Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/a6b049fa-8259-3d76-b4e5-45a1be88bdda.roa
File:                     a6b049fa-8259-3d76-b4e5-45a1be88bdda.roa (raw, json)
Hash identifier:          nIumKwjPk2MI3cCNOzJFg8izuNmUdUcgBcCVg1kfXpI=
Subject key identifier:   3F:A0:03:15:E7:42:BB:66:0B:C1:36:F0:D0:6E:57:8A:05:A7:BE:AF
Certificate issuer:       /CN=1cf4d4e0-24be-4d3b-9028-c14846f6b0f3
Certificate serial:       010D0C9F4328584A1E2A9F5219985D2C6F441C80
Authority key identifier: 91:8F:8A:57:12:0B:3C:A3:C2:E0:06:E1:41:57:10:31:67:EF:25:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/a6b049fa-8259-3d76-b4e5-45a1be88bdda.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6304
IP address blocks:        23.136.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:9f:52:19:98:5d:2c:6f:44:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf4d4e0-24be-4d3b-9028-c14846f6b0f3
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=ac86f657-c15f-4c99-87ff-8c99c07e0a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:3a:96:93:ee:fa:93:73:27:18:9d:33:66:
                    d8:06:23:3c:a3:4b:d4:81:85:3d:dc:d5:9b:01:62:
                    87:08:37:85:d6:39:12:73:f9:3f:2a:c7:9e:f1:61:
                    0a:92:98:46:16:9c:0e:65:cf:0b:42:4f:18:b3:59:
                    e2:2c:e5:bb:52:ec:29:31:13:97:42:10:c3:5b:dc:
                    02:14:60:07:e9:9c:59:71:06:aa:d2:d7:43:6f:43:
                    e4:0b:79:19:b1:0c:99:de:74:14:40:b2:ee:1b:0b:
                    c3:0b:10:3e:bf:4d:db:87:69:ad:2c:30:16:40:20:
                    81:4d:f3:9e:9c:24:4e:31:8a:65:1d:88:1f:37:21:
                    e4:ad:87:4d:84:8d:44:41:c0:f7:aa:11:14:16:21:
                    01:27:c8:af:bf:b3:66:6d:10:bb:9a:17:2e:fa:2c:
                    65:99:b8:d2:dd:d8:e7:fe:dc:89:53:79:14:d3:5f:
                    c5:5f:81:63:5e:58:8a:5d:4e:98:90:2e:43:4a:9b:
                    6d:74:b6:8f:1a:a7:c2:aa:84:4c:cc:31:28:14:77:
                    ad:fa:b5:3f:e9:8d:6e:32:54:c0:be:96:04:d5:4f:
                    42:2f:c2:48:eb:18:7b:32:89:0d:84:e6:06:c1:a8:
                    88:6a:3b:83:b3:c2:14:32:82:68:45:9a:81:61:15:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A0:03:15:E7:42:BB:66:0B:C1:36:F0:D0:6E:57:8A:05:A7:BE:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/a6b049fa-8259-3d76-b4e5-45a1be88bdda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.crl

            X509v3 Authority Key Identifier:
                keyid:91:8F:8A:57:12:0B:3C:A3:C2:E0:06:E1:41:57:10:31:67:EF:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:18:2d:06:ce:af:64:2f:2c:1e:95:a6:f1:7a:41:64:9f:97:
         64:33:60:e6:8e:9d:a0:6e:54:d2:b0:f4:a1:f9:58:18:37:d0:
         09:76:ca:da:38:5e:8b:04:2d:97:b2:8f:68:4a:78:69:87:f4:
         5d:57:d0:05:f8:99:7a:09:a9:e8:e8:bf:a3:cc:61:30:59:6b:
         85:78:95:1e:7e:42:f7:86:b0:80:26:3d:43:c5:80:2b:14:b8:
         45:c4:6f:5a:77:d5:b0:3a:f2:57:52:41:89:63:6d:46:d0:14:
         9c:00:7f:4d:d0:db:75:43:ec:a1:2f:81:ad:ae:3a:a8:55:d9:
         49:63:67:4d:7e:ec:5c:8c:25:cf:3f:a9:91:f1:d0:a8:78:27:
         4a:94:32:eb:62:40:95:9b:ba:6e:b4:d4:38:22:7a:5e:f4:cf:
         ce:5f:18:04:fd:d0:2d:41:d7:64:9d:e0:8d:78:ca:e9:f6:ca:
         01:66:44:6f:79:b6:18:a9:1e:48:2e:c7:0c:ad:72:9e:e4:ec:
         30:58:88:5b:2d:8c:d9:78:70:8f:ec:c9:04:42:18:49:e8:7f:
         47:48:01:4e:90:db:0c:f5:8f:ae:48:12:b5:a0:0c:6f:28:67:
         a6:c0:fd:22:7e:ca:f0:5b:dc:37:18:24:22:c2:3a:d1:ac:c4:
         99:14:7b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:27:25 2025 by rpki-client