Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/e6a5be0c-3342-3531-9d15-9b4cc482f541.roa
File:                     e6a5be0c-3342-3531-9d15-9b4cc482f541.roa (raw, json)
Hash identifier:          uw/EtWr7zuJAAkQH3qE73tEOI9dTK0a35s+BIk9a7gs=
Subject key identifier:   62:DD:A4:81:46:B2:14:38:5A:39:EC:0D:96:08:9F:FA:8A:DF:A3:CD
Certificate issuer:       /CN=0e527a59-f1c7-4664-a1be-8a0911a07432
Certificate serial:       010D0C9F4328584AC2E0ED8D7A53DD46FAABA440
Authority key identifier: 6A:29:73:86:E7:27:75:53:C5:7C:59:76:56:81:A2:37:EE:4C:DD:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/e6a5be0c-3342-3531-9d15-9b4cc482f541.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     40864
IP address blocks:        23.159.240.0/24 maxlen: 24
                          96.125.192.0/20 maxlen: 23
                          2606:1b80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:ed:8d:7a:53:dd:46:fa:ab:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e527a59-f1c7-4664-a1be-8a0911a07432
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=59a2b1d7-ce63-4960-8689-bb1cf4a8e22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fd:3c:91:92:c2:69:9b:3d:7d:01:0b:41:e1:
                    95:be:20:6b:b2:f7:67:18:c9:64:df:db:49:59:5b:
                    7f:a2:de:5e:8c:4f:fe:81:93:9b:01:5c:50:72:9d:
                    ba:d7:32:b3:97:68:c2:02:17:2f:38:6b:4b:93:61:
                    f9:1a:5f:ab:b2:58:2c:60:32:48:c6:b0:03:cc:fe:
                    c8:8c:f9:cb:05:6d:ca:88:c8:70:66:c9:86:b2:b6:
                    46:1e:39:ad:cf:58:c0:41:79:d6:00:9a:c6:40:34:
                    a5:9a:8d:b3:f9:2c:e4:c7:c2:b0:03:5c:2b:65:5b:
                    f5:bd:44:72:cf:b7:8b:4b:4b:7b:e3:95:1e:90:93:
                    c0:a5:48:38:41:87:8b:e2:29:ea:12:14:9e:15:79:
                    53:7a:4e:53:34:b2:82:e6:a5:76:76:e4:7b:43:33:
                    ee:ad:1d:77:1e:d5:f3:3c:af:1c:b8:0a:18:23:64:
                    da:30:c9:fb:a7:34:be:5e:73:50:45:f4:3f:9f:a1:
                    09:ac:ff:1f:84:63:26:b7:e0:ae:e4:49:15:98:d6:
                    84:85:42:a7:10:21:2d:85:c2:69:65:b6:1b:15:0b:
                    c6:6a:f0:cb:3e:b6:5a:ca:f1:f6:00:56:9a:74:97:
                    0b:22:45:40:07:79:de:41:8e:87:f2:2e:c7:fd:9f:
                    0a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DD:A4:81:46:B2:14:38:5A:39:EC:0D:96:08:9F:FA:8A:DF:A3:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/e6a5be0c-3342-3531-9d15-9b4cc482f541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.crl

            X509v3 Authority Key Identifier:
                keyid:6A:29:73:86:E7:27:75:53:C5:7C:59:76:56:81:A2:37:EE:4C:DD:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.240.0/24
                  96.125.192.0/20
                IPv6:
                  2606:1b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:45:18:ed:75:1c:7b:44:91:4c:99:dc:d1:32:b4:00:67:41:
         8d:f0:d5:bd:5e:ba:4f:3d:88:75:48:3a:03:60:fd:cb:40:c8:
         fe:1a:a8:b0:f7:c1:27:78:3b:14:df:5b:c3:06:52:06:02:5d:
         c2:44:c8:de:0c:e5:28:18:27:e0:ae:df:0f:c0:c8:6a:6c:12:
         51:c8:46:f9:de:2c:da:97:76:66:91:b0:c8:d5:10:9d:72:9e:
         27:44:12:3d:aa:03:b9:bd:39:76:59:39:0b:ae:ca:4e:55:de:
         0b:28:fa:5a:99:b2:44:2f:88:f6:61:fd:59:8d:8b:1c:b7:a0:
         b8:7e:2c:7f:38:cc:10:70:a5:79:e6:f8:d5:1a:e5:cd:94:dd:
         c6:38:92:0b:f4:da:6a:5e:84:17:25:ea:88:1c:9e:f4:11:31:
         db:38:3e:ed:bb:f5:74:63:26:67:66:76:11:e9:b0:da:a7:cf:
         db:f2:b6:4a:3c:69:cf:ab:84:79:a5:28:36:cf:8e:54:d9:ec:
         2d:11:f2:03:84:c5:f6:ac:45:a8:86:7e:c6:a9:96:ed:ef:0f:
         41:21:e6:1f:ef:17:c9:02:49:20:bd:ee:66:7a:37:2d:c9:38:
         af:e5:c0:85:be:7b:a3:a6:6b:bd:65:dd:1d:dc:c8:b5:ee:76:
         d3:f9:d4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:29:13 2025 by rpki-client