Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/129c3d36-47e7-391c-9b2e-a0052216f38b.roa
File:                     129c3d36-47e7-391c-9b2e-a0052216f38b.roa (raw, json)
Hash identifier:          rppMYwI2HdiOolu0fZeNr4MMLmV1ULTqGh2gLsl2dVU=
Subject key identifier:   7D:B8:D8:1B:AD:E0:B9:C5:85:D3:30:B7:96:4A:B0:54:8B:16:27:7C
Certificate issuer:       /CN=659c51b6-b1ff-426e-a5f4-86f155c1d9e4
Certificate serial:       010D0C9F4328584A0C05691E089F271EA806F340
Authority key identifier: E0:D0:FA:24:C3:E0:AA:78:B6:32:9F:9B:E4:F8:01:E0:46:A6:19:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/129c3d36-47e7-391c-9b2e-a0052216f38b.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     400970
IP address blocks:        23.152.248.0/24 maxlen: 24
                          2602:2d2::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:69:1e:08:9f:27:1e:a8:06:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659c51b6-b1ff-426e-a5f4-86f155c1d9e4
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=912b7f5b-3830-4443-8e28-324b04f2b4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8e:34:68:d6:f1:6c:19:9c:fb:19:5f:e6:06:
                    9d:ff:42:84:15:45:35:d7:66:d2:f0:97:2b:95:8e:
                    fe:4d:4b:49:8b:64:3f:79:9f:0d:74:27:66:a1:77:
                    4e:43:03:c2:04:3a:f4:71:86:97:ad:6a:62:35:df:
                    80:91:74:46:29:b3:42:a4:88:3f:fa:b2:cb:b8:86:
                    7a:e8:74:12:cb:0b:df:e7:34:f4:36:2c:97:1f:cf:
                    f0:69:f0:ef:24:33:3d:bd:87:0b:21:3e:8d:b7:fb:
                    49:8e:5c:d4:69:26:a4:f1:34:a7:02:04:58:94:8d:
                    0b:11:20:bc:86:d0:64:e0:0b:72:a1:f3:2d:74:c6:
                    ef:e2:01:7f:ec:e4:5f:46:c4:bc:85:6a:49:a5:58:
                    04:a5:c8:24:f6:a3:a8:19:cb:9e:ff:5b:13:da:07:
                    de:2f:ab:22:96:41:aa:80:54:36:c4:65:17:8d:6d:
                    33:88:cf:8c:3e:45:6b:b5:ea:0e:a5:6e:df:b8:b1:
                    c8:72:3e:b3:fa:23:b6:b6:bc:47:9e:b4:28:0a:94:
                    7c:0d:f5:b4:0a:56:52:83:76:e8:34:cc:11:26:93:
                    31:17:29:63:d0:bd:87:da:57:c5:4b:88:a5:6c:9a:
                    fa:76:84:6b:a1:56:82:7b:2c:21:18:d9:71:1b:3d:
                    16:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B8:D8:1B:AD:E0:B9:C5:85:D3:30:B7:96:4A:B0:54:8B:16:27:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/129c3d36-47e7-391c-9b2e-a0052216f38b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.crl

            X509v3 Authority Key Identifier:
                keyid:E0:D0:FA:24:C3:E0:AA:78:B6:32:9F:9B:E4:F8:01:E0:46:A6:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.248.0/24
                IPv6:
                  2602:2d2::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:37:1a:33:ac:a8:cd:30:16:ea:c2:1e:8a:48:b3:ef:d7:29:
         43:e7:7e:df:4c:9e:72:eb:00:13:1e:8f:29:fd:52:58:70:d6:
         3c:2e:22:5e:a4:15:77:13:fa:6b:e2:7d:16:0c:fd:78:6f:a0:
         55:e9:af:50:72:e0:fb:0b:6c:33:29:c5:f9:ec:d2:56:9d:2c:
         db:38:b8:f4:e3:bf:d7:3b:c7:ac:a0:ab:fa:bc:0a:d7:43:7f:
         01:58:fb:f6:95:2c:1f:fa:95:3e:40:fc:5e:30:b0:2a:75:53:
         26:48:13:41:51:b7:87:d7:53:d1:ad:a2:14:d5:18:cb:13:f0:
         b1:01:8e:65:54:12:cc:07:22:7b:23:f3:bb:23:b5:c2:01:33:
         aa:a7:1f:a9:56:e2:e8:a0:6a:2c:39:77:c8:74:22:cf:0e:54:
         b0:f6:46:22:d7:b0:c7:3c:e0:af:1c:29:87:e5:fa:5e:cd:63:
         37:10:ca:87:e4:f4:11:2b:db:8e:bd:ec:fc:3e:a7:de:64:9c:
         e0:5f:e9:4d:4c:a3:f3:62:1b:c6:71:dd:55:ec:60:70:64:51:
         fc:08:09:43:92:97:01:8d:27:18:ff:be:39:43:55:61:5b:b3:
         9b:34:d7:89:eb:a9:73:f7:63:98:81:b4:12:6a:b9:12:23:24:
         24:66:df:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:28:02 2025 by rpki-client