Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/f39d8138-9af7-3a44-97f6-668c0cfe35b4.roa
File:                     f39d8138-9af7-3a44-97f6-668c0cfe35b4.roa (raw, json)
Hash identifier:          aXPu4npc4WgyEy/EgU6InFterZVnE2OXjlCvDfT4RV8=
Subject key identifier:   2E:62:07:1D:26:EA:2A:00:93:9C:84:5C:DE:07:B9:8A:B5:7F:74:DB
Certificate issuer:       /CN=53672676-56d0-4921-8e86-0b820202ef6c
Certificate serial:       010D0C9F4328584A14657CC1A15B6B0A3165B6C0
Authority key identifier: 7E:1A:39:BE:17:56:D6:2C:72:4D:1E:4C:41:C3:9C:00:0C:0F:4A:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/f39d8138-9af7-3a44-97f6-668c0cfe35b4.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     32913
IP address blocks:        23.174.232.0/24 maxlen: 24
                          207.90.242.0/23 maxlen: 24
                          2602:f944::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:7c:c1:a1:5b:6b:0a:31:65:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53672676-56d0-4921-8e86-0b820202ef6c
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=acc78502-7b4d-48fa-813c-d8ac1327ea3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7e:6f:af:ee:d7:be:4a:df:83:e2:7d:50:27:
                    2f:fe:08:4d:79:fb:0c:95:c0:4b:f5:cb:41:9e:84:
                    3d:3d:99:c9:82:42:70:be:cc:67:9a:c1:1d:ac:85:
                    95:3d:eb:02:49:46:b3:0e:29:cc:ce:bf:8c:72:cc:
                    96:9f:3f:ca:fa:6b:80:4b:a6:4c:40:c4:d2:95:27:
                    b8:a9:01:9a:2e:8a:48:ed:b4:20:50:6e:97:47:5a:
                    8e:f6:5b:f8:3d:6b:15:35:71:88:31:9e:0e:8d:e5:
                    f4:f9:19:a1:79:bd:39:07:91:df:f5:8b:95:cc:7e:
                    16:79:70:e2:41:8e:6b:e4:bc:18:fd:b8:56:2c:fa:
                    2a:d5:cd:34:0e:ac:cb:b1:ee:94:21:22:f7:ca:b2:
                    da:e8:69:ad:29:68:1e:0e:93:99:16:29:12:e5:2f:
                    cd:6d:ec:a2:a9:71:39:0b:cb:7d:37:8f:ef:fe:9b:
                    51:81:e8:57:fa:00:ee:a1:5f:af:6d:ec:98:9b:20:
                    93:ac:2f:e5:32:ba:4f:7f:77:2b:e2:9d:59:6d:de:
                    3d:2d:fd:c1:d7:c1:b3:69:50:c1:62:b5:07:5e:e6:
                    c6:8e:94:32:3c:c5:26:31:56:3f:2d:e2:dc:36:75:
                    bc:ac:fd:a0:c7:b5:11:7b:53:88:a6:8a:59:4a:a6:
                    5e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:62:07:1D:26:EA:2A:00:93:9C:84:5C:DE:07:B9:8A:B5:7F:74:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/f39d8138-9af7-3a44-97f6-668c0cfe35b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.crl

            X509v3 Authority Key Identifier:
                keyid:7E:1A:39:BE:17:56:D6:2C:72:4D:1E:4C:41:C3:9C:00:0C:0F:4A:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.232.0/24
                  207.90.242.0/23
                IPv6:
                  2602:f944::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:14:53:bf:4b:c9:50:42:bd:40:4d:b6:55:3a:58:fa:82:a6:
         36:dc:19:dd:cb:4a:12:5c:0e:eb:99:e9:f3:0e:02:40:9b:e6:
         87:32:2f:71:b2:1e:02:5b:00:3a:fb:3f:79:76:e8:c0:57:79:
         00:d8:72:28:3b:e4:db:c0:be:99:83:e3:f3:d1:b1:11:05:23:
         89:aa:00:90:be:e3:10:6e:fc:80:ea:f3:5f:8e:12:fe:2e:39:
         64:14:99:dc:36:b2:6d:2c:fa:ef:fe:26:b3:cc:2f:b6:fc:f4:
         c0:02:9c:36:8e:3a:44:1c:51:a8:3d:a3:62:3f:6b:cc:12:63:
         92:86:6b:42:82:54:73:06:d9:57:35:e5:99:f1:fd:9c:26:ab:
         bb:ca:1b:2f:44:0b:9b:c0:11:f8:b8:54:7f:26:76:0d:11:29:
         dd:ad:a2:ec:a0:bb:a3:ea:a7:5e:92:ff:f4:1b:91:03:ad:6e:
         e9:2d:97:ad:3c:7e:61:49:d4:02:53:1f:a4:f8:75:24:8d:be:
         fb:00:49:fa:39:f7:44:6d:33:8f:af:9c:c6:b3:a0:23:1f:7c:
         81:16:d9:99:64:c5:41:ee:0f:1e:1b:f5:89:cb:18:93:6f:bc:
         3c:0b:d4:66:f8:69:cd:a9:37:a8:a4:f6:ea:79:1f:ce:02:34:
         c1:3e:c6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:36:16 2025 by rpki-client