Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/08130dbb-3252-364b-9a63-584664ae679d.roa
File:                     08130dbb-3252-364b-9a63-584664ae679d.roa (raw, json)
Hash identifier:          VJKlZWBZT35rvG32DB3a48LOAr3hQdGTq9UpyckZhWw=
Subject key identifier:   BA:D4:8C:E7:C2:4D:96:71:5A:99:06:E4:86:B8:F2:16:E5:98:9F:47
Certificate issuer:       /CN=b730cada-c66c-43b6-bb7f-5b962c5b9c5c
Certificate serial:       010D0C9F4328584A35C838FDD956A2B9E8862700
Authority key identifier: B7:C7:3D:36:99:75:E3:5B:A1:DD:44:33:B3:84:B3:93:2F:69:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/08130dbb-3252-364b-9a63-584664ae679d.roa
Signing time:             Mon 16 Jun 2025 12:02:02 +0000
ROA not before:           Mon 16 Jun 2025 12:02:02 +0000
ROA not after:            Sun 14 Sep 2025 12:02:02 +0000
asID:                     27535
IP address blocks:        23.156.56.0/24 maxlen: 24
                          2602:2ec::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:35:c8:38:fd:d9:56:a2:b9:e8:86:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b730cada-c66c-43b6-bb7f-5b962c5b9c5c
        Validity
            Not Before: Jun 16 12:02:02 2025 GMT
            Not After : Sep 14 12:02:02 2025 GMT
        Subject: CN=c2434f14-5237-41fa-a0d5-76be2f3acc5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:cd:90:ce:43:7f:a2:68:55:de:37:84:90:
                    2c:08:3d:cd:df:af:82:25:d1:85:36:db:f1:53:fa:
                    99:57:b1:d0:6b:91:af:11:29:c8:eb:b9:c3:fe:f7:
                    1f:96:ca:41:e3:06:c6:dc:2b:13:2e:fa:1e:bd:41:
                    ea:35:fa:71:2f:99:c4:6c:1f:de:e2:b8:75:e0:8c:
                    ef:49:da:1e:23:f5:33:70:37:c7:16:f0:1b:9d:b1:
                    e2:cb:23:36:78:07:69:4d:59:84:87:75:cb:67:76:
                    d0:dc:f0:c7:9d:cb:a3:20:5a:db:4c:36:c6:72:24:
                    98:1e:e8:a2:c6:46:96:51:45:49:6d:ec:03:bf:2c:
                    41:3c:f5:fd:8a:0a:32:ec:c0:4b:66:47:2e:57:1e:
                    15:23:4a:25:00:9c:77:97:23:84:aa:75:76:95:04:
                    45:30:b7:37:11:53:a3:73:26:24:f8:f3:d1:e2:38:
                    db:65:22:41:0d:cf:85:30:9d:33:8c:af:2f:6e:ce:
                    1d:40:9e:b6:13:37:e5:7a:13:2d:f9:81:73:16:93:
                    0f:06:a9:58:fa:9b:0f:79:67:82:bd:93:60:45:55:
                    67:30:6a:cc:4b:c9:ce:34:b8:28:a0:c2:f1:a8:be:
                    8c:b5:4d:f0:32:16:ea:91:01:ad:c3:40:cd:13:97:
                    07:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D4:8C:E7:C2:4D:96:71:5A:99:06:E4:86:B8:F2:16:E5:98:9F:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/08130dbb-3252-364b-9a63-584664ae679d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.crl

            X509v3 Authority Key Identifier:
                keyid:B7:C7:3D:36:99:75:E3:5B:A1:DD:44:33:B3:84:B3:93:2F:69:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.56.0/24
                IPv6:
                  2602:2ec::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ab:c0:01:16:ad:0e:c4:07:1c:1a:8e:2a:e4:f3:2e:31:6a:
         40:e0:49:83:f4:06:a0:cb:df:5f:49:3b:47:4c:f0:fc:98:e0:
         38:42:df:e0:c8:8e:3c:46:bd:09:a8:7a:6e:5b:ae:41:d4:d5:
         90:54:34:03:7b:50:9e:30:4c:e2:6b:af:43:97:69:45:d7:7e:
         9b:95:12:59:72:a7:51:54:63:33:ab:e0:3b:d2:ed:aa:92:dd:
         81:85:8e:78:fd:0b:6b:e6:58:62:ad:92:a6:f8:87:60:8c:2d:
         a3:21:7f:89:76:5b:6f:a4:15:05:c8:f6:51:df:7c:a6:d7:4d:
         a2:10:61:e3:02:82:fc:88:e7:3f:70:a1:3f:a2:63:cd:ae:51:
         8f:d1:ad:64:ef:62:fe:ac:44:54:79:c4:f6:39:9a:0f:65:3d:
         67:e0:71:3e:44:92:4f:0e:c2:77:d9:fa:a9:8f:59:ea:a9:ea:
         85:6d:3f:a2:04:bc:45:84:96:8d:bd:70:31:fa:71:60:6d:84:
         bd:a6:76:f6:50:e6:39:d4:86:f9:80:4d:07:1c:03:1e:49:e0:
         e6:0b:6f:c5:02:7f:47:f2:8f:75:c7:38:13:6e:38:5e:d5:1c:
         34:8f:d8:54:6a:d1:52:94:ba:18:7a:a8:76:c0:09:82:39:9e:
         a2:fb:0b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:22:45 2025 by rpki-client