Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/466907d0-f56d-36c2-88cd-f7f59fa888e2.roa
File:                     466907d0-f56d-36c2-88cd-f7f59fa888e2.roa (raw, json)
Hash identifier:          NQl1zJQGH/wt4v1e0FyNZs9SqlseMaenDZftCuolNsc=
Subject key identifier:   B8:86:BC:7B:32:D0:DB:A0:5F:70:E4:DF:4C:60:60:59:DF:43:C1:28
Certificate issuer:       /CN=1be7bcf5-0538-4a92-9aef-c460f15023b4
Certificate serial:       010D0C9F4328584A7D15F10E9BDB9936F7E19000
Authority key identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/466907d0-f56d-36c2-88cd-f7f59fa888e2.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     394144
IP address blocks:        23.152.56.0/24 maxlen: 24
                          198.135.179.0/24 maxlen: 24
                          2602:2cd::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f1:0e:9b:db:99:36:f7:e1:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=f2e49f12-ee6b-4929-bef2-26c0b4a39f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:63:12:f5:46:fc:21:5c:1a:dd:4f:26:5a:1c:
                    30:fe:11:ed:81:82:c4:12:c3:58:21:f4:f7:0b:44:
                    b2:97:75:0c:e9:21:3e:a6:bf:20:8e:b4:fc:04:25:
                    f6:fe:27:aa:9a:38:e3:f4:86:78:4a:39:6a:1d:a7:
                    2a:83:d4:b6:1c:7e:60:44:ec:b6:0a:9e:f7:37:4b:
                    1f:32:99:bd:a2:15:ff:4f:32:17:e0:71:db:f3:b1:
                    ab:a2:59:eb:51:08:34:49:90:31:ae:99:04:05:42:
                    26:29:36:98:8d:66:b4:80:71:fe:17:ee:e4:e8:bb:
                    8d:50:f1:da:65:5f:47:a2:e2:7e:28:ee:96:0a:b3:
                    03:cb:01:1c:ee:29:a4:eb:ce:2a:62:e8:fe:e9:a8:
                    3d:69:b6:9c:b5:20:5a:69:e7:80:99:16:6f:ad:b6:
                    70:36:52:16:0b:ad:0b:ae:6b:8b:76:71:a8:2a:b1:
                    49:b9:00:ba:dd:7b:3f:a1:1c:e0:af:a5:3b:19:f3:
                    5a:66:b3:b5:9c:c2:51:7d:d9:21:f7:af:40:91:ec:
                    7c:47:df:3d:e8:d0:b2:18:9d:9b:28:d4:05:55:45:
                    e1:62:6c:7c:ba:c2:f0:d5:92:c4:c1:2f:06:66:4f:
                    74:8d:18:08:95:0a:16:61:b1:0b:d5:ad:46:77:1b:
                    9f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:86:BC:7B:32:D0:DB:A0:5F:70:E4:DF:4C:60:60:59:DF:43:C1:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/466907d0-f56d-36c2-88cd-f7f59fa888e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl

            X509v3 Authority Key Identifier:
                keyid:45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.56.0/24
                  198.135.179.0/24
                IPv6:
                  2602:2cd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4f:fc:d8:9d:cf:a0:e8:86:ab:49:a5:dc:27:d3:93:a5:75:
         2c:fa:1e:99:aa:24:70:12:81:f5:15:fc:88:13:e0:a9:05:03:
         77:4e:2d:84:26:37:ea:3f:b4:fa:75:fc:75:e9:f6:85:f8:47:
         9f:57:e3:16:e3:4c:36:61:59:25:2a:b7:d3:7d:6c:fd:66:68:
         85:6d:32:41:e4:b8:4b:63:c3:7d:06:e3:8c:55:47:83:1b:40:
         a1:dd:e4:26:e3:cf:30:82:72:92:5d:fb:4a:ef:d3:cb:95:24:
         e8:79:b5:3b:95:e8:50:e7:07:52:d6:4c:3b:01:d9:74:4d:55:
         c7:5d:28:69:bf:7d:a7:5e:6b:f4:14:08:be:9c:d5:5b:d5:7d:
         91:fb:2a:a1:f7:90:2b:e7:5d:cf:85:21:af:03:c3:6f:76:57:
         b5:66:d2:e9:0f:ea:0a:2b:a8:b3:fc:e9:a1:fa:49:4f:36:05:
         04:1e:9a:cf:80:11:e3:44:ed:6e:0a:d7:a6:8c:6b:3c:c5:9e:
         57:20:2d:a8:c0:68:a1:dd:51:b6:5f:46:9e:bd:7b:f6:de:15:
         1a:5c:66:ed:d6:35:2f:2a:f9:0f:39:a2:f3:9c:a9:2f:99:31:
         d2:8c:96:74:74:38:8c:e9:d1:80:a7:d0:23:a9:0d:31:fa:86:
         9b:8d:53:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:30:20 2025 by rpki-client