Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/06c61722-7a68-3f16-a8ff-eefcf70e5126.roa
File:                     06c61722-7a68-3f16-a8ff-eefcf70e5126.roa (raw, json)
Hash identifier:          elR7GizbSASOugvDbjFRz5d5CPJScN2/lsEqfpAdDzw=
Subject key identifier:   70:A2:A1:ED:6C:CD:B3:B4:C0:36:AF:D8:B7:8E:EA:82:97:0D:47:C2
Certificate issuer:       /CN=9eed61a4-093d-432f-9466-2001995b9535
Certificate serial:       010D0C9F43285849B14A0D0DC9C66FE2C5EF5480
Authority key identifier: AF:FD:FF:4A:EE:43:85:68:1E:9F:C7:AD:E0:E3:E8:A9:A0:ED:A8:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/06c61722-7a68-3f16-a8ff-eefcf70e5126.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     30307
IP address blocks:        23.168.184.0/24 maxlen: 24
                          2602:f9b1::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0d:0d:c9:c6:6f:e2:c5:ef:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eed61a4-093d-432f-9466-2001995b9535
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=737ade0f-7f1c-44cd-9713-da4228b6979b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:43:5d:91:d6:8b:66:b1:ae:84:8e:cc:c9:48:
                    3b:34:14:3e:00:65:9f:f1:4a:f4:f7:fa:c5:a0:fd:
                    fb:93:cb:ed:79:e4:99:a8:87:30:ab:76:a2:7b:e3:
                    cf:13:b8:35:a7:dd:dc:45:5e:61:24:17:bc:83:0b:
                    33:84:48:c1:2f:c7:db:fa:46:9d:ab:48:e2:5b:ab:
                    89:36:b8:8a:58:c2:b6:f2:5b:07:d2:c4:10:de:23:
                    49:eb:62:a6:31:b2:27:95:20:8e:14:dc:25:7e:8d:
                    18:4b:42:a0:d1:65:5f:41:03:7b:6e:fc:d5:e4:c3:
                    87:30:8e:7f:61:66:73:ba:68:ee:13:f9:39:15:86:
                    be:cd:ae:c2:db:56:81:07:48:33:5e:8a:09:a5:88:
                    b3:e8:07:56:fd:e1:47:37:8f:24:ba:e2:eb:76:b6:
                    db:1b:ac:5b:62:de:9a:27:c7:ad:1c:0c:57:20:74:
                    57:23:b5:63:be:89:b0:72:28:50:82:fe:7e:6c:0c:
                    c1:28:82:25:f9:bc:8a:81:a5:0e:55:68:6c:66:37:
                    3f:b7:60:91:8b:0f:44:3a:83:0d:92:85:45:88:db:
                    63:10:1e:2a:4e:d5:cd:08:6f:35:39:16:e9:85:31:
                    5f:1a:e4:63:ff:6e:44:b9:97:ee:06:33:c2:ae:90:
                    cc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A2:A1:ED:6C:CD:B3:B4:C0:36:AF:D8:B7:8E:EA:82:97:0D:47:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/06c61722-7a68-3f16-a8ff-eefcf70e5126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FD:FF:4A:EE:43:85:68:1E:9F:C7:AD:E0:E3:E8:A9:A0:ED:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.184.0/24
                IPv6:
                  2602:f9b1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:50:17:4c:eb:47:17:1f:8c:95:72:3c:50:28:46:c1:90:1a:
         d3:7b:86:bd:f7:66:83:4a:86:4a:dd:77:fb:7c:df:10:03:a3:
         ba:39:f8:fa:4d:78:23:9c:d0:73:51:e9:72:a3:86:f3:91:0a:
         ff:b0:82:04:57:7e:fd:42:e5:44:02:00:94:98:a9:88:28:5c:
         0e:96:b3:27:c4:77:48:b9:66:83:6a:2d:90:a3:7f:4f:65:7b:
         33:c0:bf:62:a0:c9:76:eb:9a:f5:94:28:d3:2d:d5:47:c4:44:
         09:70:5d:91:ac:6f:d8:11:d8:66:19:1b:bb:27:41:18:14:3b:
         b8:c9:8e:5d:4f:26:32:77:a3:eb:39:4b:2a:81:e1:db:d0:a8:
         bc:68:68:79:4c:0e:2f:ce:56:9e:0c:b5:39:cf:40:61:9d:57:
         65:60:e7:d2:8a:86:41:83:01:8d:02:c9:01:5b:84:3e:c3:66:
         7a:f1:07:2a:bc:d5:e4:db:4d:15:27:57:a5:21:9c:66:b3:18:
         2a:b7:7b:0a:1a:6b:eb:99:60:30:5c:c5:83:d1:19:1b:f0:c2:
         5f:f6:0e:64:14:43:2a:ed:e5:be:c3:4e:36:d8:bc:0e:91:58:
         8b:c0:0c:9c:89:39:f9:37:37:f1:09:b8:46:b8:bd:78:1f:b0:
         e0:c8:a5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:12:34 2025 by rpki-client