Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/79ca36de-3a9d-3830-a33d-b0ac646a1da0.roa
File:                     79ca36de-3a9d-3830-a33d-b0ac646a1da0.roa (raw, json)
Hash identifier:          W7q6nXAMPuJLVjACSZ+2M0MhQRq9YinCOgcwcg3Unfc=
Subject key identifier:   FA:E4:21:22:1D:2B:6C:81:11:E0:56:43:C2:FE:6E:52:E2:99:49:7D
Certificate issuer:       /CN=5b411b8e-3c6b-4743-ad39-50a32a716ad4
Certificate serial:       010D0C9F4328584A58CB0852A791C4EDDAF4B0A0
Authority key identifier: D4:30:90:3D:0D:8B:97:AF:18:3F:98:C4:51:DB:CF:8F:7D:1A:84:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/79ca36de-3a9d-3830-a33d-b0ac646a1da0.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     399032
IP address blocks:        23.185.64.0/24 maxlen: 24
                          2602:fe76::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:08:52:a7:91:c4:ed:da:f4:b0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b411b8e-3c6b-4743-ad39-50a32a716ad4
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=35f0f282-115e-401d-ad53-24a71a398a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f6:f3:a4:f3:dc:fc:82:e1:91:2e:16:91:7b:
                    a1:11:df:27:b4:31:db:65:7b:0a:4c:dd:29:ac:5b:
                    64:af:b5:11:94:3b:31:da:bf:c0:65:4c:3b:f2:40:
                    bc:23:55:ad:42:2d:9f:a6:c0:fc:a7:15:bc:60:a2:
                    83:45:f9:bd:02:bf:7e:74:b8:26:63:61:44:96:f1:
                    c5:88:f5:ee:15:eb:e1:9f:e4:0a:9a:95:54:92:27:
                    87:bc:08:4a:bc:79:3f:0e:02:3a:1b:89:39:a4:1d:
                    76:83:ad:88:53:b9:44:e2:a6:2a:e6:bf:33:7d:a2:
                    2d:7d:f7:33:d7:fd:3c:4a:09:0c:f7:da:4b:51:5f:
                    48:73:e8:80:b5:ea:0d:35:19:a6:dd:b9:85:d6:30:
                    88:4a:ca:ba:f8:c9:33:ca:19:bf:a3:16:f6:f1:01:
                    35:77:54:98:80:b5:c8:cb:63:fa:91:e9:fa:b2:95:
                    01:7c:68:f9:3a:9a:b3:93:83:c6:b8:a8:8e:ed:9d:
                    53:b7:67:89:95:83:87:9b:49:0d:de:d0:63:b7:16:
                    f3:2f:77:3f:c0:e8:0e:a0:28:c6:8a:33:0e:3c:83:
                    e5:a8:ca:41:cd:93:8c:3a:1a:07:07:3f:4b:3d:49:
                    b3:94:70:02:e2:c4:93:67:c0:d0:d9:ff:8f:83:2c:
                    d7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E4:21:22:1D:2B:6C:81:11:E0:56:43:C2:FE:6E:52:E2:99:49:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/79ca36de-3a9d-3830-a33d-b0ac646a1da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.crl

            X509v3 Authority Key Identifier:
                keyid:D4:30:90:3D:0D:8B:97:AF:18:3F:98:C4:51:DB:CF:8F:7D:1A:84:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.64.0/24
                IPv6:
                  2602:fe76::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:6d:ff:ab:0c:7e:18:55:42:c3:8f:bc:38:0f:08:bf:4b:bf:
         b6:d5:14:19:47:3a:9d:aa:86:72:36:91:88:92:f6:d4:07:73:
         65:f2:1f:e0:a6:fe:88:42:38:e9:ef:0c:80:c0:5e:ae:84:c9:
         e2:e3:f4:36:38:22:7c:1d:0c:6f:08:fd:57:7a:df:90:2b:3e:
         03:ae:c5:8f:63:e0:ec:04:6d:0e:f7:74:bf:04:95:12:22:29:
         03:b8:34:dc:11:f7:be:80:d6:52:f0:0f:df:dc:8e:fb:ff:67:
         89:fc:a2:f8:b8:ee:04:b9:ad:c2:e1:71:d5:41:c6:19:4f:74:
         71:f2:b8:31:35:54:ec:fa:ca:8a:af:df:4c:64:4b:75:7c:67:
         c3:09:aa:68:d4:98:c0:f8:6f:83:dd:d9:96:79:62:1e:b2:3d:
         30:b2:d0:7d:36:c6:7b:f9:5b:6b:3d:99:8a:eb:af:4a:3d:c6:
         1f:5c:6c:98:8f:80:1e:43:b3:9a:b8:6b:fc:52:fa:15:90:45:
         12:1b:d4:8e:c3:d5:2c:8c:87:ee:82:54:8f:73:d3:96:02:74:
         3e:25:28:24:39:d9:2c:b4:c4:c8:25:5f:aa:ba:b8:cf:62:ae:
         a8:68:6e:30:ce:76:76:1f:0f:f2:7f:0e:5e:bd:1d:9a:c5:7a:
         68:66:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:30:33 2025 by rpki-client