Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019/ec8eebc2-b359-38e8-8fc3-576f554fc3f1.roa
File:                     ec8eebc2-b359-38e8-8fc3-576f554fc3f1.roa (raw, json)
Hash identifier:          hyeExvWpCxcS2C/VmiSmlkvaIhKTtAzJopvhuXfgCjc=
Subject key identifier:   5E:5F:DD:81:45:71:7D:FA:37:3D:CE:7C:B9:FB:61:26:43:0F:9C:A3
Certificate issuer:       /CN=87754807-d7dd-439f-8bea-ec0c7728d019
Certificate serial:       010D0C9F4328584A8575E88DB288FC5D07C49200
Authority key identifier: 58:F5:DE:94:6F:7C:AE:F4:DD:7E:0D:AA:80:58:15:1A:0F:9C:21:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019/ec8eebc2-b359-38e8-8fc3-576f554fc3f1.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     400929
IP address blocks:        23.171.248.0/24 maxlen: 24
                          165.140.55.0/24 maxlen: 24
                          2602:f976::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019/87754807-d7dd-439f-8bea-ec0c7728d019.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019/87754807-d7dd-439f-8bea-ec0c7728d019.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:e8:8d:b2:88:fc:5d:07:c4:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87754807-d7dd-439f-8bea-ec0c7728d019
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=8aecb883-aa5a-460a-b3e6-f4bc4b73b9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:be:bf:42:63:d6:5e:7c:0d:99:b0:1f:a0:b7:
                    f8:c5:66:d8:8e:f2:6c:5b:5b:ae:fa:a4:f3:fe:19:
                    91:bb:78:0f:bc:cc:49:6a:88:e1:5c:75:a0:e2:34:
                    d3:8a:81:a7:69:30:25:16:c1:bd:ab:8b:a9:44:3e:
                    b3:eb:9c:e1:4f:04:8c:d4:ba:7b:88:61:6b:d0:3e:
                    d5:23:87:f6:91:5b:9d:0d:dd:e4:4f:4b:f4:ad:c2:
                    e6:8d:dd:74:c8:20:d8:6a:25:06:d5:e3:1d:8d:84:
                    b2:60:65:ed:e5:9a:e4:33:b5:08:3f:76:fb:d9:2e:
                    1e:43:e2:c2:0a:57:cc:be:dc:09:a2:41:00:86:5f:
                    91:44:96:25:cf:03:bd:e1:e4:7c:28:56:94:26:d3:
                    ec:d8:04:66:0c:bf:f1:db:0f:9c:e7:2e:e2:5a:00:
                    87:16:00:bb:9a:42:49:1b:ad:c6:de:cf:f0:d0:ef:
                    95:24:92:e4:69:d5:4d:7d:2f:a1:35:97:9f:73:fa:
                    c4:0f:ab:ec:54:e4:c4:d1:02:53:51:7e:bc:f9:d4:
                    17:56:05:c9:1f:00:31:cb:16:04:a2:8c:da:0f:3d:
                    2c:2b:7a:33:1d:57:9e:4e:20:7c:56:b1:70:cd:e4:
                    bc:af:f8:3d:9a:8c:37:91:f5:1c:96:b2:ee:eb:27:
                    1b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5F:DD:81:45:71:7D:FA:37:3D:CE:7C:B9:FB:61:26:43:0F:9C:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019/ec8eebc2-b359-38e8-8fc3-576f554fc3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019/87754807-d7dd-439f-8bea-ec0c7728d019.crl

            X509v3 Authority Key Identifier:
                keyid:58:F5:DE:94:6F:7C:AE:F4:DD:7E:0D:AA:80:58:15:1A:0F:9C:21:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.248.0/24
                  165.140.55.0/24
                IPv6:
                  2602:f976::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e0:d4:51:f4:41:cd:38:5b:e9:ec:42:8e:b9:c7:ed:03:e3:
         64:71:e1:e2:aa:ed:63:74:b6:80:05:d6:43:ca:48:21:fd:0f:
         47:09:82:c3:8f:3f:9c:a2:fe:82:b3:9a:67:a5:2f:ad:9c:67:
         ba:ae:68:b8:cc:52:46:96:7d:74:92:3d:b0:f1:59:93:55:e6:
         bf:99:af:c3:bd:b1:1a:90:12:e4:af:fc:3a:56:59:fe:49:19:
         a7:a9:c3:07:a0:34:c7:b5:14:c9:85:1b:b4:99:d2:ab:a4:a4:
         8b:ee:ff:8e:4e:17:54:6c:e3:20:6c:12:05:67:df:ae:6a:1a:
         45:ff:78:89:e9:76:ba:e9:14:dc:c2:59:7f:aa:81:f9:87:62:
         9a:00:79:f1:40:94:7f:87:98:1a:58:3f:af:84:37:20:6c:75:
         f3:55:04:20:95:e8:a7:21:9b:3c:f0:4c:eb:6a:38:91:61:0a:
         ed:58:f5:34:9e:cd:cd:34:2b:f9:e6:a5:db:55:1e:19:95:e3:
         38:4b:38:85:ae:75:9c:45:bb:96:75:1c:de:80:b7:a5:a9:24:
         53:d6:03:c4:19:b2:01:c4:c4:20:69:81:99:75:03:e3:c8:8b:
         94:54:7f:c7:44:ee:a3:5a:1e:84:89:95:c6:d5:79:dd:17:ee:
         55:a9:de:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:18:44 2025 by rpki-client