Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/12170323-a17d-3096-8443-d5792eec0c16.roa
File:                     12170323-a17d-3096-8443-d5792eec0c16.roa (raw, json)
Hash identifier:          9J7GJXA062FUH+BISRnEWeXHLLbelsk78G4JYeLTlkY=
Subject key identifier:   6A:29:E6:01:BA:26:12:5C:0F:61:10:23:5F:25:95:40:29:27:0E:49
Certificate issuer:       /CN=06dd74e6-7e65-42d4-a49a-07e0cc18c1ef
Certificate serial:       010D0C9F4328584A82AB497BDA0FD17E5BEDA740
Authority key identifier: 62:2D:77:C8:66:2E:94:99:61:71:7C:42:F2:43:68:41:F1:6A:4F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/12170323-a17d-3096-8443-d5792eec0c16.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     17083
IP address blocks:        23.133.196.0/24 maxlen: 24
                          2602:f705::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:49:7b:da:0f:d1:7e:5b:ed:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06dd74e6-7e65-42d4-a49a-07e0cc18c1ef
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=8d0d6cf0-a2bb-4246-8592-a25d64fe5f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bf:40:78:2a:a3:f9:94:f3:62:90:06:79:10:
                    23:b9:96:5b:10:9d:f8:43:6c:e1:e8:48:0b:c2:a1:
                    08:d9:d9:78:89:8e:bc:da:5b:19:a6:01:26:8a:f3:
                    5c:6e:74:9b:81:68:cb:2b:d8:ba:19:3c:7a:4f:9b:
                    a6:8b:82:9c:35:71:4e:55:6d:37:22:fa:c8:fc:74:
                    9b:27:12:21:a8:e1:7f:9d:b5:64:ac:c2:e2:e9:9a:
                    ec:c6:0f:5d:e2:af:48:f3:23:a5:f7:3d:6d:c3:fa:
                    ff:01:4d:06:b9:77:5b:dd:5b:21:18:50:b6:64:35:
                    a0:21:2b:69:8a:43:14:62:e9:b4:95:d2:0a:00:81:
                    81:ad:6e:bd:dd:e2:dd:b4:78:30:22:80:5d:1a:50:
                    4a:43:87:3d:74:69:a5:e5:b2:21:0b:a8:12:f0:94:
                    dd:76:27:f9:b5:95:f9:35:cf:97:36:f6:88:7d:8a:
                    1c:9c:c9:32:f8:9c:5f:38:27:8d:da:de:38:c2:45:
                    47:5a:bd:75:11:84:87:4f:52:42:5e:44:c4:37:e9:
                    f0:eb:07:36:88:7a:5c:d6:28:1e:48:bf:58:63:14:
                    d5:b5:70:ec:97:c3:7e:3d:bf:5c:f5:39:c9:0c:86:
                    d5:2c:b9:d2:4c:c8:e1:22:a3:e6:29:06:1e:9c:b5:
                    9e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:29:E6:01:BA:26:12:5C:0F:61:10:23:5F:25:95:40:29:27:0E:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/12170323-a17d-3096-8443-d5792eec0c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.crl

            X509v3 Authority Key Identifier:
                keyid:62:2D:77:C8:66:2E:94:99:61:71:7C:42:F2:43:68:41:F1:6A:4F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.196.0/24
                IPv6:
                  2602:f705::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c9:a8:05:fc:4a:64:f6:47:44:6c:71:62:92:c4:3f:1d:72:
         44:40:77:98:34:b8:e0:8a:cc:2d:6d:bf:2a:96:f3:9f:33:0f:
         0e:72:b4:da:aa:97:81:a7:48:42:fb:bd:95:8a:7b:cb:dd:12:
         31:d9:29:a8:d6:50:13:e4:1b:7e:ee:9c:73:5d:2e:91:1d:c9:
         86:c8:7f:eb:d9:e8:1e:8f:7c:eb:ba:55:13:fa:e7:39:41:fd:
         71:b6:71:29:53:35:cf:df:fb:7d:76:03:db:48:3a:fe:44:3e:
         c5:eb:37:9a:5e:c5:95:74:e0:39:f2:ae:0d:89:e9:4d:9a:39:
         3e:46:90:56:8e:a2:70:0f:98:94:14:75:bd:06:d3:f6:c4:f1:
         75:c1:72:2d:44:86:88:7a:94:01:c9:89:1b:e1:34:47:da:a1:
         a1:cf:45:86:b9:38:4d:cc:aa:60:95:89:5e:5d:e3:83:39:77:
         7c:11:08:ba:a2:aa:30:ea:4b:fd:7e:7f:14:8d:b2:f7:bb:d5:
         5c:5b:82:bb:82:b7:ed:3f:1a:08:8e:b0:5d:86:30:f7:8b:46:
         a8:f4:e5:65:69:07:ea:02:be:cb:5b:42:52:98:3f:77:60:8f:
         df:ca:bc:29:61:45:4d:67:57:b1:73:61:d6:9d:bd:2e:fc:23:
         24:e0:69:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:24:15 2025 by rpki-client