Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/77adbc7d-1a74-3f6a-936e-813416ad3582.roa
File:                     77adbc7d-1a74-3f6a-936e-813416ad3582.roa (raw, json)
Hash identifier:          4uaJ6iA1GvEEnFOcHdvFh5VohMit8v46fbSdw1ONgRM=
Subject key identifier:   2F:96:11:FD:37:A9:4A:DC:B4:B6:88:8C:31:E8:40:57:8A:08:07:C6
Certificate issuer:       /CN=c24a40f6-23ba-4adf-a2a5-42e2fff42c08
Certificate serial:       010D0C9F43285849F2E52E76769527ADD9EBFD60
Authority key identifier: F8:E4:B8:57:4D:A9:93:5B:26:69:C6:3A:4A:0F:C7:B9:E3:51:F9:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/77adbc7d-1a74-3f6a-936e-813416ad3582.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     397142
IP address blocks:        23.163.32.0/24 maxlen: 24
                          192.251.149.0/24 maxlen: 24
                          198.99.80.0/22 maxlen: 22
                          204.107.184.0/24 maxlen: 24
                          2605:b40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:2e:76:76:95:27:ad:d9:eb:fd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c24a40f6-23ba-4adf-a2a5-42e2fff42c08
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=2d003043-7d3c-40fc-911d-2dd5e5412944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:24:3f:1d:46:da:79:89:b9:af:0f:a3:54:cd:
                    2e:ee:bc:f4:6f:31:95:c2:4d:04:7e:23:1d:7b:b5:
                    4d:d4:a9:5e:d2:1a:61:d0:45:2e:c5:1c:6e:35:b7:
                    8b:d0:b7:75:91:78:15:4e:f5:d7:99:ae:7a:07:24:
                    ed:43:c9:a4:c2:47:2e:1e:6e:c2:5e:1c:2d:1e:35:
                    2b:31:14:0e:de:88:f7:e1:32:fb:65:89:94:16:dc:
                    21:39:17:58:9d:9d:83:e6:7e:42:11:fe:61:32:c0:
                    3c:8c:4f:ce:2a:66:79:e3:bf:15:f8:2d:bb:8d:56:
                    2d:6f:0a:3f:b0:2b:73:53:c3:37:0e:44:f2:89:f9:
                    0d:7b:4f:76:2b:1a:ab:f0:48:b3:05:a0:77:3d:46:
                    1c:47:1a:02:e9:9d:63:54:b0:47:3e:20:7e:4d:1b:
                    cf:1f:1a:5b:66:74:ec:23:d2:fb:c3:a9:8e:31:cc:
                    b1:5a:ba:32:b0:3c:b8:19:96:93:7b:5c:f8:11:62:
                    f8:f2:b0:16:2f:10:a8:1c:3c:fb:0f:f3:49:5e:10:
                    3c:9e:fa:b5:e6:54:a7:77:80:08:4a:4e:fe:90:8e:
                    30:f4:62:d9:f2:07:6d:97:71:a4:0e:a0:17:7d:59:
                    e1:58:e4:b9:c1:42:6a:28:03:04:c8:e4:01:09:0f:
                    ae:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:96:11:FD:37:A9:4A:DC:B4:B6:88:8C:31:E8:40:57:8A:08:07:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/77adbc7d-1a74-3f6a-936e-813416ad3582.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.crl

            X509v3 Authority Key Identifier:
                keyid:F8:E4:B8:57:4D:A9:93:5B:26:69:C6:3A:4A:0F:C7:B9:E3:51:F9:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.32.0/24
                  192.251.149.0/24
                  198.99.80.0/22
                  204.107.184.0/24
                IPv6:
                  2605:b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:93:96:64:a3:bc:c3:0d:98:00:66:e8:7c:73:af:8f:9c:76:
         d5:4f:64:c0:4a:91:af:38:49:2c:06:44:66:d7:f5:9b:90:f5:
         d0:9e:67:fd:85:4f:4c:cd:3c:1d:c6:8a:16:da:e6:12:45:ca:
         e8:23:bc:38:60:40:a2:4a:29:19:b9:6b:e3:6e:19:c1:31:73:
         a9:0a:b2:c2:bf:3d:f8:66:31:6a:25:c5:f9:1b:52:62:7c:fc:
         4a:76:51:04:9f:95:2c:ac:d0:d6:54:9c:28:23:fd:06:67:cf:
         94:eb:0d:0a:d2:83:29:6b:85:8e:b9:ae:d4:69:e0:60:ef:54:
         35:88:fc:63:4d:b0:2c:a2:dc:ee:52:d3:4f:9e:2d:01:aa:d6:
         53:7e:d6:61:8f:d7:fb:98:c8:b3:b5:c2:58:6e:42:23:59:f3:
         a1:3c:e1:16:6f:06:8a:41:20:61:9f:c6:92:7d:a7:f7:ae:e8:
         34:6b:d8:f8:83:6a:cd:ba:62:ea:ab:fa:26:9f:74:5a:28:98:
         bf:49:0a:83:06:57:d0:1b:85:9e:c8:d1:06:c3:fd:87:6d:28:
         fb:67:52:82:00:8c:fe:db:26:e5:b3:8a:d0:dc:97:0d:7f:82:
         4e:ab:cd:e9:e9:97:ab:a8:63:60:df:09:35:1f:1a:a5:52:4c:
         ea:f1:90:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:18:05 2025 by rpki-client