Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2/576211ec-d042-32c9-995d-1385a0d1ea5e.roa
File:                     576211ec-d042-32c9-995d-1385a0d1ea5e.roa (raw, json)
Hash identifier:          7Z3pSm5TdghL8dw1K05bOKYIB7umEWbTkt97zyeOGug=
Subject key identifier:   C3:22:57:E7:FA:30:A2:53:30:02:68:03:44:49:5C:A7:F5:67:D4:88
Certificate issuer:       /CN=4d46d941-6831-4f0b-b6f2-cb7d573cacf2
Certificate serial:       010D0C9F4328584A18954B6C61DDE0A2EFAA1B80
Authority key identifier: C2:4A:9C:95:C4:0D:0F:A8:68:30:8C:F6:9A:FD:DA:6C:B3:48:81:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2/576211ec-d042-32c9-995d-1385a0d1ea5e.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     63023
IP address blocks:        23.160.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2/4d46d941-6831-4f0b-b6f2-cb7d573cacf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2/4d46d941-6831-4f0b-b6f2-cb7d573cacf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:4b:6c:61:dd:e0:a2:ef:aa:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d46d941-6831-4f0b-b6f2-cb7d573cacf2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=bed223ab-a652-4cd5-ac52-c8661038885b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6c:e3:be:83:b2:ca:37:d5:30:03:99:b6:f6:
                    55:ca:1f:3c:31:49:d2:25:e0:72:3e:22:32:79:2b:
                    34:7a:f2:fc:b9:50:be:d4:27:42:cd:92:91:c4:d9:
                    57:4a:17:f1:61:27:76:2b:47:1a:90:c9:6b:04:45:
                    af:e7:3e:69:12:86:b9:54:1d:a9:99:9c:79:fa:f2:
                    bc:8c:fa:25:86:33:4e:90:c5:41:2f:93:1b:74:d5:
                    8c:37:fd:81:3b:08:56:1d:2d:a6:88:21:c4:9b:12:
                    fd:b0:5f:fe:2c:8e:39:e4:9d:86:6f:c6:ff:31:7a:
                    a5:d3:c1:61:c7:17:8a:17:3a:33:4a:05:67:ca:9f:
                    6a:7f:b2:54:70:57:cf:70:6f:eb:ec:28:ee:1b:d1:
                    47:e7:1a:b8:01:e1:39:db:84:f6:b1:d8:53:08:38:
                    95:10:68:ff:7b:f7:c6:b0:a6:c2:64:a2:56:55:7b:
                    97:f8:79:be:77:be:bf:21:20:d6:11:ea:c6:e6:69:
                    5f:1d:f9:4a:bc:f9:63:0c:1e:58:df:21:4a:64:32:
                    32:32:ba:bd:5b:91:21:86:42:77:eb:2d:2d:2c:a7:
                    81:a9:cc:93:8e:c8:5c:62:17:7c:d3:4b:7e:f0:fb:
                    34:de:8e:e2:74:3c:7a:cb:14:7c:a3:08:30:f0:65:
                    02:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:22:57:E7:FA:30:A2:53:30:02:68:03:44:49:5C:A7:F5:67:D4:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2/576211ec-d042-32c9-995d-1385a0d1ea5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2/4d46d941-6831-4f0b-b6f2-cb7d573cacf2.crl

            X509v3 Authority Key Identifier:
                keyid:C2:4A:9C:95:C4:0D:0F:A8:68:30:8C:F6:9A:FD:DA:6C:B3:48:81:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:13:53:3a:cd:c8:65:83:0e:29:e6:be:52:1e:84:de:1a:b9:
         a6:ab:c5:ac:32:b5:81:f6:ae:eb:0a:e4:d1:1e:2f:c6:cc:4b:
         97:b6:b1:68:70:45:46:98:71:57:87:11:0f:63:1e:05:70:78:
         90:9a:05:41:68:a8:87:65:ef:8b:c9:9c:51:fb:07:c6:53:3c:
         cf:80:0e:bd:e4:c9:f6:5b:2f:b5:f9:da:ca:38:8a:a5:3d:35:
         a9:ee:52:d1:cb:f8:bf:0a:d8:64:f3:f1:29:bb:1a:ee:a8:43:
         d8:2b:f6:dd:7e:2c:9c:97:4b:e9:91:56:de:8e:37:c6:9f:41:
         79:50:63:f0:a5:bd:95:73:5e:d8:df:7f:bd:de:2b:66:b4:d7:
         b4:fe:3a:a4:b3:02:07:ae:71:07:76:b8:1c:35:50:61:b9:a3:
         e9:5b:cd:ca:2b:67:51:47:30:a0:ea:7c:f2:3e:b3:2c:a1:ef:
         b8:47:3b:d8:f5:b1:ab:91:da:6b:af:54:37:24:67:6b:73:56:
         e5:0d:30:cf:f4:e2:2f:c6:2d:99:9a:24:48:f4:86:66:ed:cf:
         91:fb:1b:b0:1d:91:ce:bf:89:d2:84:84:9b:1b:ef:82:02:2c:
         f7:a9:4c:2a:49:79:b8:ca:e4:ba:66:3b:df:8c:7f:a2:32:ae:
         3f:0b:20:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:02:53 2025 by rpki-client