Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ae99bdc-2fa1-4422-bcb2-84cb1c5b95b1/e635b58c-f972-3941-a8b2-dd594383319b.roa
File:                     e635b58c-f972-3941-a8b2-dd594383319b.roa (raw, json)
Hash identifier:          YYrtcIUNaCtj67K8feIL/ayGmbXRIMg7M6GSFJiBcn4=
Subject key identifier:   F4:F0:2B:7A:E1:AC:0F:F5:8C:EF:91:76:83:9D:89:F1:DF:96:99:03
Certificate issuer:       /CN=6ae99bdc-2fa1-4422-bcb2-84cb1c5b95b1
Certificate serial:       010D0C9F43285849B39632C501E13BD92171BF70
Authority key identifier: 4D:CE:53:A9:21:16:D9:9F:EC:FE:48:58:54:4B:04:A3:D0:7B:44:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ae99bdc-2fa1-4422-bcb2-84cb1c5b95b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ae99bdc-2fa1-4422-bcb2-84cb1c5b95b1/e635b58c-f972-3941-a8b2-dd594383319b.roa
Signing time:             Wed 30 Apr 2025 20:46:09 +0000
ROA not before:           Wed 30 Apr 2025 20:46:09 +0000
ROA not after:            Tue 29 Jul 2025 20:46:09 +0000
asID:                     206203
IP address blocks:        23.135.82.0/24 maxlen: 24
                          2602:fb8a::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ae99bdc-2fa1-4422-bcb2-84cb1c5b95b1/6ae99bdc-2fa1-4422-bcb2-84cb1c5b95b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ae99bdc-2fa1-4422-bcb2-84cb1c5b95b1/6ae99bdc-2fa1-4422-bcb2-84cb1c5b95b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ae99bdc-2fa1-4422-bcb2-84cb1c5b95b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b3:96:32:c5:01:e1:3b:d9:21:71:bf:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ae99bdc-2fa1-4422-bcb2-84cb1c5b95b1
        Validity
            Not Before: Apr 30 20:46:09 2025 GMT
            Not After : Jul 29 20:46:09 2025 GMT
        Subject: CN=26980d67-e99a-489b-bf16-d0d13a678bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:d8:c4:a6:1d:19:7e:99:d3:2a:f6:f7:3d:
                    5a:08:e0:2e:38:e8:f6:99:79:47:22:24:e1:c7:b6:
                    c2:41:05:32:30:f0:f6:cb:b2:df:30:6d:28:39:f2:
                    37:ef:90:66:8e:24:d4:d5:b9:ac:e1:8e:c6:c5:0a:
                    99:1b:a3:a2:83:75:cb:88:93:5f:a4:db:b6:fd:86:
                    c7:14:6f:a1:68:f0:7d:8a:e4:c8:fd:2e:8d:98:32:
                    49:c6:51:24:e9:22:bd:a1:4d:0f:f3:2e:6f:a7:c2:
                    8d:dd:d6:cc:a9:69:29:bc:61:a0:ed:a1:3f:2d:48:
                    5c:b7:c5:a6:b5:91:d7:f3:34:a2:f3:3f:2e:8b:5c:
                    90:f3:ea:93:d1:5f:c5:a9:26:9a:80:d9:3b:69:fa:
                    30:7d:e7:65:e2:61:a7:f1:9b:fc:20:76:0a:1a:39:
                    95:34:be:49:15:6e:9a:d5:08:ec:f4:0e:1e:fa:17:
                    51:7a:0c:a0:e3:1f:8e:56:84:c9:a4:48:1b:04:78:
                    61:c2:d5:50:19:f5:af:95:be:3e:8b:98:6a:dc:da:
                    be:a5:ee:f5:6c:c8:d5:62:1d:f9:ad:b8:7e:b7:41:
                    89:37:ec:11:21:d5:94:6f:89:d1:82:8a:0b:2b:fd:
                    a2:51:2d:cc:38:82:9b:c1:c5:a2:ab:58:88:25:8f:
                    2d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F0:2B:7A:E1:AC:0F:F5:8C:EF:91:76:83:9D:89:F1:DF:96:99:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ae99bdc-2fa1-4422-bcb2-84cb1c5b95b1/e635b58c-f972-3941-a8b2-dd594383319b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ae99bdc-2fa1-4422-bcb2-84cb1c5b95b1/6ae99bdc-2fa1-4422-bcb2-84cb1c5b95b1.crl

            X509v3 Authority Key Identifier:
                keyid:4D:CE:53:A9:21:16:D9:9F:EC:FE:48:58:54:4B:04:A3:D0:7B:44:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ae99bdc-2fa1-4422-bcb2-84cb1c5b95b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.82.0/24
                IPv6:
                  2602:fb8a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:bc:69:4c:23:15:02:1a:57:fa:fe:80:c8:b1:93:64:42:22:
         d2:5d:25:5a:68:f7:e5:9e:49:e3:b0:5d:5d:b5:6b:2f:93:ab:
         17:a5:6b:a0:ef:4a:90:e2:f9:cb:9a:80:40:bc:61:19:f6:ad:
         1c:14:6e:ac:53:0c:40:d5:38:ed:bc:38:44:21:bc:89:56:9a:
         8a:a0:8c:5a:ac:0a:38:07:60:91:d3:1d:d1:60:c4:4e:a6:cd:
         c1:31:5f:0f:c6:53:14:1c:5f:a1:61:00:96:b2:ac:fd:8c:bf:
         c9:0b:a2:a5:bc:25:a4:d5:09:be:aa:58:fa:bf:73:01:7f:83:
         1f:64:9f:d2:14:d8:be:a2:61:6f:10:0f:10:18:cf:9c:84:ee:
         c9:4b:dc:02:ed:82:c8:d9:74:4e:0e:d4:eb:7b:89:6f:bb:fe:
         cf:e2:4b:bd:0f:e7:21:8b:6a:1b:4d:a3:03:3c:2b:90:ad:e5:
         a1:f2:75:37:26:8f:a8:18:4c:51:94:c9:07:8d:a1:d6:31:89:
         1d:62:c1:31:79:2e:a1:fc:d9:d0:2c:f7:4b:ab:17:98:39:a3:
         c6:dc:42:61:a0:60:03:14:6a:ca:b2:f6:24:09:ac:38:3f:87:
         bd:d6:be:59:1f:09:c2:34:fc:7f:22:a9:84:b4:2f:35:1b:52:
         56:11:86:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:37:17 2025 by rpki-client