Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/7c79eb9f-d88c-3305-8247-4977e174ee96.roa
File:                     7c79eb9f-d88c-3305-8247-4977e174ee96.roa (raw, json)
Hash identifier:          /GJD6jVoo3SLj82agw9it/97QjbK/dJf/ckTazTmSVs=
Subject key identifier:   FD:CB:35:D3:D7:D9:4A:97:B5:12:FF:9A:52:A2:40:CD:EC:28:38:33
Certificate issuer:       /CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
Certificate serial:       010D0C9F43285849E91F9CCCB3E77500F496C680
Authority key identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/7c79eb9f-d88c-3305-8247-4977e174ee96.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     399525
IP address blocks:        23.185.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:9c:cc:b3:e7:75:00:f4:96:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=840159bd-54df-4fa4-aed7-71eb8861f484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b3:94:1d:f0:25:25:cf:30:9d:16:06:11:e5:
                    12:fe:4d:1e:49:db:b1:c3:d2:5a:91:dd:58:de:8f:
                    e2:8a:c1:6b:28:d0:fd:a4:18:56:b7:a1:02:ab:eb:
                    81:6a:fe:ae:07:b7:c2:ad:c5:8f:f4:9d:e1:a6:c6:
                    9b:db:9d:cb:38:e2:08:9a:d6:8f:96:45:41:e9:6d:
                    88:d2:4c:f4:a4:f9:a8:53:bd:80:28:d4:61:fa:5a:
                    22:4d:9d:98:f3:88:17:a7:a5:4e:a3:c1:83:38:4f:
                    e1:88:04:1e:d7:2b:d5:ef:16:c3:b7:9e:25:ba:70:
                    22:c5:3b:3c:3f:a2:55:36:5e:ae:f0:30:a1:54:cd:
                    92:98:2a:96:71:43:79:55:0d:cf:60:12:e6:a2:21:
                    9d:0f:72:a3:67:1f:5e:01:56:dc:2d:81:53:7d:9f:
                    07:6d:30:fc:d8:12:c8:47:55:f0:90:cd:70:04:6c:
                    ca:d8:61:09:e8:96:a8:56:80:e7:27:86:bf:1f:67:
                    0f:23:57:57:a6:95:eb:f2:62:bf:b3:99:bb:18:eb:
                    c1:d9:70:79:84:c7:e7:a6:85:b5:d1:04:3a:6b:19:
                    38:d5:de:b4:70:87:3b:ab:56:8d:bc:4f:ad:4e:4a:
                    d5:99:bc:06:a5:85:9f:ad:52:59:ff:a1:7d:41:df:
                    5e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CB:35:D3:D7:D9:4A:97:B5:12:FF:9A:52:A2:40:CD:EC:28:38:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/7c79eb9f-d88c-3305-8247-4977e174ee96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl

            X509v3 Authority Key Identifier:
                keyid:FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:2a:d4:e9:98:1f:56:e3:13:89:36:d0:1b:4c:64:48:11:35:
         7c:8c:e2:1b:8b:1c:ff:3d:14:9a:80:e9:5c:33:d4:c1:30:b5:
         7c:56:14:89:a8:fc:0f:2c:7b:21:07:83:ce:6f:8c:79:a6:7e:
         7e:2b:97:75:2e:a8:57:64:57:8d:cf:03:7d:26:1e:08:40:d8:
         b0:e9:c2:bd:11:9d:04:39:8d:7f:a5:23:58:cc:37:15:77:2e:
         0e:7e:a8:46:a2:93:1d:83:3b:98:f2:cd:4c:74:b4:3b:af:a5:
         6b:d5:a1:46:de:0b:23:05:7d:00:04:93:74:16:4d:52:47:1c:
         91:9a:1a:39:78:5a:5e:24:cc:9c:c9:4c:b6:e7:fa:4c:65:65:
         ef:65:20:c7:73:e2:80:15:8c:54:68:0c:0c:16:28:67:94:8f:
         7a:d5:09:1c:98:d1:c0:6c:40:d2:6d:17:5b:32:52:a9:9e:32:
         a3:de:8d:5c:62:04:28:2a:2b:34:ee:8a:eb:3d:4f:31:cf:f5:
         34:c9:95:71:32:bd:7d:bb:7d:61:bd:41:fc:5f:69:e6:f8:76:
         6c:e0:b6:06:4d:c5:46:38:6f:a5:ce:a3:37:85:64:12:77:c4:
         05:c5:f8:87:53:e1:1f:19:45:2b:40:ad:9c:de:5b:77:24:48:
         bf:74:fe:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:30:31 2025 by rpki-client