Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/66dc2402-87f5-3219-9d90-edde17daef32.roa
File:                     66dc2402-87f5-3219-9d90-edde17daef32.roa (raw, json)
Hash identifier:          ZSF6XwglZ2ZM5LIWKAWwfFDOFdh0Tr6TnlbbfUBCvBU=
Subject key identifier:   4F:AB:CE:E3:1B:7F:DE:90:95:81:69:37:71:D6:B1:10:43:F5:EB:E0
Certificate issuer:       /CN=ceabafc1-2de6-4194-a43b-862ad745c553
Certificate serial:       010D0C9F4328584A4F05D202079455C51E267AC0
Authority key identifier: F8:33:24:2F:9F:2F:81:01:B2:59:60:AC:16:B7:CF:BC:B4:BB:52:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/66dc2402-87f5-3219-9d90-edde17daef32.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     53740
IP address blocks:        23.159.32.0/24 maxlen: 24
                          23.159.33.0/24 maxlen: 24
                          98.142.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/ceabafc1-2de6-4194-a43b-862ad745c553.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/ceabafc1-2de6-4194-a43b-862ad745c553.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:d2:02:07:94:55:c5:1e:26:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceabafc1-2de6-4194-a43b-862ad745c553
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=98f74ee5-f19c-4474-a7ad-f9ed475dedef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:a9:d4:c6:98:1f:3c:24:93:f1:10:0c:7d:
                    2e:e6:1a:26:5b:8e:6c:18:c0:02:b4:1a:46:15:fa:
                    bd:d3:5c:65:2e:a3:a4:7d:a7:e9:0e:75:ad:b4:06:
                    91:dc:06:3c:98:cf:14:fe:26:d9:42:1f:48:41:dd:
                    db:c4:bc:ac:01:3a:29:47:14:d2:1a:50:cf:6b:cb:
                    da:70:77:4c:7d:de:da:89:90:fd:d9:7a:69:2a:fb:
                    b6:42:94:86:c4:8d:96:b9:94:bc:0c:82:82:c9:3f:
                    e3:1f:6a:44:8a:7e:83:6f:d1:c6:73:f4:6f:cb:2c:
                    03:27:2a:64:cc:b1:e4:59:b2:db:a4:84:1e:f3:27:
                    38:af:6d:df:ab:8c:c9:53:90:31:82:a9:c7:35:b7:
                    90:39:f7:f0:c5:f8:78:8e:1c:e0:26:32:c7:9e:ee:
                    cc:4a:1c:46:4a:d7:0b:70:5e:8f:97:a0:c4:e5:fd:
                    53:7c:f3:2f:26:75:9d:9b:82:47:39:5c:06:ff:ba:
                    6a:a4:10:a9:4d:74:eb:3a:25:20:3a:20:b6:ad:ae:
                    2c:9f:e0:52:68:09:ef:56:7c:fa:59:5c:38:ca:1f:
                    93:c6:ed:cd:15:f7:03:57:48:6a:43:1f:f6:b7:ad:
                    eb:d0:4f:7f:66:e3:94:b8:4b:73:8e:97:b1:9f:9f:
                    cb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AB:CE:E3:1B:7F:DE:90:95:81:69:37:71:D6:B1:10:43:F5:EB:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/66dc2402-87f5-3219-9d90-edde17daef32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/ceabafc1-2de6-4194-a43b-862ad745c553.crl

            X509v3 Authority Key Identifier:
                keyid:F8:33:24:2F:9F:2F:81:01:B2:59:60:AC:16:B7:CF:BC:B4:BB:52:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.32.0/23
                  98.142.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:2c:b5:c3:d4:3d:ae:be:5b:f0:18:81:e7:79:72:01:73:36:
         61:07:66:66:02:d3:c5:d0:b2:18:73:cc:6a:f9:a2:31:10:f7:
         e4:67:56:2b:e1:4d:34:62:d7:63:cf:54:38:52:e9:56:00:fc:
         ca:41:67:aa:71:b6:8e:86:d0:db:5c:5a:89:7a:f8:3b:44:00:
         9c:cb:03:97:df:6f:7f:41:34:d5:1d:a3:32:55:57:ac:9a:6c:
         f3:39:e7:30:e7:a6:74:8b:1a:c6:d2:2c:09:28:fb:5d:af:f1:
         e4:41:8b:65:61:d2:d2:6f:e4:51:0e:1f:3e:d4:d3:f9:6f:d5:
         99:36:b4:68:78:7e:35:4f:d2:0a:4b:65:c5:ea:a0:c4:2a:ea:
         66:09:6f:7c:e3:d5:10:f1:ac:1c:d8:25:36:ee:3d:b5:fe:01:
         04:50:80:7a:e6:5c:7a:e1:0c:3e:7a:25:aa:89:87:e4:bb:c0:
         2d:15:30:23:94:7a:a5:65:91:fc:0e:da:8e:44:2a:9f:4f:b0:
         23:3c:70:3b:05:a7:34:8d:0d:0a:04:f4:a3:ac:a6:08:1a:7b:
         aa:ad:14:ae:20:25:57:b2:66:40:ae:9b:a9:93:ef:1c:ec:7c:
         d6:ee:d0:07:a7:bc:06:de:81:27:40:e1:4b:e5:d3:10:cd:21:
         32:e3:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:49:01 2025 by rpki-client