Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/847d4837-dad4-36ec-a86b-505d52bdaacb.roa
File:                     847d4837-dad4-36ec-a86b-505d52bdaacb.roa (raw, json)
Hash identifier:          JdE+VgWsRe37e1akB+I97WmbPt/aH0OvbbQjenTPq7I=
Subject key identifier:   EB:34:36:92:27:E6:50:BD:08:D2:0D:A9:22:4D:30:03:A8:6C:30:37
Certificate issuer:       /CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a
Certificate serial:       010D0C9F4328584A56004550DA3BB91CE9DBF400
Authority key identifier: E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/847d4837-dad4-36ec-a86b-505d52bdaacb.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     33628
IP address blocks:        23.144.128.0/24 maxlen: 24
                          69.171.160.0/19 maxlen: 19
                          2604:840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:45:50:da:3b:b9:1c:e9:db:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=67cb0db6-5985-42be-81d4-82b09b76a286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:08:9a:db:4f:ae:73:78:6a:8a:26:26:72:6c:
                    09:d9:8b:b8:2c:39:aa:24:59:bd:42:31:36:13:3d:
                    a5:37:c5:e3:35:50:2b:e7:e0:6a:7b:48:21:d3:38:
                    03:bb:7a:07:1a:ac:ec:95:19:1c:a5:1a:4b:88:e2:
                    b6:96:0e:4b:3f:42:56:60:a4:ec:f7:74:d6:21:22:
                    97:b3:d2:6b:9d:f3:94:5d:84:7b:8f:a0:fc:b7:6b:
                    ab:65:e4:01:32:58:1a:cc:f0:ff:6f:bc:5a:8f:25:
                    02:2c:2f:52:4f:14:6d:05:f3:04:08:c9:53:af:3c:
                    c6:5f:9b:6e:dd:87:b5:2d:47:cd:09:16:e2:72:a1:
                    b9:00:eb:9e:d4:c8:b5:ca:ad:3f:6c:a7:8e:5e:76:
                    2d:6c:90:32:2c:b8:5c:bf:4e:70:39:f1:ed:ec:75:
                    8e:1c:66:aa:43:62:82:1c:f5:3e:fd:7e:c1:bb:49:
                    85:aa:6f:4b:ba:3f:a8:22:c9:44:5a:0a:a0:6f:65:
                    ca:ed:cd:7c:76:77:34:1f:fd:69:fd:97:09:e5:9d:
                    87:d7:56:55:ec:f6:cf:b2:2a:9f:2c:61:f3:23:5d:
                    30:0a:de:4b:12:fd:cd:cf:b2:6c:74:bc:48:7c:3a:
                    91:b9:79:fb:c0:a2:23:20:7c:f6:f0:ae:b7:36:f1:
                    03:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:34:36:92:27:E6:50:BD:08:D2:0D:A9:22:4D:30:03:A8:6C:30:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/847d4837-dad4-36ec-a86b-505d52bdaacb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.128.0/24
                  69.171.160.0/19
                IPv6:
                  2604:840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f6:09:9a:14:ae:3a:74:56:8d:c6:77:34:df:f1:72:14:ff:
         14:bc:54:bf:80:62:17:d8:51:da:4c:81:2a:0f:78:28:57:b8:
         84:3c:25:79:be:97:1f:fa:0d:10:6e:73:30:e4:92:33:29:46:
         2d:34:98:17:10:de:fc:54:1a:b0:67:d7:d1:25:21:f3:a9:f7:
         07:fb:3c:1b:f1:d1:da:b7:89:f9:87:c2:2b:53:74:da:31:74:
         14:bc:fd:e6:b5:7c:2d:8f:b2:d6:22:55:2d:03:44:b5:01:7f:
         54:0c:9f:67:df:ad:eb:3d:0f:09:85:eb:69:cd:ee:fe:13:4e:
         55:e2:b3:1d:db:20:a1:0f:b3:8a:7f:97:e8:40:15:70:13:13:
         78:e7:dd:77:79:b7:67:67:a1:87:f2:95:85:2e:5e:b8:41:a7:
         bb:9a:e5:a3:d6:03:2e:6d:ea:38:00:b6:ef:80:59:cf:69:c0:
         50:6c:46:06:7b:97:18:1f:90:a4:f0:33:df:36:92:84:54:b5:
         99:63:34:03:27:07:f6:ea:b4:71:df:10:0a:8a:20:c2:72:03:
         ea:b2:74:69:90:ab:9f:50:92:ca:98:14:fb:66:2b:91:f5:1e:
         6f:c2:26:41:70:20:a2:f5:d7:d8:1a:40:bf:f1:b9:c7:e3:d7:
         53:3e:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:55:36 2025 by rpki-client