Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312/68a9d485-4b07-3e52-8c52-574733e856cb.roa
File:                     68a9d485-4b07-3e52-8c52-574733e856cb.roa (raw, json)
Hash identifier:          RMVe/gYS1+691Un+oCwJWcZx/RTFaILvJ/DDc+fWB64=
Subject key identifier:   D0:85:29:B1:6C:9A:FF:21:93:BD:7C:AA:78:C6:46:09:E5:CD:70:50
Certificate issuer:       /CN=4e0f128f-0758-4b15-87a4-5bba9de24312
Certificate serial:       010D0C9F4328584A23C00BDDD3E0B7F8A7963A90
Authority key identifier: EB:33:8C:B8:C4:DB:54:C8:E2:EB:D6:66:5C:C6:BA:14:1E:9E:CD:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312/68a9d485-4b07-3e52-8c52-574733e856cb.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     40676
IP address blocks:        23.152.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312/4e0f128f-0758-4b15-87a4-5bba9de24312.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312/4e0f128f-0758-4b15-87a4-5bba9de24312.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:0b:dd:d3:e0:b7:f8:a7:96:3a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e0f128f-0758-4b15-87a4-5bba9de24312
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=28f325f4-c7ea-477c-a363-a9b2863ed08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c1:d4:b3:d4:8b:a6:5a:55:68:d1:4a:13:23:
                    71:ff:b7:fb:a9:66:aa:75:2b:02:17:5f:15:d6:b9:
                    a6:e2:9b:08:6b:c3:de:08:13:99:43:ea:e3:20:d4:
                    e4:4e:b4:fe:1f:f3:88:34:52:13:11:f3:e9:8c:37:
                    36:bd:7d:3d:1b:a7:b4:71:8a:3a:4a:3e:ad:39:2b:
                    8e:24:a1:00:b6:f5:b3:45:91:9d:76:f6:80:d6:3f:
                    7f:b7:e0:17:8b:eb:94:51:52:9a:21:93:9e:fe:43:
                    14:45:8e:54:d1:5f:53:a1:4b:72:e3:85:b0:81:56:
                    e6:db:61:b6:fb:a8:80:23:7b:fa:17:11:89:18:b1:
                    af:01:11:78:ee:2b:56:56:90:34:ae:57:2e:c2:9d:
                    b8:4e:04:58:41:f1:b2:53:31:ab:af:82:58:20:3b:
                    e1:1e:29:33:68:16:f3:95:13:19:88:2f:27:01:37:
                    0d:6c:13:9a:df:88:48:3c:ad:b5:d8:b6:3f:16:d5:
                    0f:04:d9:ee:c3:ae:e4:b6:d0:d4:cb:77:bc:2c:f9:
                    18:9f:09:7d:55:80:c6:41:41:9c:ce:53:22:7c:c4:
                    be:ec:89:83:51:a6:71:6c:e6:4a:41:b3:34:18:29:
                    57:4f:ba:bd:86:f1:72:ac:b3:36:e2:3a:80:88:4b:
                    41:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:85:29:B1:6C:9A:FF:21:93:BD:7C:AA:78:C6:46:09:E5:CD:70:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312/68a9d485-4b07-3e52-8c52-574733e856cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312/4e0f128f-0758-4b15-87a4-5bba9de24312.crl

            X509v3 Authority Key Identifier:
                keyid:EB:33:8C:B8:C4:DB:54:C8:E2:EB:D6:66:5C:C6:BA:14:1E:9E:CD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:0b:11:99:0b:47:5c:24:f3:e1:94:9d:5e:31:7c:82:11:36:
         39:dc:23:96:7a:fa:88:43:30:19:2c:6f:05:a1:d7:d7:fd:e8:
         af:47:ff:95:7c:37:cb:67:fb:65:f3:32:83:91:1c:7d:16:9a:
         73:a0:ca:1c:66:3b:cf:bc:46:83:25:70:f6:51:b8:6d:39:80:
         a5:49:9f:7d:33:09:ee:c6:76:9c:e7:c9:f7:91:31:a0:7a:2d:
         2c:1a:32:06:89:52:7e:4c:14:50:10:8e:81:cb:15:c8:25:21:
         08:69:82:2f:85:ea:31:84:58:e0:fc:46:f9:6d:0e:eb:e0:51:
         a2:c5:57:36:0c:14:86:c5:6f:ce:5b:db:a3:96:cc:c6:c3:ca:
         d1:d3:c4:b4:f4:03:ef:21:f4:30:73:01:29:70:d7:ef:03:89:
         d9:5f:81:c9:be:f6:fc:ba:74:11:24:be:f9:6a:85:b1:30:ea:
         80:a9:b4:0f:66:ea:b3:8d:91:a1:16:0a:58:f9:97:75:c2:24:
         e4:9b:06:e0:1e:4c:ef:d9:c8:7c:51:68:75:9b:ee:c7:01:50:
         cc:f2:3a:ea:18:ec:38:91:ea:8c:74:72:d5:ea:fd:9d:e0:a2:
         9f:37:cc:73:f0:e6:68:95:f0:54:fb:03:7c:e3:f8:ae:09:c6:
         0e:b7:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:53 2025 by rpki-client