Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a56db049-c17a-4152-8523-bc75b15817a7/6644829e-4423-36ae-a42c-8ded4371c82a.roa
File:                     6644829e-4423-36ae-a42c-8ded4371c82a.roa (raw, json)
Hash identifier:          heN40kZsvhMUr2bzDGFQMStWRIO7gcI4cYat3NEBzLA=
Subject key identifier:   8D:C1:BF:8C:27:08:A0:15:AB:EB:36:C7:B1:C6:F7:7D:B8:A4:59:07
Certificate issuer:       /CN=a56db049-c17a-4152-8523-bc75b15817a7
Certificate serial:       010D0C9F4328584A7085F3352B99845FF239F100
Authority key identifier: 57:98:55:26:97:89:F1:08:E3:E9:8E:81:9A:DF:62:E0:CD:FE:DF:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a56db049-c17a-4152-8523-bc75b15817a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a56db049-c17a-4152-8523-bc75b15817a7/6644829e-4423-36ae-a42c-8ded4371c82a.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     398009
IP address blocks:        23.147.176.0/24 maxlen: 24
                          147.160.146.0/24 maxlen: 24
                          2605:86c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a56db049-c17a-4152-8523-bc75b15817a7/a56db049-c17a-4152-8523-bc75b15817a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a56db049-c17a-4152-8523-bc75b15817a7/a56db049-c17a-4152-8523-bc75b15817a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a56db049-c17a-4152-8523-bc75b15817a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:f3:35:2b:99:84:5f:f2:39:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a56db049-c17a-4152-8523-bc75b15817a7
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=6bf1605a-0bb3-41f0-add7-dd1d1831e1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:5a:d2:de:9f:61:d4:b5:d6:15:31:1b:f0:
                    20:4d:d6:95:4e:07:38:f4:2d:0d:80:bf:b4:04:a3:
                    70:d2:36:35:d2:b2:46:25:93:6b:7b:21:35:11:38:
                    63:5d:d6:4b:45:85:ba:07:84:6c:17:14:0c:f6:d2:
                    93:b8:d0:91:b2:09:e9:63:53:1c:82:d6:c7:62:fc:
                    64:3b:5b:ee:e0:98:c6:7b:13:ab:b3:0d:01:03:29:
                    87:93:9b:ea:84:94:1b:66:59:22:4d:c5:4b:17:fb:
                    12:47:17:8e:d8:c0:cd:95:0d:3d:55:f1:51:1d:72:
                    49:0f:22:e5:c1:57:93:76:7d:32:94:b4:7c:d1:04:
                    ee:29:7c:94:40:2e:91:0c:53:ec:17:c6:b5:57:47:
                    2e:b3:e5:2a:bd:4e:e8:2f:39:2f:cf:f2:c2:12:33:
                    f5:c5:fb:93:95:37:97:ae:ff:d2:48:8a:cf:4d:bf:
                    66:bd:b4:22:4a:ca:77:7c:c1:d5:ec:79:8f:38:7c:
                    ee:9e:01:c3:39:9a:5a:12:f6:46:8d:50:1d:20:3f:
                    68:c7:f5:43:65:88:24:1c:1b:7e:cd:aa:0c:51:fd:
                    71:6c:65:53:40:27:42:5c:da:c4:09:61:c3:36:0c:
                    7c:02:51:d1:df:03:ab:f5:fb:52:f9:94:f8:ac:fb:
                    74:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C1:BF:8C:27:08:A0:15:AB:EB:36:C7:B1:C6:F7:7D:B8:A4:59:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a56db049-c17a-4152-8523-bc75b15817a7/6644829e-4423-36ae-a42c-8ded4371c82a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a56db049-c17a-4152-8523-bc75b15817a7/a56db049-c17a-4152-8523-bc75b15817a7.crl

            X509v3 Authority Key Identifier:
                keyid:57:98:55:26:97:89:F1:08:E3:E9:8E:81:9A:DF:62:E0:CD:FE:DF:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a56db049-c17a-4152-8523-bc75b15817a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.176.0/24
                  147.160.146.0/24
                IPv6:
                  2605:86c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:8e:5c:1c:70:19:e5:03:6b:3b:ce:83:83:93:59:aa:6f:d4:
         0f:68:e3:00:ec:08:2e:95:b6:06:18:78:d1:c6:6d:df:41:3d:
         26:04:2a:34:90:85:0f:2d:72:9f:71:4c:3c:bc:bb:7f:77:d7:
         21:90:83:cc:0a:3a:5b:66:fb:85:56:b3:01:fc:8b:5c:9c:57:
         1c:44:0b:c3:25:33:53:f4:c0:34:04:3c:5d:ae:02:f8:86:3c:
         b8:14:e9:56:5d:98:e8:23:08:55:7f:67:72:12:56:93:c5:31:
         d6:16:89:c0:09:e4:c7:ad:29:3b:57:7f:67:68:bd:56:12:72:
         47:c3:13:11:bf:57:72:b1:8d:f7:8b:ff:b3:8b:07:8d:a3:27:
         7e:85:9b:41:ed:15:43:2d:49:f7:62:38:e8:57:2d:2a:a6:7a:
         8a:f0:14:85:8d:39:65:34:ac:fd:13:05:dd:cd:3f:3c:21:ce:
         c0:d9:f1:4d:d1:6e:c8:b2:a0:98:5b:c0:68:74:d7:88:c1:68:
         61:26:f2:0b:6c:c1:a0:8c:7a:bf:00:6c:8e:6a:f4:d5:f5:24:
         03:fd:05:24:a7:42:51:67:76:65:08:38:7a:a3:46:86:4e:61:
         3a:1f:5f:34:94:c2:52:f4:f1:a9:68:6e:c1:37:38:17:f6:6b:
         f5:7d:43:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:15:24 2025 by rpki-client