Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/dc37949b-fd68-31d3-8530-d51a972e599a.roa
File:                     dc37949b-fd68-31d3-8530-d51a972e599a.roa (raw, json)
Hash identifier:          dkAc8/h9bBfbeMnb29r+Xfee8RF1m9rNacEpHs1WZ4M=
Subject key identifier:   AB:D2:BB:15:21:A9:77:64:7F:10:A3:5A:53:88:C7:99:18:00:74:EB
Certificate issuer:       /CN=4c7bb7c9-9462-45de-9a96-5887b6042f79
Certificate serial:       010D0C9F4328584A3A157B03176FEE24ACC39E00
Authority key identifier: DA:DD:B7:A5:36:89:D6:40:54:A6:6B:41:71:04:A1:F4:04:9E:83:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/dc37949b-fd68-31d3-8530-d51a972e599a.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     400719
IP address blocks:        23.140.168.0/24 maxlen: 25
                          2602:80f:c000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:7b:03:17:6f:ee:24:ac:c3:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c7bb7c9-9462-45de-9a96-5887b6042f79
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=63eafd26-6ed4-4835-b69c-e152bf9c1845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ce:70:ca:11:79:27:6f:c8:de:fc:ed:ac:9d:
                    7a:4c:3f:32:b1:64:a5:35:bd:e3:6b:ae:e1:e6:69:
                    28:ac:da:a3:ba:6c:86:39:a5:a4:ee:52:c4:55:81:
                    1c:35:8a:b1:89:11:1b:bb:a2:0b:8e:ca:26:b2:63:
                    de:6b:6c:3f:f1:d7:be:34:c3:e7:6c:f8:ed:22:d6:
                    ee:13:8c:89:2a:ee:19:58:38:d1:76:1b:08:c4:95:
                    b8:06:9d:ca:88:eb:7a:e8:26:76:87:36:4d:51:eb:
                    44:7e:2f:fe:a1:1f:fd:c1:8f:67:52:53:5c:ba:91:
                    f2:f6:48:f7:80:47:5f:d2:76:69:e8:13:18:28:98:
                    ac:2d:cf:87:4f:7f:a2:3c:4a:11:2a:9f:fd:f9:38:
                    c0:81:01:95:c2:6d:e3:4a:eb:0d:3b:be:c7:06:c5:
                    a0:5d:7e:3f:86:64:fe:5e:3a:4c:02:fc:df:56:d5:
                    82:88:a9:ce:34:25:33:41:86:02:86:e1:02:06:6c:
                    57:30:5d:aa:90:e4:96:f6:5d:c2:54:f5:cd:16:8f:
                    ec:a1:f6:b2:af:c1:ca:5c:0e:e9:f2:a8:c8:83:2b:
                    1e:af:d4:b8:a8:74:e6:6f:3c:bf:1c:a3:af:04:12:
                    20:9f:b8:10:e9:b3:20:9b:11:ef:ed:30:8a:3f:48:
                    1b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D2:BB:15:21:A9:77:64:7F:10:A3:5A:53:88:C7:99:18:00:74:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/dc37949b-fd68-31d3-8530-d51a972e599a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.crl

            X509v3 Authority Key Identifier:
                keyid:DA:DD:B7:A5:36:89:D6:40:54:A6:6B:41:71:04:A1:F4:04:9E:83:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.168.0/24
                IPv6:
                  2602:80f:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:bd:47:7c:2b:fb:66:8f:78:8d:39:e5:c4:f9:e9:87:16:36:
         c2:ca:e5:8e:28:2c:93:dc:35:66:97:ae:7b:f5:ea:a7:79:d5:
         01:d0:25:52:56:e5:ff:1f:07:67:14:2e:fd:70:b3:0c:75:c6:
         fe:3c:74:a2:1b:4f:65:40:59:9f:ca:34:3a:94:95:75:38:95:
         d3:2d:9f:d8:b3:a9:fb:95:3d:03:74:21:7c:0a:36:f8:6d:8c:
         6d:d3:be:31:5d:a5:e7:1c:12:83:48:c4:9c:66:6b:c3:61:51:
         b2:de:84:9b:4f:29:50:fc:f3:94:66:b0:5c:64:4c:06:6e:4b:
         c1:ba:97:40:81:40:79:0d:ab:e1:40:d0:de:b9:16:21:10:44:
         6d:bb:22:c9:65:01:ec:78:af:58:4d:6a:20:20:fe:d0:e7:7e:
         b3:4b:34:3a:03:22:55:c6:51:3c:90:1d:06:55:17:b9:cd:ac:
         53:ac:8a:f3:6f:35:a7:16:12:5e:67:2e:be:ec:3a:0b:5e:fc:
         0e:d8:36:fd:1d:92:7d:21:63:34:b2:a2:d6:43:1c:7a:a4:1f:
         d4:ef:f3:0f:c4:18:d0:0e:4a:ab:ce:c2:52:82:a7:2b:81:71:
         2d:74:cb:96:2d:8e:5b:aa:e5:66:9a:1f:51:84:d2:d4:ef:ce:
         40:70:fc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:39:23 2025 by rpki-client