Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa
File:                     ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa (raw, json)
Hash identifier:          WRBDrIhnJ0k3dBbx31pcowEUcV4mPT/P0lFCbmjMiuk=
Subject key identifier:   64:73:38:D2:3D:5C:B8:CF:FE:F6:42:DC:80:7E:E8:A2:58:8E:8C:8C
Certificate issuer:       /CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
Certificate serial:       010D0C9F4328584A90A0B423B2DD04031D12A280
Authority key identifier: E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     33436
IP address blocks:        23.165.144.0/24 maxlen: 24
                          2602:fd09::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b4:23:b2:dd:04:03:1d:12:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=917bddba-fab9-4a20-8140-19d3659c39da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:c2:e3:ba:52:d6:97:0f:08:8e:b4:aa:c3:
                    b0:a6:06:76:85:9f:b6:ad:62:ec:f9:d9:fb:ec:c7:
                    c7:09:ad:05:3f:25:c4:55:46:30:d6:b0:27:c3:3f:
                    b2:8b:6d:67:78:68:80:d0:ee:87:9a:cd:49:30:56:
                    61:ca:76:0c:a2:ba:bd:9a:f4:f3:6a:6c:d3:2a:19:
                    3c:7a:c8:5e:20:b6:d8:8b:ea:fc:69:2d:e0:6f:61:
                    c9:90:71:65:68:fe:ef:37:17:bf:a6:ab:52:a5:90:
                    29:9b:dc:37:b9:2c:d9:af:1e:45:30:e0:82:04:c8:
                    3c:1c:27:08:f2:65:67:66:b5:9c:ff:e5:4a:99:6d:
                    f9:16:61:ce:58:af:fe:3e:62:3e:00:7f:fe:b5:eb:
                    cc:1a:24:f1:fb:dd:ff:a8:c9:38:88:34:00:c6:8a:
                    6d:de:20:e4:1e:36:59:e3:17:4c:a8:7f:25:d6:87:
                    b3:13:87:9d:fd:03:e4:ab:4a:c6:97:6a:53:34:fb:
                    67:c3:31:14:15:71:4a:04:e1:40:14:47:aa:ce:c1:
                    c4:b8:e1:55:34:82:8a:38:ee:a2:bd:64:18:82:80:
                    a6:de:d1:da:9b:bf:53:c2:9c:22:1f:b2:f4:df:8d:
                    ef:5c:10:11:29:d1:7a:47:37:af:64:6b:05:7d:1a:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:73:38:D2:3D:5C:B8:CF:FE:F6:42:DC:80:7E:E8:A2:58:8E:8C:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl

            X509v3 Authority Key Identifier:
                keyid:E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.144.0/24
                IPv6:
                  2602:fd09::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:7f:af:0d:ff:89:de:d3:a8:88:b3:81:80:02:16:f6:fd:eb:
         4e:1b:27:c4:68:d3:ad:59:b3:7a:cb:21:e4:2e:66:15:09:96:
         23:73:67:b4:20:a7:3c:6e:69:91:c6:ef:58:2a:fe:5b:55:b4:
         b3:35:ef:de:24:3b:26:54:32:bb:93:73:91:47:e8:58:c3:c3:
         d3:ea:56:df:62:b4:90:40:10:96:a0:8b:18:81:45:4f:55:c2:
         ec:a5:6e:d7:73:0e:d6:28:33:f9:3b:fa:39:06:81:62:0b:c0:
         8c:26:24:1c:cf:3f:72:0b:56:a9:10:15:1c:ba:39:3d:71:a4:
         8b:90:b2:e7:90:48:48:e7:d3:56:21:f4:40:ab:25:31:f0:6d:
         c9:8d:a8:86:ca:6b:f4:81:7a:87:9a:33:0a:c1:61:6e:15:b1:
         8b:b7:82:c4:49:94:b8:e8:08:6b:9b:36:06:fe:79:10:f0:28:
         6e:47:a1:32:e3:e9:79:8e:ac:25:55:8a:0f:15:0b:a5:76:3f:
         bd:35:4a:d8:f3:2c:05:17:14:c7:7e:09:9f:05:ee:dd:2b:1d:
         be:57:de:32:da:0a:0a:76:b0:e9:ae:6e:26:c7:0b:44:68:aa:
         9f:82:30:24:7a:2d:f6:0c:32:aa:8c:3f:3f:70:ba:7c:de:f3:
         51:db:0d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:02:33 2025 by rpki-client