d5:e4:41:ff:38:8c:06:b7:c5:7e:27:2a:15:05:a5:
         1f:e3:8b:69:6b:f0:0b:4e:6c:e7:89:64:34:f7:6c:07:be:4f:
         9d:e9:6b:9e:51:bf:45:36:2c:14:bd:42:bd:22:d9:95:7d:06:
         1b:ba:d9:89:ad:3b:05:9a:ee:a3:4e:bb:4e:ac:68:f7:22:bb:
         ef:ab:f5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 11:40:55 2025 by rpki-client