Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/cea2ec17-5d07-3b0a-8477-302a4c9631df.roa
File:                     cea2ec17-5d07-3b0a-8477-302a4c9631df.roa (raw, json)
Hash identifier:          sT6EtmNLkVosay9/8uoKLwvquf/fiqMuoM2X15rizFI=
Subject key identifier:   6B:32:B5:5F:D2:6D:FD:B6:9C:0F:3A:65:CF:3C:16:7C:C7:F8:2A:02
Certificate issuer:       /CN=16b561b0-e462-4e18-a6cf-e910426a13d0
Certificate serial:       010D0C9F4328584AAC11DFD396A029ED74F91B98
Authority key identifier: E3:6E:D8:A5:DD:D6:C0:5D:82:7E:73:E5:8C:35:72:5C:02:B7:6D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/cea2ec17-5d07-3b0a-8477-302a4c9631df.roa
Signing time:             Mon 28 Jul 2025 20:55:49 +0000
ROA not before:           Mon 28 Jul 2025 20:55:49 +0000
ROA not after:            Sun 26 Oct 2025 20:55:49 +0000
asID:                     394590
IP address blocks:        23.144.104.0/24 maxlen: 24
                          2607:ec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/16b561b0-e462-4e18-a6cf-e910426a13d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/16b561b0-e462-4e18-a6cf-e910426a13d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ac:11:df:d3:96:a0:29:ed:74:f9:1b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b561b0-e462-4e18-a6cf-e910426a13d0
        Validity
            Not Before: Jul 28 20:55:49 2025 GMT
            Not After : Oct 26 20:55:49 2025 GMT
        Subject: CN=c2fb7fcc-f224-47c5-beeb-8f2b46b2f297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:11:f9:c4:eb:28:92:02:64:23:2e:33:98:ee:
                    0a:e6:d7:ff:aa:30:1d:ed:15:87:59:46:8f:2f:40:
                    cb:3b:6b:b3:0d:f3:97:a2:8b:98:d5:4b:ff:4d:93:
                    01:c6:bf:6a:34:93:76:da:a3:f8:a2:14:76:a9:ef:
                    9f:70:12:c5:56:dc:e7:73:31:d3:3d:df:25:c9:ae:
                    cf:cb:62:ea:5c:54:6e:90:d5:e6:ad:dd:57:d5:56:
                    ba:7f:5f:17:20:4e:75:49:67:d2:e5:e2:55:d6:44:
                    09:d8:90:a9:dd:5f:1d:31:aa:ab:93:d4:ed:43:bb:
                    87:6d:99:73:1e:c4:c8:0a:55:a0:db:29:bd:a3:84:
                    97:96:b3:f6:77:3b:5a:51:fa:45:af:ec:90:d1:d5:
                    c8:27:b8:a3:bf:1b:bf:76:8a:68:04:d6:af:18:01:
                    b7:76:05:54:02:bd:12:75:4f:d1:07:91:69:5b:d3:
                    6f:c1:f0:d5:d2:b8:83:95:91:c5:3d:3e:b5:68:6d:
                    94:59:6d:64:21:db:99:ea:d9:35:1f:d8:da:59:83:
                    c7:b1:08:3e:40:ef:10:39:ba:f1:67:85:59:8c:9a:
                    73:b4:7a:4a:b6:32:67:83:09:d3:6c:df:98:61:24:
                    af:ac:64:df:dc:ae:0f:1a:d3:8e:04:b6:4a:76:03:
                    36:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:32:B5:5F:D2:6D:FD:B6:9C:0F:3A:65:CF:3C:16:7C:C7:F8:2A:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/cea2ec17-5d07-3b0a-8477-302a4c9631df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/16b561b0-e462-4e18-a6cf-e910426a13d0.crl

            X509v3 Authority Key Identifier:
                keyid:E3:6E:D8:A5:DD:D6:C0:5D:82:7E:73:E5:8C:35:72:5C:02:B7:6D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.104.0/24
                IPv6:
                  2607:ec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:13:7c:e4:a5:09:72:e4:36:d5:4b:56:37:ce:cf:5f:1c:dd:
         27:2c:c0:99:93:5b:e5:98:2b:0d:ca:c2:16:93:9f:19:51:a9:
         48:ac:b2:2a:f0:fa:75:c9:b7:5a:96:28:51:44:70:0f:13:b5:
         f3:bd:70:f8:77:38:3b:6b:d4:d9:6a:da:4f:af:d8:39:b0:4a:
         c0:e0:36:2a:b8:29:b0:f7:c4:55:3c:51:89:4c:c6:59:ce:7e:
         2e:af:b9:f7:6c:a7:3a:e4:3a:1a:20:49:2d:2e:44:78:22:c5:
         cb:b7:74:40:5f:ea:0f:96:1b:e1:98:23:93:bd:7c:3e:70:9b:
         da:f1:d7:fa:74:ed:23:ba:72:f3:15:7a:3c:45:7d:e9:47:53:
         45:24:d8:0c:a3:ba:03:0c:26:2f:ed:18:f4:83:5c:de:2e:de:
         b5:30:7d:eb:89:3c:ca:ba:10:f8:58:97:91:54:a0:cd:14:e0:
         2b:e6:80:b6:d2:e7:26:7f:a8:47:a9:8b:ed:b3:86:b5:2d:51:
         91:12:05:85:5d:dd:d0:9b:12:fb:a9:48:29:b0:8a:a4:41:af:
         ff:b5:bb:72:73:37:23:b8:fc:9e:bb:34:0f:31:23:ee:9c:d6:
         ae:4d:5d:b6:b5:59:88:ce:8c:80:47:8f:b6:e1:34:e3:5b:cb:
         f6:8f:a7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:12:01 2025 by rpki-client