Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/cbf55cfc-c97e-3e0d-b5ec-6eed26242585.roa
File:                     cbf55cfc-c97e-3e0d-b5ec-6eed26242585.roa (raw, json)
Hash identifier:          PX013tWzHsN9knk/JdIbRNQzh2wfsMAFN6wrt64d2o8=
Subject key identifier:   52:DE:F8:9C:9C:03:5F:E2:04:6E:03:CE:6C:6A:5C:69:6A:8E:27:C3
Certificate issuer:       /CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
Certificate serial:       010D0C9F4328584A58CB07D5F6D86071DDC3BC90
Authority key identifier: 67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/cbf55cfc-c97e-3e0d-b5ec-6eed26242585.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     216440
IP address blocks:        23.159.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:07:d5:f6:d8:60:71:dd:c3:bc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=693f5da7-714e-47b5-b3cf-b11c8606bebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a2:43:ec:11:95:da:87:94:7b:60:da:21:56:
                    5f:40:fd:c1:47:2f:cc:3a:f5:4d:8a:ea:05:27:88:
                    a1:1f:5a:39:48:05:d3:ae:2c:01:12:2b:ec:9a:70:
                    af:2e:78:98:14:c6:39:55:37:e6:f4:8b:01:1b:3a:
                    94:95:49:25:6c:3a:17:22:8b:0a:38:65:03:76:ad:
                    90:df:30:df:c2:69:6e:06:3c:79:da:44:ff:95:32:
                    3e:8a:13:88:48:58:81:25:96:0e:a5:d1:7f:4a:b5:
                    eb:f0:92:57:a9:ef:d6:c3:a6:d3:7e:ce:77:61:15:
                    9c:79:3d:a7:3b:6b:83:4a:3b:e4:d7:6d:c1:02:7c:
                    fa:4d:8a:5b:e2:7e:d2:49:85:04:83:d4:0a:13:52:
                    82:35:03:21:97:4c:ce:7f:90:ee:f0:6b:57:25:4f:
                    6a:50:2d:5d:e4:6c:7e:93:32:78:97:90:99:f7:db:
                    fd:cc:ed:83:0e:8b:8f:4a:bc:80:84:52:09:c9:86:
                    9d:0d:6b:fb:33:a1:f0:c3:57:f6:47:ca:46:14:c6:
                    3e:0f:07:b0:90:61:8e:be:ea:67:10:b7:e5:1f:1c:
                    cc:01:84:39:2d:61:02:04:2a:57:18:55:06:5c:d6:
                    c6:b6:2a:bb:f8:94:26:9c:76:4f:e9:91:a7:c7:75:
                    32:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DE:F8:9C:9C:03:5F:E2:04:6E:03:CE:6C:6A:5C:69:6A:8E:27:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/cbf55cfc-c97e-3e0d-b5ec-6eed26242585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.crl

            X509v3 Authority Key Identifier:
                keyid:67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:b3:df:79:d6:3d:b3:12:17:10:50:5d:03:9f:ac:a3:6a:50:
         a7:6c:17:8b:1e:91:f0:73:8f:3e:3f:6b:c6:2c:85:38:bf:d6:
         f6:5c:2f:ea:f9:c3:f8:f6:35:d2:35:f4:5d:8f:1a:bf:9f:8f:
         d8:5d:b1:05:99:8a:26:39:b9:2c:d7:d8:a2:af:30:05:4f:64:
         10:8e:35:fc:73:b8:6f:69:ea:b6:a9:98:65:09:4d:8b:65:f8:
         d5:01:0d:49:48:d2:68:9b:b1:e6:c8:6a:5e:a2:8f:ff:45:51:
         f4:fc:54:3c:1a:bd:b7:9d:2d:12:20:9f:1d:a2:1e:c6:df:13:
         ca:ea:4a:94:ef:16:42:2c:ae:38:62:4d:46:55:2f:e6:70:e3:
         a4:99:55:64:d6:d1:5b:3c:49:7e:26:80:0b:ae:14:5f:79:b8:
         d9:6b:a4:f6:e5:34:8d:14:ed:e1:57:25:6f:39:d9:b4:9c:b1:
         20:bd:71:69:bb:b6:f9:5a:69:82:a1:fa:ec:cf:b3:70:4a:87:
         5e:f6:e7:99:3c:61:87:ea:6e:cc:d8:83:d1:d1:2b:7d:ba:ed:
         b0:90:f0:10:22:f2:8b:88:42:dc:3b:ff:c1:0d:c5:fe:66:95:
         2e:a2:e9:49:6a:d8:0d:40:88:4f:26:8c:77:e5:59:18:91:fd:
         cd:2a:aa:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:35:59 2025 by rpki-client