Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/6128c351-c1a2-3aaf-bd5b-586a10f0ea48.roa
File:                     6128c351-c1a2-3aaf-bd5b-586a10f0ea48.roa (raw, json)
Hash identifier:          snCOkyr6onDHEXRMIThGC7Ke8ct+sVlvTcj6qwXqyYw=
Subject key identifier:   26:EE:5A:83:9B:0D:B9:BD:03:5B:1E:67:25:5C:8D:43:0B:48:DF:F3
Certificate issuer:       /CN=efc37d3d-05e3-4f5b-85f2-374292d5009e
Certificate serial:       010D0C9F432858498FC9BE5CAE56BCBADD9B5480
Authority key identifier: 9F:77:B3:18:AD:C7:08:C0:68:C5:97:FD:9C:2B:2A:34:03:FB:2B:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/6128c351-c1a2-3aaf-bd5b-586a10f0ea48.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     399619
IP address blocks:        23.128.156.0/24 maxlen: 24
                          2602:f7ad::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:be:5c:ae:56:bc:ba:dd:9b:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc37d3d-05e3-4f5b-85f2-374292d5009e
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=df0dc268-d86d-4cf5-af2c-aac746da3ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cf:34:3d:eb:41:d9:35:67:8a:03:cd:43:b2:
                    90:6f:c0:65:3d:96:27:e7:4a:1c:9b:35:02:a2:cd:
                    dc:3b:7d:b9:24:14:ff:2a:84:64:a0:c6:93:f1:2d:
                    6c:c8:3f:29:db:51:52:d7:28:d1:17:5c:01:95:95:
                    16:c5:f4:0f:c9:58:15:9a:59:ff:96:c4:26:66:9e:
                    b4:f8:1c:c2:59:82:db:5e:a7:47:da:8f:d9:03:aa:
                    dd:4e:50:04:79:68:b5:a5:c6:a9:c5:5d:ed:98:9c:
                    2c:61:e9:2e:0e:24:dc:84:25:06:ec:8b:fb:ec:bf:
                    6f:02:9d:bc:30:56:db:b9:f6:e7:8b:2d:44:bc:75:
                    da:fc:a8:e6:8e:70:39:6f:6b:d4:07:4e:b0:cb:be:
                    7c:dd:4e:cf:bf:17:b5:8b:2c:00:89:04:14:79:85:
                    3f:fc:70:7c:41:f4:31:3a:6b:b8:3a:8e:d3:d0:b5:
                    76:63:03:82:cd:ef:13:8a:55:34:79:63:82:a6:ae:
                    44:7e:e8:d9:3b:f7:0a:6b:f1:cb:4a:e8:e2:45:b9:
                    fd:9b:56:43:30:20:05:11:90:46:ac:8f:12:a4:42:
                    26:45:5f:cf:46:bd:95:3b:f4:60:f5:ca:62:d6:5c:
                    eb:92:d8:40:70:2f:4f:f2:5e:87:20:31:79:28:99:
                    65:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EE:5A:83:9B:0D:B9:BD:03:5B:1E:67:25:5C:8D:43:0B:48:DF:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/6128c351-c1a2-3aaf-bd5b-586a10f0ea48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.crl

            X509v3 Authority Key Identifier:
                keyid:9F:77:B3:18:AD:C7:08:C0:68:C5:97:FD:9C:2B:2A:34:03:FB:2B:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.156.0/24
                IPv6:
                  2602:f7ad::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:55:25:61:03:1e:19:fb:c6:1f:01:25:d6:31:ed:d6:58:55:
         66:7e:e9:aa:a6:84:80:1f:34:2e:38:a2:7a:07:9a:6a:de:fe:
         e6:d1:6d:e3:8e:fc:15:9a:bf:fe:e2:cf:82:70:14:db:aa:df:
         6a:6a:45:9c:4a:64:1e:d5:c0:c3:02:fd:82:4e:ab:31:4e:62:
         a1:88:d7:34:86:da:2e:97:11:e2:86:3d:8e:ab:ee:d6:a3:2e:
         85:5b:68:9a:91:56:95:94:f3:45:ca:b0:e9:7d:6e:c9:26:42:
         2e:73:b7:3a:a2:cc:b6:f4:e6:79:15:b0:99:1a:67:3f:08:5a:
         08:68:ea:c3:17:90:a6:16:f9:2e:ee:e0:80:bf:4a:2e:a0:5e:
         1a:68:73:e9:54:35:be:84:f1:2c:13:64:db:54:ed:9c:06:47:
         ee:4b:97:31:01:44:47:a0:6b:6a:49:ca:9c:4b:cd:8e:31:f5:
         5b:d9:2e:c9:30:0b:4f:1e:3e:1f:41:75:a6:7c:05:4a:1a:ba:
         65:a8:5d:0d:2d:1b:ad:3f:e7:8d:a3:4d:b0:03:ce:78:24:70:
         22:40:b5:7f:3c:0e:37:93:93:87:dc:78:2e:8f:8d:75:48:4f:
         d0:a8:16:89:c7:07:93:b8:2b:95:26:c0:2d:7e:67:63:25:a7:
         a0:9f:58:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:51:32 2025 by rpki-client