Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/deee81d6-11da-3c28-bb95-d345b9d843bd.roa
File:                     deee81d6-11da-3c28-bb95-d345b9d843bd.roa (raw, json)
Hash identifier:          USiIRLu+nct1mslVbvomCfhKgRwr3h8lNm1gqUepYo4=
Subject key identifier:   E2:F7:A4:81:7A:2E:D9:CD:5A:8E:91:07:A6:1B:15:41:BC:DF:F3:C9
Certificate issuer:       /CN=55b99675-96ed-4747-a93e-2c02e6c365da
Certificate serial:       010D0C9F43285849E4EFBAA2417EB671F78DA540
Authority key identifier: 87:6D:C8:57:26:48:90:8E:07:74:3C:AB:3A:95:1A:6F:F0:CF:73:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/deee81d6-11da-3c28-bb95-d345b9d843bd.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     46980
IP address blocks:        23.163.16.0/24 maxlen: 24
                          2602:fd20::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/55b99675-96ed-4747-a93e-2c02e6c365da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/55b99675-96ed-4747-a93e-2c02e6c365da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:ba:a2:41:7e:b6:71:f7:8d:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b99675-96ed-4747-a93e-2c02e6c365da
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=aca97357-c846-4413-8aeb-c4c3179ba0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:66:51:ea:1f:17:56:56:b8:c6:23:57:c8:f7:
                    e7:ee:fb:6a:86:46:8d:a5:95:58:07:0e:14:8d:e1:
                    5d:ca:b5:ae:b7:88:06:2a:83:07:4b:b8:53:05:c8:
                    86:8f:99:43:80:4e:1e:33:ff:f8:b9:17:98:e6:c8:
                    af:4f:e5:a4:e4:d0:56:50:fa:e5:bb:16:91:9a:96:
                    b9:d4:fd:25:29:22:22:34:1f:ac:9e:17:88:7c:ba:
                    da:b6:1d:b4:20:9b:28:f0:ce:4b:26:8f:e0:01:61:
                    12:0d:7d:42:38:82:0d:c8:bb:c1:e5:93:13:3d:b7:
                    6a:da:0b:77:74:9d:7b:52:16:e3:17:d8:4f:6e:f3:
                    29:8a:ab:0b:ea:75:6f:ee:b0:8a:81:22:96:68:73:
                    72:3e:ba:9c:6b:0e:de:5a:41:42:4b:2e:74:cc:ba:
                    60:52:13:fb:e0:80:ce:2f:25:c9:57:79:e6:85:bc:
                    28:d9:49:43:ae:dd:47:41:64:97:84:00:36:d4:6f:
                    67:68:5f:db:c0:0f:11:3d:0e:6b:12:16:a0:ec:9f:
                    b7:8e:03:2f:20:1b:af:79:1d:f5:c3:c4:9c:5d:81:
                    85:c9:56:5c:90:a4:56:1c:ac:31:81:06:17:e9:72:
                    d3:ac:7d:f4:8f:fa:b8:b2:04:92:3b:84:34:7f:b8:
                    f7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F7:A4:81:7A:2E:D9:CD:5A:8E:91:07:A6:1B:15:41:BC:DF:F3:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/deee81d6-11da-3c28-bb95-d345b9d843bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/55b99675-96ed-4747-a93e-2c02e6c365da.crl

            X509v3 Authority Key Identifier:
                keyid:87:6D:C8:57:26:48:90:8E:07:74:3C:AB:3A:95:1A:6F:F0:CF:73:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.16.0/24
                IPv6:
                  2602:fd20::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e6:62:4e:cd:1d:6d:a7:49:7d:26:9b:b5:0e:07:8e:41:21:
         af:93:99:4c:44:ec:84:61:2f:e5:da:2f:2e:8c:1a:85:d8:3c:
         b9:a5:8e:87:20:7c:aa:d9:44:44:c8:e5:9f:af:40:d3:04:99:
         48:4d:e9:45:ee:10:c6:a7:1e:b2:ee:3f:2c:fa:ff:5f:b5:8a:
         b1:b4:09:90:92:f4:56:95:0b:cf:e4:00:ff:ab:ab:eb:4e:c5:
         43:70:95:49:6b:fc:03:36:2a:f2:28:1c:4d:9e:e6:40:68:03:
         21:05:99:b5:e1:26:cb:4c:3c:bf:4e:9c:98:4c:d2:f0:8b:a8:
         64:c2:f2:97:d7:37:6e:96:91:86:24:e4:6e:26:2b:76:05:34:
         3f:46:8d:7a:b2:1f:8e:50:9e:86:38:c5:34:de:38:18:07:44:
         0d:b5:1e:11:1d:d7:86:51:83:2c:4e:ff:b9:16:18:71:44:d1:
         1f:c9:26:11:52:2e:e2:32:d0:d3:fe:24:d3:63:2c:5e:46:c5:
         04:08:1b:57:19:7d:2e:6a:66:32:e3:c7:15:c5:5a:9d:94:a5:
         e8:89:f9:43:ab:3a:e5:1b:d9:11:f5:13:d1:49:8b:97:ee:64:
         d7:05:de:07:c6:d5:37:2c:aa:8f:6b:c0:63:05:59:0d:a1:d6:
         29:75:00:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:51 2025 by rpki-client