Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa
File:                     bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa (raw, json)
Hash identifier:          5waul0t1lfftyN3WdJ8SzYadUSGBxfrahbdRfctjcR4=
Subject key identifier:   78:6E:DB:0D:DD:66:E8:72:74:F2:8B:64:47:D1:2C:68:4B:FC:4A:98
Certificate issuer:       /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial:       010D0C9F43285849BF3F5714EB4BA80C8C1C0400
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     399624
IP address blocks:        23.129.68.0/24 maxlen: 24
                          2602:f7a7::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:57:14:eb:4b:a8:0c:8c:1c:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=6e0bac07-b4cd-4ecd-800e-9593abf7bfcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:ea:0f:be:38:52:0a:27:50:23:6c:29:d1:
                    6d:5b:47:c4:cd:46:e9:79:1f:1b:87:49:52:cf:c3:
                    cd:a3:52:22:e2:6c:e6:e4:6e:ff:f3:0e:df:35:bc:
                    ee:81:91:47:35:b6:37:d7:30:9d:ac:9a:15:1c:77:
                    d0:93:03:18:bf:3b:c6:40:30:80:02:f4:29:0f:7b:
                    dd:39:46:f4:b6:71:da:c5:0f:67:d6:72:11:5e:ec:
                    3a:39:d3:03:a8:fa:cd:8a:03:57:c7:e8:e3:0d:44:
                    3f:5d:cc:b7:f2:d4:4b:3f:d6:08:cb:2b:82:37:c5:
                    17:21:17:65:a9:7a:88:0b:82:9c:34:9f:3c:c8:25:
                    38:39:ec:9e:29:fa:75:b3:08:a3:84:14:93:18:a2:
                    7b:80:38:11:ba:b0:5c:a4:df:2b:15:0f:68:f7:7c:
                    5a:65:18:45:41:93:12:9a:32:ae:d6:16:2b:50:bb:
                    94:1e:2a:b7:70:d6:a0:f3:fe:e4:cd:5e:1d:eb:7a:
                    a5:4b:70:04:c1:b4:70:c5:a8:54:29:2a:a0:72:c7:
                    86:47:b9:88:71:40:4f:d8:05:b5:27:37:46:75:f1:
                    a7:b8:b1:45:e6:59:80:a9:1d:e9:f4:2e:f6:20:98:
                    db:a2:c4:4a:66:7d:65:26:46:be:20:c3:56:24:22:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6E:DB:0D:DD:66:E8:72:74:F2:8B:64:47:D1:2C:68:4B:FC:4A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl

            X509v3 Authority Key Identifier:
                keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.68.0/24
                IPv6:
                  2602:f7a7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d6:1c:88:e7:6d:58:97:d2:88:62:f8:90:fb:bc:01:e6:5a:
         2f:4c:11:a2:8c:1a:73:e4:36:64:8c:4b:28:ee:00:8e:a9:5a:
         31:c1:e6:28:b1:8e:8a:7d:08:14:b4:05:ce:19:37:dc:64:25:
         9c:21:62:08:e9:b9:8e:91:2d:c6:57:53:ae:98:96:71:55:5f:
         1d:c1:67:85:83:ae:a2:db:6a:52:ad:c3:6d:57:33:e6:da:e9:
         fe:2b:fd:95:19:24:36:6e:96:d7:1e:e9:3d:96:85:c4:72:c0:
         81:06:b5:9b:0f:17:c0:e8:8d:36:17:20:c3:7c:7c:8c:06:08:
         97:6e:ee:e8:16:54:6b:82:db:de:78:d4:ab:cd:2e:d0:6d:a9:
         c0:8e:2b:05:3d:e1:87:ed:a0:b5:13:c3:d5:4a:2c:f8:b2:72:
         6f:90:7c:05:13:2f:df:33:6f:0b:44:6a:5b:fb:44:3d:ac:e8:
         f2:bf:16:89:17:ae:c9:62:f9:77:7a:8a:cf:e8:bd:84:0c:a5:
         2b:ef:25:9c:07:53:d6:a0:52:60:e7:0f:73:1e:a6:c8:75:f6:
         0b:a6:0f:78:42:cb:16:f9:12:bb:24:60:9a:0c:97:96:82:2f:
         15:e1:2e:7c:f4:bf:5a:c6:da:a1:69:79:23:8c:19:28:25:36:
         0f:ec:8d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:59:02 2025 by rpki-client