Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b/660b6ef1-15a1-3567-b23c-72a0083f376d.roa
File:                     660b6ef1-15a1-3567-b23c-72a0083f376d.roa (raw, json)
Hash identifier:          YvLuuPckCXJ0nhbYb3/mRJJAjJLmvpXecLYiWH0/cD4=
Subject key identifier:   C3:AD:C9:FC:01:A1:3D:98:1D:98:AC:23:12:FE:0F:48:6B:E5:4D:96
Certificate issuer:       /CN=785ebc21-6768-44cb-a7b2-5c9a920d572b
Certificate serial:       010D0C9F43285849EBEA4680E866A817A02E4AC0
Authority key identifier: 59:A6:95:F8:1F:93:28:42:47:18:07:4B:59:86:B3:E1:00:01:4F:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b/660b6ef1-15a1-3567-b23c-72a0083f376d.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     399870
IP address blocks:        23.129.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b/785ebc21-6768-44cb-a7b2-5c9a920d572b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b/785ebc21-6768-44cb-a7b2-5c9a920d572b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:46:80:e8:66:a8:17:a0:2e:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785ebc21-6768-44cb-a7b2-5c9a920d572b
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=641f1b5c-9f2d-402a-9445-96cb0be5c57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d6:aa:3e:70:8a:e0:ca:a8:54:b0:ab:0d:ce:
                    16:39:b2:ee:0c:7f:61:1f:08:b3:b2:b1:5d:9a:dd:
                    c9:07:a8:fc:71:5a:e8:18:79:22:24:d9:75:e6:61:
                    ab:d5:83:58:5c:25:8e:39:47:7d:9d:5b:11:3d:08:
                    00:e6:1c:65:cd:84:28:b1:1a:ca:05:37:1d:91:94:
                    63:e6:1c:b8:64:3f:7a:cc:fa:98:46:79:bb:70:e8:
                    41:97:90:4a:3b:0f:78:c1:d2:f4:90:a5:39:df:65:
                    3b:4d:2a:03:bf:25:d2:a0:43:45:75:3e:f2:97:74:
                    9c:78:dc:38:ef:03:2b:4a:20:78:52:61:89:86:2e:
                    20:a7:b8:5f:bc:ff:bf:6c:9c:54:a1:c6:93:65:65:
                    c5:9f:f5:1c:71:78:64:4d:fc:d6:f7:85:18:e1:a1:
                    3f:99:6b:8a:33:32:82:d6:77:c1:c2:0a:de:82:5c:
                    5d:c2:a9:5e:48:44:b0:0f:34:aa:f7:da:b7:df:e5:
                    0d:25:a2:d4:16:4a:c2:10:34:24:52:e8:57:7f:0b:
                    69:11:d3:20:25:da:c7:7c:f3:cf:28:62:68:46:8c:
                    f5:5b:9e:e5:8a:2c:2c:3b:e1:b4:93:49:be:e2:e6:
                    99:0d:30:62:cb:1d:4e:fc:45:8c:8a:13:24:08:73:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AD:C9:FC:01:A1:3D:98:1D:98:AC:23:12:FE:0F:48:6B:E5:4D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b/660b6ef1-15a1-3567-b23c-72a0083f376d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b/785ebc21-6768-44cb-a7b2-5c9a920d572b.crl

            X509v3 Authority Key Identifier:
                keyid:59:A6:95:F8:1F:93:28:42:47:18:07:4B:59:86:B3:E1:00:01:4F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/785ebc21-6768-44cb-a7b2-5c9a920d572b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:65:46:71:a4:51:28:b3:ee:cc:5e:ac:f1:c4:a2:42:11:c2:
         5a:e0:51:17:6b:db:c6:18:b8:05:de:f7:fd:87:07:30:8c:c2:
         42:e2:3a:cb:2a:c2:f7:a1:da:e1:b5:1f:e3:7e:a9:09:01:6e:
         3f:2d:cb:0d:2e:68:5f:85:7e:0a:9a:ce:0f:ee:26:25:1f:f3:
         c6:23:52:62:e3:32:e4:ac:b3:5f:cf:02:b1:f0:d0:da:c0:e3:
         7f:68:dd:7c:ae:85:75:1d:43:bb:2e:4f:11:0b:b0:3a:ba:12:
         86:55:33:5c:43:33:f1:c1:eb:ae:35:04:77:68:ba:2f:1c:81:
         e4:13:02:0a:13:96:f8:22:2e:4a:9d:7a:15:f5:8f:74:99:6f:
         a8:5f:1f:2e:3b:27:8a:f0:bc:96:c1:c5:f0:7f:ff:a2:bf:45:
         d2:ee:e8:33:f7:62:de:f0:d7:7f:bd:9b:da:b4:c1:41:a1:b1:
         e2:88:f9:0a:bd:40:2b:7e:a2:1f:1a:97:cf:b4:4a:a0:a9:01:
         97:63:e6:4d:31:bd:b8:62:73:99:62:96:2f:a1:5f:34:51:48:
         12:ef:56:d1:70:bc:4a:41:f4:8f:ce:a1:cc:19:ea:2b:14:13:
         44:a6:63:48:56:d1:6b:f8:59:9e:08:56:93:62:b4:35:a4:5f:
         bb:40:ac:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:18:54 2025 by rpki-client