Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa
File:                     0545c8d8-2be5-3872-8fa1-55668d1f1902.roa (raw, json)
Hash identifier:          PnedNOMYbm56SgCg4MBvk893lckGBWVUcgXOTm7cMQM=
Subject key identifier:   29:79:B6:0F:08:04:E1:50:47:58:A4:7E:0D:37:5C:BA:A0:7E:88:3C
Certificate issuer:       /CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7
Certificate serial:       010D0C9F4328584AB4EB7F002A7BFE74E96EB6DE
Authority key identifier: 74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     40205
IP address blocks:        23.189.216.0/24 maxlen: 24
                          2620:cd:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:7f:00:2a:7b:fe:74:e9:6e:b6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=6eb1dbb6-cead-46d1-bf11-a190a2c10ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:56:a4:ae:bd:66:a2:02:7d:56:cf:83:e4:a3:
                    89:32:ea:32:5a:6c:18:ad:2d:7e:75:3f:d5:64:f4:
                    c0:81:74:a3:c9:65:16:74:53:d6:52:21:ec:bd:96:
                    7a:6d:1f:44:b9:3e:f3:96:ba:fc:9d:1a:ba:07:7c:
                    76:60:d1:90:30:84:5b:0d:78:72:45:c9:77:b0:f5:
                    0e:57:9e:85:90:dc:01:13:e1:c5:91:f8:3a:d4:c1:
                    13:a6:98:39:ea:a3:fa:58:19:33:dc:f6:55:d1:9a:
                    14:96:b2:20:0e:da:da:48:46:47:e1:f6:13:f6:07:
                    db:3a:ff:39:f7:69:6f:fc:36:9e:21:ea:b5:0c:c6:
                    7e:06:8e:c5:03:d5:16:1e:17:c6:34:10:44:d8:27:
                    f4:19:5c:99:98:a4:0e:98:b9:c7:55:72:62:f8:39:
                    c6:53:15:e3:52:3a:f8:bf:b0:28:4b:e3:f5:a1:ec:
                    23:71:85:30:e0:ab:43:f7:2a:ae:4b:6e:01:82:cb:
                    10:f5:bb:ad:fa:85:9a:02:9e:56:7b:44:9a:56:18:
                    2f:da:a6:9d:56:a8:6d:4b:13:30:c5:52:9a:de:c7:
                    18:4f:77:e2:92:cb:01:1b:25:93:62:9b:05:03:1c:
                    d4:d7:58:6a:70:b8:d3:1e:67:8e:79:e6:b9:98:12:
                    de:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:79:B6:0F:08:04:E1:50:47:58:A4:7E:0D:37:5C:BA:A0:7E:88:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl

            X509v3 Authority Key Identifier:
                keyid:74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.216.0/24
                IPv6:
                  2620:cd:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:bf:5b:55:84:bc:26:77:a0:8f:05:f3:6b:1f:87:f9:64:b3:
         11:4d:ba:fd:47:b5:2c:aa:48:61:cf:94:e6:65:5f:23:75:a8:
         29:40:c7:3c:6e:e5:f1:c1:f9:80:36:25:d1:d8:ac:ee:26:ef:
         d3:e6:3d:42:53:e0:b3:14:71:e6:17:c1:b8:0c:97:06:20:9b:
         89:1f:76:0c:3d:b5:57:cd:c6:cc:c1:c4:51:b0:b8:2d:f8:ef:
         66:41:03:b5:1a:fa:00:82:ef:18:cd:41:50:cd:6b:63:db:9b:
         ab:ed:01:ab:99:07:db:b3:30:81:8c:da:45:de:1b:8d:ae:c8:
         2c:ef:9a:25:60:ed:f1:a4:b2:17:23:90:bc:54:c6:89:ba:1d:
         48:93:88:bd:81:65:51:95:bc:12:b4:ac:42:a2:09:33:22:ad:
         e2:17:02:11:ca:8c:fc:3f:a7:14:3d:0d:2e:2f:4f:5b:6d:32:
         b0:de:e0:17:cc:11:ee:f9:74:10:fe:fe:f5:2e:63:4e:5d:e6:
         4b:9f:ef:27:07:f7:82:f6:21:f9:2c:b0:f8:97:0c:34:5e:e5:
         38:24:8b:0a:af:3d:63:9f:20:4d:1e:c3:7b:8b:f6:52:2d:e5:
         ca:77:7c:ed:4b:6b:9b:81:91:78:5a:c3:85:09:0f:84:f3:12:
         1e:a9:0f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:06:01 2025 by rpki-client