Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/295d13d7-99ef-33dd-a625-3a2596a0f75d.roa
File:                     295d13d7-99ef-33dd-a625-3a2596a0f75d.roa (raw, json)
Hash identifier:          1w5rnzHXaavaVIzBo0FkQulY1WF3+7owjMDucIcDRpI=
Subject key identifier:   B9:DF:CC:96:6A:9B:18:4F:81:2C:D0:27:34:F7:2A:44:00:1D:A6:C3
Certificate issuer:       /CN=cb5b14dc-69ee-4b58-b27d-78fe51b1335f
Certificate serial:       010D0C9F4328584A1730089E0DD29DCECB196580
Authority key identifier: A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/295d13d7-99ef-33dd-a625-3a2596a0f75d.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     401010
IP address blocks:        23.148.136.0/24 maxlen: 24
                          130.51.77.0/24 maxlen: 24
                          2602:face::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:08:9e:0d:d2:9d:ce:cb:19:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb5b14dc-69ee-4b58-b27d-78fe51b1335f
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=d1e1b910-ca52-46a3-8535-e7124f00dd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:73:64:fc:c3:52:8e:a3:d0:4e:9b:19:56:46:
                    04:22:9c:5b:dd:65:dc:00:ed:44:99:f1:07:37:9c:
                    f9:50:83:e8:90:0f:25:02:e7:7a:6e:38:2f:25:76:
                    7a:58:dc:9c:86:c1:05:ca:32:fb:71:dd:76:5c:6a:
                    58:36:e9:1a:ae:15:98:d4:b8:db:0a:6d:91:a2:5c:
                    d8:4b:e1:ca:cf:9d:93:a9:38:29:db:50:89:7c:78:
                    be:7d:a5:13:47:62:bd:7b:fb:2d:7f:75:64:4d:c3:
                    70:d1:e5:fc:59:10:5d:f8:91:1e:61:d8:1a:54:59:
                    3c:22:e8:ef:ed:11:96:d6:2c:1a:7e:f1:6a:e9:6a:
                    84:a6:57:aa:42:85:a1:a5:65:04:99:0a:31:ad:a9:
                    2b:dd:2c:a2:c3:73:38:2a:83:98:11:b2:c7:7a:c4:
                    44:85:8c:2c:61:d9:66:08:dc:95:a7:b9:aa:db:2f:
                    ac:35:e2:47:b6:b0:f7:c4:86:ea:6b:ac:4d:f7:7e:
                    4a:d0:27:ce:c3:bf:15:31:cf:b5:48:cb:b4:a3:0d:
                    3d:74:82:02:80:18:66:30:6e:0b:12:5f:56:1e:d2:
                    4f:12:f0:92:34:81:6c:ea:09:46:47:61:43:ab:a2:
                    e9:d2:9f:40:48:41:f0:ba:6a:f6:d3:c3:67:5e:1a:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DF:CC:96:6A:9B:18:4F:81:2C:D0:27:34:F7:2A:44:00:1D:A6:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/295d13d7-99ef-33dd-a625-3a2596a0f75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.crl

            X509v3 Authority Key Identifier:
                keyid:A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.136.0/24
                  130.51.77.0/24
                IPv6:
                  2602:face::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:30:e8:18:e1:de:6e:0f:84:97:0d:62:d2:a9:6d:da:2c:63:
         e1:21:6e:a6:ac:9e:d1:20:a6:9e:ce:cb:b0:a5:25:96:f3:0b:
         be:0f:42:35:c4:af:9a:29:1b:90:75:fe:88:70:a1:51:4e:24:
         4e:41:f3:d9:ff:dd:7f:05:22:7a:fb:d1:2d:b5:85:d5:e7:88:
         6e:c6:12:7d:d5:5a:b8:f2:17:1f:1d:80:2d:e2:2c:d9:79:67:
         29:e5:79:b6:2e:1b:b0:76:71:9a:1a:38:b2:98:c9:83:c3:be:
         4d:59:11:dc:cb:95:63:da:63:69:38:58:05:ac:6e:1c:67:e3:
         38:4a:19:fc:13:87:01:7b:5a:6c:a0:1d:44:b0:79:3a:e5:d8:
         7e:1f:f7:da:60:ad:76:e1:91:68:36:a9:52:32:ad:54:86:2a:
         fb:80:60:93:20:72:08:05:67:18:e7:93:7f:d2:ef:f1:92:5c:
         48:92:b2:c0:68:52:e9:6d:9e:da:4a:0f:e9:71:6a:ec:e5:44:
         3a:f9:03:32:2c:bb:ee:6e:36:02:0d:84:00:31:f1:1a:ef:ba:
         ac:56:ba:29:83:a6:cc:6b:5e:ae:68:b8:bb:6c:6b:86:83:f5:
         37:d4:87:4b:4d:b5:99:12:51:d6:fd:82:51:a0:ba:ae:e5:17:
         9e:b8:39:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:28:03 2025 by rpki-client