Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/50e0760c-7558-3554-af17-9c7159e848ad.roa
File:                     50e0760c-7558-3554-af17-9c7159e848ad.roa (raw, json)
Hash identifier:          oVsOY+XU1qgeGDeEqswLcD/JnyTYKsbA2i5DyST5uBs=
Subject key identifier:   5B:AF:57:66:D4:ED:4F:0A:C4:5C:CA:3A:BD:90:F8:F6:3D:4A:76:9B
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F4328584A8A9398CBC02D07F0DB7A8FCC
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/50e0760c-7558-3554-af17-9c7159e848ad.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     27317
IP address blocks:        23.174.40.0/24 maxlen: 24
                          2607:9f40::/32 maxlen: 32
                          2607:9f40:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8a:93:98:cb:c0:2d:07:f0:db:7a:8f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=7bf196ea-d6be-4239-a9f8-a462acba9163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:47:11:e6:52:92:f1:12:a8:63:4b:72:b9:87:
                    94:77:70:45:07:5b:46:a0:42:41:db:93:aa:bb:46:
                    2f:d1:91:18:15:f7:58:92:b5:0c:dc:28:6c:9e:dd:
                    01:2a:05:18:38:b6:95:05:45:67:9a:64:61:f4:36:
                    bd:77:85:10:66:cd:ee:74:20:39:1a:78:bc:34:7c:
                    56:c8:61:68:24:5e:fd:6e:a9:9e:97:ab:33:59:4b:
                    7b:e8:70:a7:4e:c5:ac:0b:d0:6b:cb:27:65:54:cc:
                    da:0f:5c:95:fd:44:f9:b3:d4:c2:6c:51:95:2c:a8:
                    97:4b:e7:bc:5a:af:de:35:99:9c:44:9d:de:64:a1:
                    ed:ce:d3:3f:ff:b7:04:96:a0:9f:d8:96:b0:dc:8b:
                    61:27:e6:63:59:0d:ab:74:b9:2a:e0:5a:b1:3f:b1:
                    e9:2e:f6:3e:68:d3:b0:c3:20:13:ba:4f:b2:63:ff:
                    1a:7f:0a:e0:0c:7a:d6:a0:68:0a:cc:b0:b2:5c:64:
                    a3:42:0e:15:f1:11:b7:d8:68:d5:63:57:9d:22:a0:
                    25:4b:54:06:48:6f:2d:ae:4c:fb:64:6c:5a:5d:24:
                    46:29:fe:e7:1c:a4:29:72:ca:eb:2f:01:3a:c5:7f:
                    ad:c6:b6:2a:4a:a5:34:86:fe:89:02:1b:90:86:ad:
                    34:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AF:57:66:D4:ED:4F:0A:C4:5C:CA:3A:BD:90:F8:F6:3D:4A:76:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/50e0760c-7558-3554-af17-9c7159e848ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.40.0/24
                IPv6:
                  2607:9f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:4d:51:f4:7a:f0:21:21:db:1a:d0:fe:b7:0e:a8:25:6a:af:
         4d:7a:ca:72:d9:88:b4:b9:1b:08:ae:a1:d4:a2:e4:70:12:6c:
         38:56:68:70:a7:56:bb:d5:7d:75:52:45:7b:92:64:1f:4f:57:
         71:c1:3f:4d:f8:c2:e1:c7:39:35:7b:a4:81:c5:3d:f4:a5:10:
         25:62:9a:92:78:9f:81:f4:cd:35:3e:18:36:97:f3:a0:45:9d:
         8c:7f:28:ef:1b:51:7a:8e:56:11:92:38:78:a9:a2:7d:78:c6:
         b9:c0:18:e2:31:5c:ff:0f:d5:bc:5d:6d:dc:45:36:15:ee:42:
         f8:ee:d9:47:83:cf:d1:ca:2d:0f:b2:95:cd:38:4a:0d:0a:6a:
         51:2c:08:0d:a3:9d:67:e5:46:ec:6e:5d:fc:52:ae:4d:cc:a9:
         7f:0f:96:f0:20:ad:33:32:49:24:b8:cd:a5:d5:ce:a6:74:72:
         e3:dc:37:74:54:7a:db:5f:8c:f0:7d:f3:02:9e:40:d1:28:87:
         ce:b0:29:4c:0c:0a:75:b9:99:15:45:1e:d5:30:24:1b:16:0e:
         c0:16:4f:6b:48:4b:53:eb:09:44:2b:ed:af:63:86:c1:75:92:
         2c:89:07:e4:c2:81:41:8f:94:54:51:8c:3f:09:5e:30:1c:92:
         08:bc:5c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:29 2025 by rpki-client