Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/0f8069e4-fcf4-3fed-8d08-706747fddde5.roa
File:                     0f8069e4-fcf4-3fed-8d08-706747fddde5.roa (raw, json)
Hash identifier:          HjdLKDcF+lRUkL9mPHUwqqH4iXnsOmnZeIiRuCer93Y=
Subject key identifier:   41:83:55:3F:4E:76:9E:BD:98:8D:E8:16:9F:D4:32:79:93:04:05:78
Certificate issuer:       /CN=1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c
Certificate serial:       010D0C9F4328584A146559662F73F36EA4B49400
Authority key identifier: FB:8B:B7:0D:9A:A3:B9:DD:E0:D5:E3:13:1E:E8:88:D7:0E:04:79:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/0f8069e4-fcf4-3fed-8d08-706747fddde5.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     64256
IP address blocks:        23.162.128.0/24 maxlen: 24
                          2602:fef5::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:59:66:2f:73:f3:6e:a4:b4:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=57dce4db-e879-473c-bbaa-b0b190646cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1e:5c:3c:04:f1:93:a5:29:9e:a8:dc:68:10:
                    e5:8c:1a:0e:96:da:94:f2:10:b6:a2:ae:89:53:d0:
                    54:59:fd:0b:57:cc:4e:0f:8d:1d:ad:7e:c8:08:ba:
                    d5:93:2c:d3:55:01:49:2c:85:51:00:c6:ff:1c:d3:
                    0e:09:1b:61:17:50:41:60:da:7c:4b:c9:f1:30:5e:
                    ce:d6:9d:7e:b5:33:5a:e4:c6:bd:3e:27:45:d4:65:
                    e3:5f:60:ef:99:68:cd:b4:3b:e1:a2:f5:1c:f6:81:
                    c7:df:10:8c:75:ca:bb:33:b6:37:40:30:4b:6d:7b:
                    ec:52:c2:27:12:62:1b:3a:9b:b4:97:6e:4f:b1:03:
                    23:79:69:16:1d:31:90:5c:a1:f7:9f:01:04:0e:b0:
                    4e:8b:27:ca:d7:62:70:fa:e2:d7:6c:4f:c8:9f:ed:
                    29:d8:b1:19:bd:95:80:2c:d4:83:92:51:f8:dd:b2:
                    96:a3:f1:18:1c:0a:2b:38:17:61:45:9f:29:be:35:
                    fa:86:d5:21:33:af:c1:e6:d7:a8:0c:a0:76:04:67:
                    83:87:f8:3e:28:56:a2:de:43:c7:cd:b5:ac:2c:ae:
                    9d:e8:b4:c9:02:57:36:3b:6e:04:66:67:de:ec:98:
                    79:e7:9e:92:30:d2:54:69:c5:04:68:e9:62:ec:a6:
                    68:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:83:55:3F:4E:76:9E:BD:98:8D:E8:16:9F:D4:32:79:93:04:05:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/0f8069e4-fcf4-3fed-8d08-706747fddde5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:8B:B7:0D:9A:A3:B9:DD:E0:D5:E3:13:1E:E8:88:D7:0E:04:79:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.128.0/24
                IPv6:
                  2602:fef5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8f:3e:d6:20:18:13:8e:7a:ae:77:25:ee:7e:16:87:30:f8:
         1f:d4:6d:f6:08:13:be:a2:37:3b:77:36:b8:44:91:40:d2:cf:
         74:da:41:0b:41:0e:bc:ab:9b:18:2b:b9:a8:bf:f9:2d:c0:7f:
         8b:c1:32:15:ac:41:87:16:79:f8:1d:b8:4c:3a:0b:32:bc:9f:
         13:8a:5d:0f:26:7c:73:d1:7c:b2:b1:b8:7e:b0:52:8f:10:2e:
         01:db:96:c4:8b:ab:66:fd:ae:01:65:d1:f8:7b:13:1d:f3:10:
         22:72:0b:64:35:96:45:ba:2e:a9:6b:9d:b6:4b:c2:18:7e:19:
         bb:b6:a7:e2:d6:fe:b3:94:dd:96:5a:a1:6f:30:f4:b7:ca:f0:
         eb:9d:b5:04:b0:06:f6:fd:3d:f0:b6:34:64:93:07:1b:7d:7b:
         2a:99:98:bd:33:3f:07:be:18:40:b0:e1:e5:e6:1c:67:1b:2f:
         de:bd:21:1c:89:fb:3e:f2:e0:89:66:9a:2e:41:c9:80:d3:16:
         57:a1:57:44:c6:d9:2d:ab:9d:4c:34:c7:c7:e9:ed:10:57:e7:
         b6:e0:86:3c:bc:e3:01:b3:a3:5c:19:b9:6c:5e:16:a4:09:9e:
         1c:71:27:29:e9:92:91:c6:c3:7c:d2:1f:99:d5:0c:1a:42:2b:
         4d:03:32:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:23:40 2025 by rpki-client