Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa
File:                     eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa (raw, json)
Hash identifier:          Kx0KwWrW9B1QCLONFN7PPjoU0Xlrno72vFXjL1b6X/E=
Subject key identifier:   24:61:33:BB:63:7E:67:35:DE:9C:BF:2F:D4:23:02:3C:A0:A2:52:F3
Certificate issuer:       /CN=68a35552-4277-4e62-a51e-4b31ab8d4ca0
Certificate serial:       010D0C9F4328584A9206332F29E58BA00B3A9180
Authority key identifier: 16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     401021
IP address blocks:        23.176.152.0/24 maxlen: 24
                          2620:0:8000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:33:2f:29:e5:8b:a0:0b:3a:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68a35552-4277-4e62-a51e-4b31ab8d4ca0
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=7a3659ea-faf6-41a0-ae2a-7cdef72b88c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:18:cd:3c:5b:d5:d7:0c:a6:8a:ee:47:c0:
                    ec:0d:69:c0:04:7a:d8:fd:d3:fd:60:e5:4a:23:cd:
                    ff:08:ac:57:20:26:91:a9:7b:dc:f4:72:d4:7c:41:
                    aa:b3:95:6c:3e:c0:b4:7b:c1:d9:0d:2d:de:e0:ca:
                    aa:fd:23:62:8a:73:06:36:30:c8:4c:8d:c9:48:1c:
                    aa:15:16:4a:13:f5:81:df:95:df:b6:02:dc:1d:a5:
                    ef:25:7e:72:97:a8:2a:59:a2:55:c8:60:6f:cf:fb:
                    26:98:d8:f4:7a:fa:78:ce:30:07:2b:b9:31:6b:15:
                    cc:db:6f:c3:05:35:ed:7a:42:bf:57:f9:b2:4c:37:
                    36:f8:7e:b6:81:67:af:5e:8b:27:8a:12:46:9a:49:
                    42:89:55:32:63:f2:b3:de:58:ce:1d:87:07:54:d1:
                    eb:8f:40:e3:88:cd:28:60:5c:c1:f0:11:5e:fa:5b:
                    52:60:13:9e:bc:4f:1c:59:69:bf:7e:2c:ad:4f:b9:
                    55:04:c5:58:b2:a1:3b:4a:b6:28:fb:77:88:0b:b3:
                    25:cb:11:bf:92:8c:05:31:c8:ba:e5:a8:06:9a:8c:
                    f0:11:d9:8a:ef:c4:0c:45:65:0d:e8:67:dd:90:0c:
                    91:15:0b:89:6c:42:d6:dc:0e:c3:f5:04:8c:aa:c0:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:61:33:BB:63:7E:67:35:DE:9C:BF:2F:D4:23:02:3C:A0:A2:52:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.crl

            X509v3 Authority Key Identifier:
                keyid:16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.152.0/24
                IPv6:
                  2620:0:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:9d:f7:c4:7b:ee:06:d1:2b:57:e6:5e:0e:d2:c6:f7:53:13:
         02:a5:23:14:14:3c:e9:03:4c:08:fa:d6:6b:e8:07:78:86:f1:
         57:e7:fb:1c:07:53:b7:35:1d:af:1d:32:a6:a3:dd:02:a6:8b:
         fe:85:60:a2:7e:98:10:6f:11:a6:f1:fc:a6:2f:93:0e:5c:de:
         cf:76:c2:e0:2e:b4:94:43:1e:6b:d4:62:5c:0c:af:6b:0a:bd:
         cf:a8:04:ab:f4:68:3a:93:2f:bc:2a:21:67:77:b8:54:d4:a8:
         04:9d:37:22:ca:db:5e:88:9d:e7:a9:ba:07:8c:c3:38:0c:a3:
         4a:33:74:77:00:60:8b:e6:9b:02:dd:30:e4:48:c9:28:57:b8:
         12:93:54:86:4d:d1:69:5c:29:37:a6:1c:f1:71:b0:79:29:8b:
         4b:85:da:c5:80:a2:5b:86:91:cd:61:23:f2:04:19:a0:b2:7a:
         25:2a:b1:01:4b:cf:c8:8c:9c:ba:f7:92:e2:cf:cc:a8:f4:8a:
         40:94:68:ca:0f:91:8c:79:08:26:34:e6:e7:48:df:fa:53:a7:
         aa:43:e3:12:df:74:c7:9d:05:d1:28:29:a2:ee:bd:1d:3b:48:
         d7:d7:94:b3:4f:02:a7:b5:8c:4d:16:3d:85:fd:9a:e9:70:13:
         db:fa:c8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:18 2025 by rpki-client