Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/0740643a-762d-38e5-a671-ae13f20f7987.roa
File:                     0740643a-762d-38e5-a671-ae13f20f7987.roa (raw, json)
Hash identifier:          MI+wKMgILqmPovBCn9ZtA8zi8/32rT0GWeB9GmhksQk=
Subject key identifier:   5E:BE:09:95:DF:B0:CF:3A:C3:41:AF:57:C6:00:19:46:FF:E6:B4:57
Certificate issuer:       /CN=8e5b6975-a14a-49a5-bbe6-66396778d718
Certificate serial:       010D0C9F4328584A77E486E0CC97CC5F23FA2940
Authority key identifier: 5C:C1:7D:61:BF:86:1A:A5:EF:54:15:7A:62:D8:0F:E8:61:83:39:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/0740643a-762d-38e5-a671-ae13f20f7987.roa
Signing time:             Thu 10 Jul 2025 04:22:25 +0000
ROA not before:           Thu 10 Jul 2025 04:22:25 +0000
ROA not after:            Wed 08 Oct 2025 04:22:25 +0000
asID:                     26766
IP address blocks:        23.130.148.0/24 maxlen: 24
                          2602:f77a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/8e5b6975-a14a-49a5-bbe6-66396778d718.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/8e5b6975-a14a-49a5-bbe6-66396778d718.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:e4:86:e0:cc:97:cc:5f:23:fa:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5b6975-a14a-49a5-bbe6-66396778d718
        Validity
            Not Before: Jul 10 04:22:25 2025 GMT
            Not After : Oct  8 04:22:25 2025 GMT
        Subject: CN=0420fe4f-60f2-40f9-8454-25f8c3f0e9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:1c:72:90:da:da:c1:ab:e1:26:be:09:08:
                    1e:52:a4:87:ab:e3:44:ee:79:ba:a3:d0:f8:84:7e:
                    72:96:2d:d8:fe:aa:9f:36:53:7f:cc:79:4b:70:cb:
                    17:63:f2:4a:e4:77:33:78:46:ab:dc:87:63:a4:cd:
                    16:f4:86:b6:1e:9a:cf:c2:06:18:ee:34:bd:48:90:
                    53:3c:4b:3d:07:7e:9c:66:35:b4:88:53:86:53:b5:
                    cb:77:7b:95:8c:62:a8:6b:55:1b:35:ff:fb:3e:32:
                    ee:99:6b:dc:0e:15:62:78:f3:aa:1a:f2:d2:f6:89:
                    64:84:eb:3d:aa:f5:6e:0d:46:3e:1b:c2:19:54:06:
                    93:e2:c3:ec:04:83:1e:c8:d1:19:a5:7d:ec:c5:48:
                    c8:ca:44:9b:b6:d9:20:b0:27:d3:e1:9a:c1:e3:4a:
                    35:2d:3e:42:85:03:e1:b8:a2:f6:86:f1:b6:8a:42:
                    72:2e:74:50:ec:eb:83:98:29:57:a2:57:12:13:0c:
                    c3:41:26:72:40:8a:a6:9b:41:bd:28:b8:4c:62:4f:
                    d4:7f:2c:73:74:1e:3a:c1:34:df:f0:44:25:5a:3c:
                    46:71:7f:87:4d:f2:e4:a3:08:ed:16:c2:6b:cc:5d:
                    21:2f:95:b6:16:c3:b5:60:61:04:bb:6f:74:22:4a:
                    eb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BE:09:95:DF:B0:CF:3A:C3:41:AF:57:C6:00:19:46:FF:E6:B4:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/0740643a-762d-38e5-a671-ae13f20f7987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/8e5b6975-a14a-49a5-bbe6-66396778d718.crl

            X509v3 Authority Key Identifier:
                keyid:5C:C1:7D:61:BF:86:1A:A5:EF:54:15:7A:62:D8:0F:E8:61:83:39:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.148.0/24
                IPv6:
                  2602:f77a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:3f:e4:63:5e:0e:94:11:8d:0a:de:6f:e4:36:36:7d:28:81:
         c5:54:81:c6:14:cd:5a:4f:87:e9:15:d0:51:98:d9:93:95:5b:
         6f:46:90:8d:09:87:fb:2b:17:53:a0:62:59:c1:a8:36:5b:da:
         d5:74:4b:e7:5b:0c:82:a6:5d:91:fc:51:e4:2e:c9:b1:0b:9a:
         80:11:94:95:15:2d:40:c1:06:8f:a7:3d:68:d1:db:60:3c:bc:
         8c:16:d7:a3:c0:51:e2:ff:e9:7e:01:59:3b:3b:76:d6:76:7f:
         71:b5:b7:7b:98:88:a9:d0:76:8e:25:ea:24:df:f0:dc:ef:b6:
         f3:3e:93:b2:35:91:34:01:a8:fd:9a:7f:b2:2c:31:91:fd:2a:
         ac:2a:ec:c4:b9:69:03:bf:48:cb:58:8b:a9:06:3a:46:51:2a:
         4a:ff:64:e9:b8:ed:28:21:92:6b:30:6f:a3:c2:c2:fc:5b:98:
         b8:78:a9:25:c8:a5:cb:ab:ca:3b:1b:9d:38:e9:3d:33:d5:03:
         b6:13:09:93:60:f0:e3:85:89:9b:85:35:84:dd:66:ee:c4:f1:
         d8:18:ac:cf:92:10:44:50:c9:5a:49:da:c7:d3:fd:29:35:13:
         71:88:07:a2:73:4d:ad:9a:de:4f:4d:11:0c:04:c4:74:36:5f:
         48:94:ee:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:04 2025 by rpki-client