Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/f6a4375e-a838-3d6a-b830-213e7dc77aec.roa
File:                     f6a4375e-a838-3d6a-b830-213e7dc77aec.roa (raw, json)
Hash identifier:          sqN2imehtP3GW1winXvsldixP3HaqnPRKyX7uvPUNlQ=
Subject key identifier:   7B:44:50:96:41:26:7C:C9:14:72:38:F2:6E:5A:28:35:77:F1:B1:7B
Certificate issuer:       /CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283
Certificate serial:       010D0C9F43285849ED4FCB90018B6CB65E36B380
Authority key identifier: 2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/f6a4375e-a838-3d6a-b830-213e7dc77aec.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     20278
IP address blocks:        23.186.112.0/24 maxlen: 24
                          2602:fc41::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:cb:90:01:8b:6c:b6:5e:36:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=976f02a5-86a5-44a5-b441-284744ad48e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b1:41:77:dd:25:06:fd:93:e7:cf:69:c4:d6:
                    ae:fe:8d:10:f0:81:71:4d:b6:d9:ed:07:66:cc:3d:
                    41:75:4f:cd:a9:f2:cd:82:23:ba:30:0e:8c:70:76:
                    18:e8:3e:79:9e:e1:d1:60:be:00:5c:e8:8c:af:d4:
                    d3:63:d7:2b:43:40:7c:03:b5:ee:f1:0e:f1:7a:3e:
                    2f:90:4a:c1:7c:34:a2:f1:90:f5:b3:f2:1e:4a:c5:
                    be:33:4c:17:23:a2:e9:e5:b4:3d:16:38:2d:ff:63:
                    0f:84:b9:06:b5:4f:37:67:16:5a:89:ef:76:ca:88:
                    7d:7f:aa:36:24:5c:70:bf:1d:61:55:07:f4:43:3a:
                    24:11:ab:32:71:f5:0e:b7:b2:8d:eb:21:80:6a:d5:
                    33:3e:bb:22:56:70:e1:c8:51:1a:06:02:3b:5a:ef:
                    4f:f8:d8:80:d3:c8:eb:97:ab:c1:c5:a0:6b:45:f5:
                    44:91:a2:d8:76:12:5a:5c:24:55:96:9a:b2:15:f7:
                    f3:b6:75:fa:ec:53:50:a5:cf:4a:e4:6f:4f:e2:65:
                    6f:3e:90:fd:25:4a:3d:c5:94:15:9b:81:45:bc:a3:
                    33:83:6f:74:93:36:eb:ed:1b:d7:99:c7:de:e6:89:
                    a1:d2:29:14:58:99:fe:41:87:02:e0:ef:f4:b7:bf:
                    45:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:44:50:96:41:26:7C:C9:14:72:38:F2:6E:5A:28:35:77:F1:B1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/f6a4375e-a838-3d6a-b830-213e7dc77aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl

            X509v3 Authority Key Identifier:
                keyid:2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.112.0/24
                IPv6:
                  2602:fc41::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:81:f8:8c:28:78:c9:86:18:52:71:f3:71:89:98:d3:ff:74:
         86:f0:17:19:5f:0b:dd:d4:d2:70:3a:60:ec:0e:a9:7f:1f:af:
         df:25:07:06:9e:8b:ce:f9:ad:22:70:78:6b:36:9a:a7:38:f5:
         0b:56:ed:c2:4a:5e:20:b8:e3:59:29:b6:f4:00:47:8c:cf:06:
         14:72:9e:2f:8d:8e:2a:98:58:84:3d:30:3c:fa:81:f7:63:a9:
         30:a7:5a:40:24:0f:e2:52:29:e9:0e:23:1b:70:04:2e:8f:6d:
         47:62:27:90:60:db:82:8b:c3:a1:2b:2c:a2:62:1d:a2:06:ed:
         41:d2:19:93:59:98:c9:79:4b:04:92:1c:1d:ca:d4:03:1d:9c:
         24:8f:ae:7b:24:40:53:d6:67:52:68:82:d1:79:91:06:a2:59:
         c7:6b:55:38:1e:77:f9:99:f0:a4:49:a7:98:9e:23:1b:09:a1:
         4e:38:6d:22:c3:43:55:76:fc:bc:78:e4:03:b0:5e:f4:6a:97:
         be:17:96:c2:1f:18:8f:56:da:53:52:75:7a:0b:dd:8c:4b:a5:
         a1:0d:31:e8:d3:ec:e5:89:02:06:40:4c:57:3a:c9:1a:40:aa:
         75:65:9f:df:56:2a:ce:af:44:dc:aa:25:11:0a:19:a8:33:47:
         11:eb:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:49:04 2025 by rpki-client