Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/c67fa2c4-805f-3152-936f-aeb5f876559b.roa
File:                     c67fa2c4-805f-3152-936f-aeb5f876559b.roa (raw, json)
Hash identifier:          grNbrgOcIlr+tOBYwWCQaycr9emf9Lg4AAH2Xe2ZlPc=
Subject key identifier:   B5:25:AA:95:31:BA:05:F6:4C:F1:54:A9:D1:BD:4F:0D:7B:AF:32:C2
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328584A189547888864ABFC4FFEEE80
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/c67fa2c4-805f-3152-936f-aeb5f876559b.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     6079
IP address blocks:        23.153.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:47:88:88:64:ab:fc:4f:fe:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=ba85b005-a33c-4292-a270-fc76fbc48347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a0:39:05:d9:a3:33:a3:30:93:8b:30:1e:5b:
                    92:ba:24:31:96:1b:47:4f:ac:f5:ae:89:21:e5:97:
                    69:35:98:5b:83:49:67:e5:44:8a:75:89:35:2b:ae:
                    3e:6a:61:e7:95:34:2e:e9:ec:7e:45:bb:86:a9:fd:
                    6b:ce:48:58:54:29:e3:ad:d8:cc:c0:cf:c3:4c:36:
                    c5:15:4d:ee:dd:70:98:67:18:d9:10:20:82:ba:e0:
                    9b:43:40:d4:5f:a4:a5:43:05:d0:f2:98:da:77:ea:
                    c4:93:2b:2f:d0:bd:2e:a2:62:32:bb:f0:a2:17:48:
                    07:6d:4f:6e:9b:16:6b:a5:93:20:e8:ad:f9:f8:b2:
                    87:ee:ef:0f:ed:1a:62:4e:58:e1:c1:b5:2c:8c:75:
                    17:af:57:36:f0:67:ce:62:d2:11:c9:2b:10:f4:56:
                    6d:92:ef:d4:7c:44:d0:96:5f:22:7d:64:f5:f0:e8:
                    d1:ad:ac:4d:c8:db:37:5b:2c:ae:86:35:34:64:b1:
                    9a:7f:01:a6:d4:d4:1e:fb:4d:c3:15:cf:b5:00:bf:
                    20:54:33:59:30:61:96:ba:b6:d5:68:ee:45:35:8c:
                    64:c3:4c:6a:f0:cb:ac:3f:41:d8:10:3d:82:d8:44:
                    9a:3c:9a:68:d7:3b:f1:a4:bf:e8:dc:09:a8:7b:1d:
                    42:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:25:AA:95:31:BA:05:F6:4C:F1:54:A9:D1:BD:4F:0D:7B:AF:32:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/c67fa2c4-805f-3152-936f-aeb5f876559b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:07:51:fc:ec:0c:7c:97:02:36:11:08:77:db:0d:77:10:e6:
         dd:b7:15:48:2e:60:84:8e:83:91:54:22:01:d5:e5:ee:6b:ff:
         a0:71:2c:1f:62:14:82:fe:ab:92:46:46:3d:12:4d:19:1c:60:
         19:26:08:7b:43:1c:15:0a:8c:1d:ad:09:18:b8:98:01:65:b0:
         c6:c8:22:a0:cc:55:4c:35:e2:ea:cd:db:16:35:08:c2:d2:a8:
         c8:76:4e:24:8e:1e:b4:fa:eb:81:e2:20:d0:b8:bd:da:65:e1:
         af:9e:be:ab:50:37:b6:ce:6d:f7:99:de:10:65:76:4e:51:0b:
         4f:51:95:b7:f2:04:e1:5c:f3:8c:09:4d:d7:19:1a:1f:47:93:
         23:06:f9:bf:92:a2:4f:b0:bd:ab:72:1e:cb:2f:ca:c4:c1:1f:
         96:5e:75:36:eb:46:d9:f3:4b:29:7e:15:f2:30:d8:d7:ab:2e:
         66:d5:9e:e9:02:7d:0d:7c:3c:75:2f:5d:55:b3:3a:99:45:7b:
         59:c3:7f:18:9a:67:d9:d4:47:fa:cb:db:3e:65:c7:f4:cb:14:
         58:95:99:ab:dc:f9:4d:12:96:4a:a4:de:6a:0b:87:bc:4a:dc:
         71:94:f0:85:41:25:9b:1c:4f:9d:13:8f:ef:99:14:a9:47:88:
         5c:2f:bc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:02:36 2025 by rpki-client