Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2db64fa6-ab02-3fec-9251-6f01938bb52d.roa
File:                     2db64fa6-ab02-3fec-9251-6f01938bb52d.roa (raw, json)
Hash identifier:          dCIrd0ND3FTzVmCXQ+hTONAHNqMS+KhiIuBk/311oeM=
Subject key identifier:   C5:40:F1:12:EE:48:66:93:E2:7E:5D:8E:20:E5:A5:9A:6B:BC:25:44
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584AC02E874C3E603E9B7BFC48C0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2db64fa6-ab02-3fec-9251-6f01938bb52d.roa
Signing time:             Tue 05 Aug 2025 01:49:43 +0000
ROA not before:           Tue 05 Aug 2025 01:49:43 +0000
ROA not after:            Mon 03 Nov 2025 02:49:43 +0000
asID:                     62610
IP address blocks:        23.251.35.0/24 maxlen: 24
                          107.151.194.0/24 maxlen: 24
                          198.44.172.0/24 maxlen: 24
                          198.44.173.0/24 maxlen: 24
                          198.44.174.0/24 maxlen: 24
                          198.44.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:2e:87:4c:3e:60:3e:9b:7b:fc:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Aug  5 01:49:43 2025 GMT
            Not After : Nov  3 02:49:43 2025 GMT
        Subject: CN=2141cbdb-8321-4119-81d6-5f3801e8a801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dd:a7:e0:a7:3b:07:d6:dc:27:c5:44:0a:96:
                    1b:e7:61:c2:e4:66:08:0c:cb:58:69:80:66:66:b1:
                    8f:e7:51:b8:49:69:fe:5c:98:b9:a0:36:59:56:07:
                    8a:b3:73:f6:82:8d:85:7b:87:e0:03:f4:8e:33:a1:
                    91:31:e7:e2:93:4d:ac:f5:f1:cf:9c:4d:ac:ee:37:
                    cd:0e:14:a8:6c:49:a5:07:5f:a1:41:1f:e5:75:1f:
                    e8:79:28:6a:94:b9:9b:a6:c1:06:5a:dc:a2:0e:d4:
                    7c:7e:0e:d3:ce:65:e8:48:4a:cc:f6:60:e0:67:b1:
                    64:54:92:5d:d8:42:89:6b:27:1b:70:8f:4e:74:b5:
                    96:fe:ec:78:c3:e3:a9:a4:87:48:5c:90:32:39:64:
                    0e:6e:79:58:61:41:3e:fb:52:4a:85:c8:c6:ad:66:
                    f4:38:7f:65:1e:5f:7d:54:3f:7a:f1:58:7f:de:f3:
                    1f:76:f6:1f:05:0b:06:5c:a9:63:c7:98:c1:82:4c:
                    19:90:db:dc:e7:4b:66:f9:4a:c7:63:ed:a0:78:8d:
                    0e:b3:ee:52:18:d2:7a:c4:2d:dc:19:f3:66:41:ab:
                    36:f1:58:29:97:ce:0e:7d:e6:16:da:c5:eb:94:64:
                    6d:36:72:d5:b3:21:4b:63:7a:f5:a3:40:b3:8f:d6:
                    cb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:40:F1:12:EE:48:66:93:E2:7E:5D:8E:20:E5:A5:9A:6B:BC:25:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2db64fa6-ab02-3fec-9251-6f01938bb52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.35.0/24
                  107.151.194.0/24
                  198.44.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:1e:36:a5:a2:8d:b0:a8:7a:aa:cd:d5:79:7c:4d:66:3f:c5:
         ca:94:53:f5:f9:9d:f9:f2:b4:10:79:14:07:88:e9:35:c3:4a:
         3f:93:fa:b6:43:67:cd:94:b5:5d:fd:ff:8b:58:51:45:50:6b:
         00:0a:4f:c3:e6:3b:e5:2e:29:22:3f:9b:74:3d:13:7d:e3:9a:
         97:13:eb:1d:43:da:c9:1c:18:69:96:e9:0c:5b:0b:67:96:64:
         60:c8:bc:68:1f:03:9c:d6:8a:88:8a:a9:d6:b5:b4:fd:46:d7:
         7f:96:7c:32:ff:81:9c:f8:0c:c2:00:ec:9b:51:59:27:ee:1e:
         75:79:44:d0:8c:33:50:fa:0f:de:27:31:35:68:56:57:14:ff:
         b6:3e:97:ea:92:9f:36:30:7a:3e:69:19:6a:12:70:24:b4:c3:
         be:4c:fb:f2:15:8f:2e:e9:40:af:91:4c:45:49:7b:76:e3:58:
         92:f4:17:f5:a5:6f:0c:12:8f:b4:3f:6c:3f:2e:af:80:09:ad:
         37:b5:7b:99:a0:d1:67:48:e1:d0:55:c1:e1:c5:d7:86:38:03:
         eb:27:df:12:13:c8:c5:44:f7:9d:b4:64:78:1b:24:fa:7b:03:
         15:9c:31:7b:9d:37:32:a2:73:a0:b6:a8:08:3d:16:1c:66:71:
         24:46:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:17 2025 by rpki-client