Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7bfb575-94f7-4f8c-923b-dc42cd2ac632/eb409269-becf-35e0-a998-d4521d60eff8.roa
File:                     eb409269-becf-35e0-a998-d4521d60eff8.roa (raw, json)
Hash identifier:          U2TOBHEyCTkCSwwwwqmUfM5zymcdDFa62iiD76Aqn4o=
Subject key identifier:   03:E7:A9:71:3C:B3:02:DC:60:80:B1:26:D2:51:FC:25:C9:21:19:0D
Certificate issuer:       /CN=e7bfb575-94f7-4f8c-923b-dc42cd2ac632
Certificate serial:       010D0C9F4328584A34801BB2E84BF7C2E3B53A00
Authority key identifier: CB:5B:4D:FC:6E:47:4B:EA:30:9C:9B:CB:29:5C:CB:F8:99:01:B5:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7bfb575-94f7-4f8c-923b-dc42cd2ac632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7bfb575-94f7-4f8c-923b-dc42cd2ac632/eb409269-becf-35e0-a998-d4521d60eff8.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     400342
IP address blocks:        23.177.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7bfb575-94f7-4f8c-923b-dc42cd2ac632/e7bfb575-94f7-4f8c-923b-dc42cd2ac632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7bfb575-94f7-4f8c-923b-dc42cd2ac632/e7bfb575-94f7-4f8c-923b-dc42cd2ac632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7bfb575-94f7-4f8c-923b-dc42cd2ac632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:1b:b2:e8:4b:f7:c2:e3:b5:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7bfb575-94f7-4f8c-923b-dc42cd2ac632
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=3d83ddac-7acf-4a49-a06f-8026266cde94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:73:cc:d2:59:d6:90:b8:48:d2:31:16:93:
                    15:cd:08:d4:cd:76:a4:6c:40:75:ca:73:c3:f0:40:
                    54:1c:9c:76:28:6c:fb:4e:cb:d9:97:c7:a5:60:64:
                    cb:ee:fc:4b:2b:e5:f2:40:c9:1b:1a:62:ca:cb:72:
                    b9:81:41:bf:b2:c8:a6:f4:a2:dd:b1:3f:e2:1c:0f:
                    ec:92:50:5c:2e:c9:0d:23:57:80:2d:c0:43:fd:a9:
                    f9:ee:06:af:f4:8c:d6:09:40:87:74:c8:f3:76:6d:
                    97:4b:d4:d9:5f:7e:da:e8:44:41:d0:ef:ed:da:a8:
                    5e:8b:72:8b:03:94:61:33:27:9b:7e:d1:41:78:21:
                    7f:08:8d:37:30:5a:21:1a:dd:2d:57:c7:07:f3:52:
                    9d:55:76:6d:3f:85:5e:50:d0:98:57:ed:45:4a:93:
                    c8:4e:9f:49:15:d7:bb:1b:19:da:46:37:a3:2b:2a:
                    90:93:41:c1:cf:6f:a7:fb:33:4d:08:dd:a6:96:52:
                    e9:dd:ef:84:1b:b2:5d:b4:c8:6c:5c:50:94:07:2f:
                    49:51:15:8f:06:05:da:f5:84:5d:b9:73:df:9f:fd:
                    80:33:48:34:2d:59:ac:d7:56:26:46:0b:c2:85:e4:
                    87:44:65:f9:e2:6b:58:a2:93:7f:3f:33:ea:0f:93:
                    bf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E7:A9:71:3C:B3:02:DC:60:80:B1:26:D2:51:FC:25:C9:21:19:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7bfb575-94f7-4f8c-923b-dc42cd2ac632/eb409269-becf-35e0-a998-d4521d60eff8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7bfb575-94f7-4f8c-923b-dc42cd2ac632/e7bfb575-94f7-4f8c-923b-dc42cd2ac632.crl

            X509v3 Authority Key Identifier:
                keyid:CB:5B:4D:FC:6E:47:4B:EA:30:9C:9B:CB:29:5C:CB:F8:99:01:B5:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7bfb575-94f7-4f8c-923b-dc42cd2ac632.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:0a:92:70:43:6f:49:cf:db:9c:41:a0:e8:e9:df:b6:23:6e:
         58:0b:5e:7d:16:57:84:cc:88:fa:22:5f:1e:11:52:0d:ee:87:
         8d:6a:ed:d6:d3:41:e5:75:04:00:9c:f4:0f:99:87:6a:a9:d9:
         8a:83:68:87:6a:a0:d2:68:4b:17:48:e7:88:21:c6:09:0c:b9:
         f6:96:4e:1f:4e:07:d4:59:48:57:5a:ca:d9:aa:8b:38:e5:ca:
         79:fe:89:79:5a:26:01:2c:bf:36:c2:87:a8:7e:ea:6b:36:f7:
         bb:95:08:71:9b:0f:9e:29:fc:df:cf:e4:1c:9f:88:ae:27:1f:
         58:63:0b:45:a4:ab:d2:11:24:17:71:ea:f2:6e:13:04:77:99:
         10:cf:f3:4d:46:9d:b3:8d:50:ac:8e:17:ea:85:1c:eb:3f:31:
         a8:ec:c3:d9:06:5e:96:48:4e:c9:4c:b2:e6:ea:cc:46:e4:f0:
         5a:cd:45:d8:35:f5:c7:d2:fa:6a:e1:08:49:e0:2f:98:79:b8:
         1a:c7:61:af:27:11:71:51:ab:4f:f6:47:8e:4c:9b:9f:ee:1b:
         98:aa:ea:cb:aa:1e:9e:ea:ea:36:1f:98:83:58:19:57:c7:53:
         a4:07:e9:c8:9a:0e:cb:df:78:72:50:87:88:b1:bc:4f:4b:d1:
         b6:1c:60:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:47:51 2025 by rpki-client