Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa
File:                     dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa (raw, json)
Hash identifier:          fzzEMiUoBHbITpsax4SfdBRTcW0SXUUu9A/DEGhK0Xg=
Subject key identifier:   8E:97:74:DA:9F:38:01:BF:E5:8E:EA:99:97:B0:8C:DD:C9:F6:87:33
Certificate issuer:       /CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99
Certificate serial:       010D0C9F4328584AA160DA26B0960677FCA3ED00
Authority key identifier: F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     396935
IP address blocks:        23.135.48.0/24 maxlen: 24
                          2602:fdd9::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:da:26:b0:96:06:77:fc:a3:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=bfbfac9a-a279-494e-856d-6919510989b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:43:a6:38:1b:a5:04:a7:e4:02:6f:3f:da:
                    cb:6b:5c:26:da:cd:6e:77:55:c3:ef:ae:60:14:d1:
                    77:bc:eb:30:8d:b0:49:0a:b0:fa:bd:fc:40:88:3b:
                    0b:26:c9:4b:2d:57:14:1d:3c:84:a5:14:2c:df:80:
                    0b:66:95:ec:a0:82:c0:88:db:ed:41:35:f1:34:1b:
                    00:30:5c:7e:de:d1:55:ca:d1:39:96:b0:81:6f:ee:
                    fa:88:05:c2:9f:77:d6:d5:67:79:1b:48:16:24:87:
                    bd:86:04:37:27:d6:65:b0:64:7e:3d:f6:12:e1:a4:
                    b2:9e:a9:81:da:d0:4f:04:eb:39:64:50:68:4e:b3:
                    e9:1f:9f:c0:ec:95:38:0a:55:cf:41:8c:78:97:33:
                    9e:ee:ff:ca:fd:a9:e1:ba:1e:b4:0b:e3:59:b5:49:
                    87:7d:4f:a4:44:88:b7:c2:cf:24:ea:51:49:71:34:
                    23:19:6f:df:b2:d2:4f:00:52:e7:21:b5:5e:10:77:
                    ed:5f:4d:68:a5:05:48:79:24:25:69:df:c4:a7:b4:
                    b9:3a:bf:09:9b:8c:4d:a9:4e:bd:ac:cc:47:56:bf:
                    93:24:74:6f:8b:b3:a5:9d:73:79:d8:43:88:75:fc:
                    01:e6:39:6f:0d:8a:a3:d7:ed:44:56:60:07:7d:3e:
                    e7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:97:74:DA:9F:38:01:BF:E5:8E:EA:99:97:B0:8C:DD:C9:F6:87:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl

            X509v3 Authority Key Identifier:
                keyid:F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.48.0/24
                IPv6:
                  2602:fdd9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:24:e9:05:cd:a5:7e:ee:c3:fd:26:c9:f5:42:fa:27:4d:a9:
         5c:23:7d:a8:92:44:4c:6b:2a:2f:3e:83:45:d6:86:76:bf:63:
         00:96:3c:43:af:63:40:89:b7:93:90:35:d7:78:91:07:d1:6a:
         0a:0f:eb:ed:66:e2:c6:c7:61:43:20:9d:fa:11:80:e4:f6:6a:
         cd:11:f3:96:36:82:cb:2d:f0:fa:08:8d:4d:ab:d0:31:60:43:
         58:e8:86:df:8c:ff:d6:94:38:97:ad:5a:63:a8:bc:9e:51:5c:
         36:82:3c:50:54:72:1c:5c:12:b7:35:9f:d4:70:9c:7d:38:b4:
         83:b7:08:68:18:13:09:f0:ed:cf:ac:1e:c5:03:31:71:1a:6d:
         ca:e3:20:01:6a:0b:41:48:18:bf:c4:37:15:4c:31:07:04:ff:
         b9:fb:1d:c0:83:08:af:27:f3:14:63:1b:21:32:81:a3:a8:6c:
         e3:39:5a:af:fd:e1:9b:e5:8f:02:5d:75:c8:aa:94:56:e9:19:
         2e:80:c9:d7:9c:87:8a:18:7e:0d:fb:e9:a0:8e:47:19:8d:a3:
         b3:6b:98:6a:14:fc:ec:f5:15:f5:df:c3:db:ec:bd:7a:43:e8:
         48:de:e7:2c:dc:70:bb:e1:0e:76:e2:1a:c4:05:d3:e9:65:00:
         d2:46:1b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:51:04 2025 by rpki-client