Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/a5083115-9d64-38b2-a390-44d44072b1bf.roa
File:                     a5083115-9d64-38b2-a390-44d44072b1bf.roa (raw, json)
Hash identifier:          TYgdV+AE62zpFoxhGNFAte1kd02piysUdQqbrze4KA4=
Subject key identifier:   82:4A:44:B8:B7:D5:B7:93:E6:2E:6B:AE:9B:2E:EF:F9:0A:84:01:9F
Certificate issuer:       /CN=dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a
Certificate serial:       010D0C9F4328584A2EEABD13F8C20015E279A220
Authority key identifier: D6:BA:62:8C:6C:6D:EB:E5:BF:15:35:E1:6C:06:4D:B0:26:70:6F:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/a5083115-9d64-38b2-a390-44d44072b1bf.roa
Signing time:             Sat 14 Jun 2025 01:00:49 +0000
ROA not before:           Sat 14 Jun 2025 01:00:49 +0000
ROA not after:            Fri 12 Sep 2025 01:00:49 +0000
asID:                     399861
IP address blocks:        23.191.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:ea:bd:13:f8:c2:00:15:e2:79:a2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a
        Validity
            Not Before: Jun 14 01:00:49 2025 GMT
            Not After : Sep 12 01:00:49 2025 GMT
        Subject: CN=0d6b582c-d671-431b-9c90-6356879e3a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0b:e7:eb:54:98:cd:dd:d3:c3:ca:bb:45:8f:
                    3e:83:f2:e1:2d:70:a1:66:bb:42:b9:1f:a1:e3:e7:
                    67:26:84:81:fc:5c:51:ab:12:d4:a9:31:04:5f:5b:
                    f4:dd:4e:d6:d2:b3:62:56:54:22:e8:55:63:4b:4e:
                    74:77:0e:86:f3:d9:27:f3:33:66:4c:0c:56:74:ee:
                    1d:38:32:54:24:1f:11:f3:1f:3d:d6:c7:b9:d1:d4:
                    9b:4e:c8:6c:2d:a4:c9:9b:42:6a:37:13:46:17:af:
                    0f:d2:76:45:b4:05:3b:92:be:f6:05:72:8f:38:7f:
                    d6:9f:41:33:e3:37:49:1c:87:d4:0c:b2:e8:d4:56:
                    fc:b9:ab:02:ed:81:6b:cb:bb:07:d8:a6:99:a5:1d:
                    12:e0:6b:bf:99:55:6c:8d:f5:7a:db:a6:b4:10:9b:
                    f0:6e:6c:2a:5f:1f:15:89:c5:dd:7a:36:6e:78:a5:
                    60:16:0a:a3:d6:9b:65:eb:da:29:0b:a1:11:e7:13:
                    f2:62:62:7c:95:28:a4:18:f6:00:07:27:3f:28:a8:
                    20:db:37:e2:dc:53:a3:96:74:f0:86:fc:a1:86:3c:
                    34:a7:13:ea:4d:d1:40:60:e0:ad:31:89:3f:d0:4a:
                    37:cc:4c:af:30:0c:fd:26:ea:9d:ef:0e:33:86:88:
                    dc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4A:44:B8:B7:D5:B7:93:E6:2E:6B:AE:9B:2E:EF:F9:0A:84:01:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/a5083115-9d64-38b2-a390-44d44072b1bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BA:62:8C:6C:6D:EB:E5:BF:15:35:E1:6C:06:4D:B0:26:70:6F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:68:e4:6e:39:4a:5d:45:b3:0e:14:c8:d6:3e:24:c1:de:0c:
         41:1e:29:5e:1b:ef:39:ff:da:4b:6c:ad:c6:de:d7:0a:f2:c9:
         4c:3b:31:bd:92:43:0a:5b:1c:cc:f1:08:88:c7:96:ad:47:17:
         38:46:b3:0d:05:8e:5c:1a:da:22:f7:97:da:bd:b0:f9:ff:45:
         90:af:53:fd:e9:6a:7b:4b:ca:c2:6c:76:26:83:e0:62:71:82:
         cf:61:b3:c4:d4:58:58:70:ac:a2:2c:d5:17:db:06:e1:94:0a:
         8b:cd:c7:e8:0d:b7:9a:c2:9b:b0:18:32:a0:81:84:b3:e4:f0:
         9e:6e:1d:dc:55:59:a8:44:c3:5a:ae:a4:a3:0a:ae:be:45:fb:
         12:6b:ba:26:74:18:31:05:63:4e:14:06:5e:d1:33:d7:26:94:
         d0:39:65:6a:fb:ae:34:ec:ee:1f:60:a1:66:2e:8d:af:ed:b9:
         ae:cf:3e:d7:bf:dd:8b:b4:be:29:8b:97:07:53:3b:28:dc:61:
         31:c0:12:84:3a:28:13:03:52:14:f6:89:be:2e:89:3e:72:7b:
         5f:7e:86:4e:c6:ff:79:1d:63:67:ed:a8:5e:19:4d:90:2f:ba:
         21:c2:79:3b:b3:82:c7:31:c7:d0:29:b8:61:aa:31:a5:cb:f7:
         7b:04:bd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:55:21 2025 by rpki-client