Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa
File:                     0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa (raw, json)
Hash identifier:          QiYPNkPy2xrX1BHlRHe1Cwxs3N6ijgtlsQ9RWEt1y7E=
Subject key identifier:   CF:24:F7:F5:26:9F:CD:12:ED:FC:60:00:B7:3A:3E:55:36:DF:EF:2E
Certificate issuer:       /CN=7905c321-789d-4866-a23f-9f01c7b24cf4
Certificate serial:       010D0C9F43285849E91FA791CE310A5AC3338340
Authority key identifier: 95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     395886
IP address blocks:        23.170.48.0/24 maxlen: 24
                          23.170.49.0/24 maxlen: 24
                          64.112.28.0/24 maxlen: 24
                          104.167.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:a7:91:ce:31:0a:5a:c3:33:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7905c321-789d-4866-a23f-9f01c7b24cf4
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=2dca18a5-d192-4105-906a-92762a16e60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:3b:09:9b:53:34:e4:ad:ce:eb:74:d4:bb:
                    8e:5a:30:1a:fe:a5:92:8d:b9:f9:1f:de:53:a0:4e:
                    71:e9:57:bc:89:dd:62:5f:83:96:66:1f:fa:54:34:
                    a2:a5:17:2d:9b:df:25:0e:68:be:3d:f9:fe:dc:39:
                    c9:23:fa:e9:16:20:01:67:78:02:78:4a:78:32:9c:
                    b5:22:ea:3d:da:2f:94:2b:e8:bf:12:6b:a3:72:d3:
                    50:d6:2e:57:bd:11:61:9d:51:07:c6:32:9c:11:b6:
                    36:6d:4d:12:21:0a:7e:27:e2:21:2c:81:31:0b:d2:
                    cf:e0:88:0d:d6:d5:e9:47:b6:00:7d:b9:d3:89:94:
                    38:10:d9:a0:98:1a:63:3c:f2:7d:87:8a:aa:30:03:
                    33:a8:32:8a:93:c0:9c:a5:ff:60:df:d5:a6:e3:3f:
                    f7:f4:3d:03:a0:43:bb:52:37:00:5b:48:c8:19:6d:
                    5a:a2:8a:80:b9:f1:5d:b5:5a:aa:77:58:6b:51:dd:
                    03:3e:11:18:92:7e:33:65:ef:af:66:51:2e:20:e6:
                    31:84:41:4d:09:fc:ed:f8:76:3a:bb:3f:ac:7d:89:
                    6d:02:1c:46:6f:2e:6e:3c:5f:33:01:69:43:97:57:
                    09:c2:e3:1d:97:e4:aa:4c:f6:90:81:87:2e:50:a9:
                    f6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:24:F7:F5:26:9F:CD:12:ED:FC:60:00:B7:3A:3E:55:36:DF:EF:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.48.0/23
                  64.112.28.0/24
                  104.167.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:af:b2:db:2e:ab:e1:54:8f:0e:39:e8:de:06:bc:1b:8c:a7:
         4c:63:b9:1b:b6:bd:bc:8c:2a:26:9b:40:fa:ba:94:34:d8:0f:
         ac:17:14:64:fa:94:f7:2b:e4:74:58:4a:20:f5:8b:93:ba:82:
         79:48:ff:aa:3a:34:2f:a0:81:2e:77:2c:0a:3c:8d:b1:d0:50:
         59:13:0d:ea:0d:ce:93:9a:47:ee:b4:9a:c5:f4:c4:af:de:3c:
         fd:82:56:be:23:d4:73:04:31:dc:bf:a6:2d:d1:ff:c3:82:57:
         6d:9a:79:61:c6:50:e1:f7:32:66:3f:6d:44:8b:ad:2a:54:fd:
         98:3a:72:bc:04:c3:18:bf:5f:06:ba:42:9b:2b:71:80:70:d1:
         3d:f4:99:b4:c9:7e:08:f9:7b:14:07:11:b0:d7:42:81:80:1f:
         1c:58:c6:9f:1e:e4:01:bb:64:1b:4d:32:9b:be:12:e4:7c:2c:
         af:08:ee:6a:72:83:60:aa:90:8c:dd:36:a2:bb:72:84:88:89:
         ed:00:04:14:6f:27:6d:44:94:43:d1:12:d1:ef:84:ef:6d:1e:
         16:ed:c0:d6:e0:c1:fb:2e:ed:78:2e:7c:be:23:bb:1c:2e:75:
         4e:e7:ed:9f:04:93:90:91:b0:29:10:cd:f0:9a:cb:a8:50:30:
         9b:2b:d4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:30:29 2025 by rpki-client