Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/569d1a29-a9c7-33f8-beae-2aece4ea2526.roa
File:                     569d1a29-a9c7-33f8-beae-2aece4ea2526.roa (raw, json)
Hash identifier:          96Q8kmoInVMQPLNTwmafnBZcRZwxv1+W4nH2Ms+n4fg=
Subject key identifier:   10:73:BF:A8:3D:F9:FE:DF:3E:AF:E6:CF:A2:6E:0A:DA:19:E7:D2:36
Certificate issuer:       /CN=ed8de71a-67d9-43ce-bbb9-c7974f6f8b23
Certificate serial:       010D0C9F43285849DB2A30BF163EEB376DC68440
Authority key identifier: FE:BC:48:C5:C5:67:DF:6F:50:F2:F7:3B:5C:CD:4D:90:27:8B:E7:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/569d1a29-a9c7-33f8-beae-2aece4ea2526.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     46664
IP address blocks:        23.172.112.0/24 maxlen: 24
                          23.172.113.0/24 maxlen: 24
                          23.172.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:30:bf:16:3e:eb:37:6d:c6:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8de71a-67d9-43ce-bbb9-c7974f6f8b23
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=954ee8ad-0439-46f9-ae50-127e45415101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e6:f8:df:ac:9c:87:55:5b:8f:5a:91:7e:46:
                    e0:2c:95:ef:05:b6:53:b2:d4:65:45:dc:d3:f3:3b:
                    21:86:13:3d:42:57:6d:8f:76:9a:ec:95:64:00:ab:
                    db:46:da:80:1f:ef:a2:bc:39:21:f0:1b:ed:9c:26:
                    a8:57:0b:f3:0e:d4:63:f5:22:af:86:8e:fd:97:e3:
                    18:70:d8:b4:99:85:d6:50:4e:50:08:0a:7d:e6:c0:
                    10:2e:ea:45:a3:f5:5e:da:65:b6:0e:79:d2:f7:69:
                    44:35:f6:3d:bd:81:f2:f3:c9:c8:e0:f0:2e:35:f5:
                    19:53:04:fb:c7:35:63:cf:3e:49:a8:f2:00:0f:e5:
                    00:26:92:cc:73:ee:e1:94:15:0f:fb:8b:43:f4:ed:
                    3e:38:fe:4d:ef:db:17:1c:b7:e1:9f:06:8d:ab:51:
                    81:9c:46:6f:96:e8:a2:3a:ef:dc:81:a9:84:22:9c:
                    ab:76:4e:ba:d5:cf:20:70:33:57:c1:18:a4:03:2a:
                    b8:d4:12:00:34:aa:6c:28:d6:2c:95:69:cd:1d:90:
                    94:fa:9f:f8:b9:7b:ae:ab:5a:54:38:30:36:06:06:
                    68:97:9e:12:46:23:a0:04:fc:7f:b0:2f:5c:e9:42:
                    44:9c:08:95:69:27:b0:f3:56:04:87:10:7f:e1:dc:
                    13:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:73:BF:A8:3D:F9:FE:DF:3E:AF:E6:CF:A2:6E:0A:DA:19:E7:D2:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/569d1a29-a9c7-33f8-beae-2aece4ea2526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.crl

            X509v3 Authority Key Identifier:
                keyid:FE:BC:48:C5:C5:67:DF:6F:50:F2:F7:3B:5C:CD:4D:90:27:8B:E7:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.112.0-23.172.114.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f8:40:80:ce:41:8c:a9:c0:00:ce:97:96:4c:3e:56:29:d6:
         2a:ba:50:08:6b:ff:57:e7:dd:d3:8e:fc:40:44:bb:9a:fb:50:
         54:d7:21:f9:1e:d1:2c:e0:72:bf:76:b3:a8:93:f5:45:d1:25:
         5e:f9:aa:41:88:ec:c0:7d:5b:4d:c7:71:28:83:55:24:cc:18:
         1a:3e:96:98:04:a7:32:e4:69:1d:73:ea:97:4c:98:e6:11:4b:
         90:01:97:56:0b:8c:49:e2:2a:6e:91:bb:2d:ff:61:28:fa:7b:
         1e:27:4c:a2:08:eb:7a:7a:e3:16:e8:81:fe:26:69:da:0d:67:
         67:3d:b2:0e:3e:ce:c8:4f:4e:b2:ea:31:0d:73:64:04:58:8d:
         8a:0f:9e:8f:8c:cf:5c:63:fe:5e:fc:88:c8:00:69:fa:f8:e8:
         39:ae:27:d6:55:f0:0d:f9:8f:d5:01:fc:9b:b9:77:55:a5:cc:
         69:96:00:d9:b4:9a:77:0c:cd:ee:0c:e3:b3:b6:b0:bd:b7:90:
         4f:d3:c7:71:98:92:b2:09:c8:af:c2:3a:74:6c:aa:5e:39:1c:
         f4:e4:ce:58:fd:b8:86:fe:a4:16:bf:98:08:7f:69:4e:82:fc:
         74:8f:a1:23:f9:af:31:9d:16:3d:d9:f6:e4:9d:72:17:fa:ae:
         b6:23:91:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:03 2025 by rpki-client