Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa
File:                     2feb0cec-2470-3c1b-b3be-57e967538fd8.roa (raw, json)
Hash identifier:          OzGw+tZRH8bXmYzCMsNyYra4aKFOUPUe1CheetSkLTA=
Subject key identifier:   69:06:40:2E:0E:75:7E:6F:5F:32:75:3B:6B:35:89:85:64:DB:14:AB
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584A2ABAE27E506464D05C15D580
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     394285
IP address blocks:        23.88.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e2:7e:50:64:64:d0:5c:15:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=a1188e73-de3e-4e62-b9f3-17c3edfb90e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d0:9f:d5:cb:01:c6:7d:63:6b:a8:d3:cf:86:
                    34:08:28:f5:de:2f:58:31:cb:eb:24:8d:a3:53:c6:
                    88:81:fb:a8:a6:66:73:fd:cc:c9:e3:32:8c:3b:65:
                    3a:a8:1d:44:93:1a:f1:6c:9c:6c:3a:24:60:fd:79:
                    f5:b3:75:b3:c0:e2:0e:c9:32:7c:e0:4d:51:1e:91:
                    05:c6:c6:05:c8:50:27:14:f0:8f:a7:cc:e9:03:aa:
                    90:41:cb:e3:5d:18:45:f5:28:a4:0b:8f:c9:2c:27:
                    48:fb:5c:93:99:90:eb:9e:15:f9:00:c0:1d:0a:12:
                    ff:3f:0a:eb:f0:6a:1e:b5:e3:f2:d1:b3:ad:e4:de:
                    26:61:fb:66:0a:f1:25:77:a5:c2:99:f0:d0:40:e4:
                    74:99:8b:f3:b8:77:63:39:f3:ed:88:aa:23:48:50:
                    56:4e:a5:ad:8c:2d:5c:c0:7a:15:ed:94:41:e6:ac:
                    f3:c2:b6:c4:dd:56:d6:7e:55:82:8c:ca:d4:17:92:
                    23:d3:eb:de:87:e4:79:f9:51:32:25:7b:7c:06:82:
                    a8:da:d4:ec:fe:97:0a:a8:68:c5:3c:e3:0f:c2:5e:
                    ae:14:ec:38:45:4d:90:6b:b9:e7:89:8f:20:86:f1:
                    ad:bf:91:cc:14:72:09:92:07:17:d7:2a:11:94:02:
                    b3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:06:40:2E:0E:75:7E:6F:5F:32:75:3B:6B:35:89:85:64:DB:14:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:b6:a3:1d:eb:6f:d9:bd:65:25:f2:76:02:e4:44:9d:09:01:
         85:94:58:01:76:30:71:84:81:2b:cd:56:b8:42:7c:17:57:ca:
         54:ef:61:c3:f1:77:89:b0:e5:69:b1:71:9c:41:da:af:85:d6:
         dc:87:55:62:44:b3:1a:a0:0a:ec:d7:e5:b1:f2:6d:0e:66:fb:
         be:76:53:20:35:af:53:97:6b:98:f6:91:61:35:16:8a:b8:88:
         15:b5:8c:fc:2f:14:35:24:11:7b:ed:fb:34:d4:83:b8:96:31:
         46:ee:23:b9:e3:6c:6a:23:7f:ee:b8:84:25:8a:ee:1c:99:ee:
         0f:b7:31:a9:6f:f8:89:8e:ed:0f:98:ea:82:9e:47:f0:59:b0:
         e4:48:68:c3:dd:32:77:f9:58:8d:9c:c7:f0:2e:50:b3:b5:25:
         e4:cf:1a:ac:e6:12:a0:56:52:02:02:f3:32:e9:e5:51:d8:9c:
         c5:4d:02:7b:f8:01:50:26:aa:f8:0a:56:a7:51:08:db:67:f1:
         f5:0a:f3:3c:a8:90:76:0f:3d:9b:47:70:7f:94:1b:41:9e:f3:
         b4:57:6d:1d:82:d7:13:e3:f5:73:4b:7f:1d:0e:57:5a:13:6b:
         2e:f1:f6:a0:a4:bd:6d:72:48:1e:03:e2:84:9f:5f:09:93:0e:
         38:13:ad:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:50:18 2025 by rpki-client