Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/b1689224-3522-322c-b540-085659c0b310.roa
File:                     b1689224-3522-322c-b540-085659c0b310.roa (raw, json)
Hash identifier:          OJ401ZBR8HFxFluxU8rojo9Lv+8TBD30l6Cn/fgApYs=
Subject key identifier:   B9:46:15:94:11:D5:AA:08:08:EC:44:07:49:AF:90:4C:B4:A5:5A:E6
Certificate issuer:       /CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Certificate serial:       010D0C9F4328584A4540422A6ECE8F7FA820940C
Authority key identifier: 9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/b1689224-3522-322c-b540-085659c0b310.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     19740
IP address blocks:        23.173.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:42:2a:6e:ce:8f:7f:a8:20:94:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816b4d34-3880-4b72-b786-365fbdec8ba0
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=3d181d58-600e-4d72-a01a-3af31a3fc904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:5b:c6:a8:81:0f:99:60:98:48:82:fa:c5:
                    50:3b:b4:9a:77:be:06:40:59:f4:2a:ba:23:97:9c:
                    ca:73:71:7f:ea:78:39:d2:6c:6b:34:63:57:53:de:
                    47:ee:2b:66:60:4c:fa:73:10:a8:c5:8b:1b:9f:2e:
                    9a:0b:2e:b0:49:bc:7a:d2:a7:16:ca:4a:2b:5b:5f:
                    9d:40:dd:14:43:23:ea:4b:6f:b3:9d:5f:95:58:69:
                    d0:82:98:e7:7f:0f:9f:db:6f:02:38:2b:d8:80:be:
                    55:4d:d1:62:08:b7:e3:51:a6:a0:c1:60:f7:4b:6e:
                    01:33:1a:b2:bf:33:32:a9:c3:74:65:1f:7e:4c:34:
                    9e:c9:71:04:13:3e:b5:3b:04:b1:e1:b7:af:92:60:
                    c7:1d:bf:b4:7c:02:58:65:0a:3f:a4:d6:c7:49:9b:
                    43:64:03:40:2b:25:05:8d:06:23:20:b4:87:20:f0:
                    1d:d3:c3:5a:a3:23:0a:61:64:28:ce:76:aa:96:af:
                    1b:e0:dd:84:57:77:fc:73:cf:31:1e:24:f9:7b:47:
                    de:ae:2c:ba:02:33:3a:f7:c9:ab:7c:f9:bf:52:fb:
                    9a:39:f1:7e:6b:f8:4f:bc:e7:61:d0:26:00:54:ae:
                    a2:28:56:a1:63:e7:3a:34:b2:a6:c3:3f:3b:31:0e:
                    ae:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:46:15:94:11:D5:AA:08:08:EC:44:07:49:AF:90:4C:B4:A5:5A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/b1689224-3522-322c-b540-085659c0b310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:eb:83:a9:0d:67:c8:11:61:d7:6e:00:d5:d8:31:59:5d:11:
         a1:f4:a8:32:a6:4d:85:3c:04:62:73:52:6e:1b:12:15:d0:80:
         77:81:0f:e9:28:39:29:3d:e2:4a:0d:51:a1:4f:96:dc:a8:31:
         79:7c:73:59:bd:4a:79:12:dc:a6:d4:e1:be:17:e6:63:f5:d9:
         7d:aa:60:05:7b:4d:8a:bd:c8:ca:07:d0:05:8c:68:b3:d3:a0:
         c5:d4:d3:dd:e7:db:78:0d:a3:90:75:ca:af:a2:e3:27:d0:62:
         93:c5:de:99:01:bc:fa:82:0e:f1:53:fb:f4:de:60:46:bb:13:
         d4:c7:f5:0d:7e:67:54:28:9f:cf:c8:0e:89:2a:03:be:e7:da:
         50:38:af:2c:3c:10:5f:ed:6b:93:45:36:75:7c:db:64:b4:3f:
         5c:bb:7c:36:fc:90:9a:81:f5:52:5b:c9:d0:ce:fe:7f:aa:6f:
         28:c8:1d:4b:9c:75:41:59:f0:f3:e8:4c:0f:87:14:3d:91:31:
         ae:a3:b7:1b:36:ee:d1:93:70:f2:13:86:cf:3b:38:4b:05:f5:
         8e:f9:95:b9:3f:fd:6c:5c:87:89:c0:6f:c4:e9:69:77:a0:75:
         ad:dc:1d:d4:81:1d:4e:b8:97:fb:d8:4e:51:d1:e3:81:f3:72:
         92:69:e0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:17:52 2025 by rpki-client