Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa
File:                     2d0718a0-7c15-3300-af7e-f83127e2444a.roa (raw, json)
Hash identifier:          ml0VFXP2eK1qUwqPYQgHf0wxnlUPlPJZgT649BDH2Xc=
Subject key identifier:   29:44:E1:5E:8C:1C:CC:06:7A:93:F9:34:DF:A2:0C:E6:61:8A:5F:6F
Certificate issuer:       /CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78
Certificate serial:       010D0C9F43285849B14A06CAC8975A1BD525BB00
Authority key identifier: 54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     400893
IP address blocks:        23.153.0.0/24 maxlen: 24
                          172.82.8.0/22 maxlen: 24
                          2602:ff2a::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:06:ca:c8:97:5a:1b:d5:25:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=94d62712-a219-489f-a904-3d86af7acf7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:60:90:89:ab:a2:07:59:c2:d5:62:9f:76:32:
                    a9:5e:43:03:aa:20:c2:66:e0:17:c8:c6:de:bb:02:
                    91:ed:4c:73:89:c7:84:23:87:5c:5f:2f:d9:16:9c:
                    26:10:2f:02:c7:45:62:19:1b:6c:2c:88:43:c8:f0:
                    12:d0:97:18:96:5a:ea:ab:79:24:ab:ca:e3:a5:a6:
                    b1:59:43:e9:e1:18:7f:69:5c:fd:ce:28:79:ba:66:
                    4a:c0:fb:3f:ad:e8:7f:75:85:d4:09:73:ec:9d:fb:
                    25:db:04:67:9d:3c:48:9e:2c:0d:f6:52:ad:b1:73:
                    26:da:10:b7:50:24:07:d0:f1:65:bb:0f:b3:be:6d:
                    9c:31:4f:69:bb:c7:69:a6:7d:e3:10:a3:bd:80:6f:
                    74:9b:16:d3:fa:4e:df:a3:92:ad:37:1b:97:69:a9:
                    ad:f6:ad:e3:b4:78:31:48:47:33:1c:af:5e:a6:68:
                    a9:47:60:b8:d0:c4:58:b2:7a:e5:10:1a:09:18:ec:
                    c4:c9:a7:17:cf:2c:b4:96:6b:0d:7f:db:c4:11:b4:
                    c3:09:a4:5b:2c:cb:78:79:59:1b:4a:4e:82:ab:d0:
                    12:05:ed:31:eb:f0:56:1b:c1:ea:5e:f9:cb:83:7f:
                    46:ce:31:43:2f:33:3d:ce:aa:d1:5b:10:f5:b3:2b:
                    15:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:44:E1:5E:8C:1C:CC:06:7A:93:F9:34:DF:A2:0C:E6:61:8A:5F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl

            X509v3 Authority Key Identifier:
                keyid:54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.0.0/24
                  172.82.8.0/22
                IPv6:
                  2602:ff2a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:26:f2:01:6c:3d:b8:a7:bc:93:68:05:13:82:a8:37:94:
         6f:ee:c7:9e:eb:90:1a:be:8c:86:bb:d5:06:bb:28:0a:14:0b:
         4a:c9:ba:99:e7:42:62:af:fb:97:b6:b3:68:22:18:78:b9:6b:
         da:db:c7:b8:83:0e:13:74:b9:1a:80:34:42:1a:5b:63:96:0e:
         21:10:a8:ab:fb:07:66:17:4f:6b:20:c0:3b:8d:9f:49:e8:d2:
         25:cc:ff:05:3f:83:a6:be:21:7e:b9:8f:66:5c:96:16:76:d3:
         31:81:64:5b:85:39:5c:5c:76:0d:bc:81:e0:ac:54:0f:bc:c1:
         1c:28:03:dc:6c:27:b6:5b:d8:6c:d2:7c:58:03:a6:1a:56:d0:
         63:2a:4a:7f:88:08:7c:b9:d0:06:00:03:ef:26:4d:54:fb:e2:
         d9:74:6a:c0:d6:0a:1f:13:b6:67:14:0a:f4:68:cd:a5:22:07:
         be:18:12:f9:35:ae:98:20:68:8a:6e:a0:8f:88:91:43:9f:01:
         3b:6c:8d:9a:4e:94:44:a8:3a:6c:0b:52:98:bb:04:14:e5:f5:
         56:f3:4d:bd:68:7b:d1:e1:f4:45:96:0f:41:99:6b:47:68:00:
         2e:a0:05:59:3e:b1:3a:c0:be:d1:34:1f:b4:ca:cc:dd:10:65:
         53:13:08:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:20:24 2025 by rpki-client