Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/7e1641a4-72fe-380a-9297-44554b7a28cd.roa
File:                     7e1641a4-72fe-380a-9297-44554b7a28cd.roa (raw, json)
Hash identifier:          ln5q6Pgg2llBuIT008K+DGxZyrTOJBU8iYaiqdRYuH8=
Subject key identifier:   37:F8:0D:13:4C:52:6B:DE:F3:6A:FD:48:B4:E2:3B:51:08:5A:6A:BD
Certificate issuer:       /CN=0e0d8660-09bf-4666-9cd9-2a53bd12fdfd
Certificate serial:       010D0C9F4328584A4110642EB4099E3D043BB400
Authority key identifier: B5:0A:FA:9B:E7:4D:70:4E:3D:01:B6:25:E3:AA:46:7D:89:1E:99:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/7e1641a4-72fe-380a-9297-44554b7a28cd.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     40124
IP address blocks:        23.184.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:64:2e:b4:09:9e:3d:04:3b:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0d8660-09bf-4666-9cd9-2a53bd12fdfd
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=c9606238-2347-4132-b53e-ecf41f854f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:64:07:31:68:0e:26:80:9b:66:25:1d:12:9c:
                    e2:5a:2c:54:be:f7:89:d1:63:2b:27:0d:4b:39:f0:
                    c8:25:3f:1f:a8:bb:ae:22:9c:22:a5:be:a8:d0:a4:
                    8d:b5:fd:07:f2:6c:5a:5d:1e:45:f6:2c:0f:21:d9:
                    f8:54:e7:7d:a2:92:06:e7:79:8b:8c:f3:53:3e:8d:
                    26:8e:8f:24:f1:3c:e1:cf:08:f3:43:16:f4:e7:ee:
                    a9:73:3c:f2:58:4b:46:51:b1:81:d8:dd:14:74:ca:
                    bf:54:9f:6c:b7:7a:c2:b7:67:40:1b:01:00:8c:70:
                    61:af:8e:de:2d:0e:9d:0f:f4:b3:c3:44:aa:30:7f:
                    99:6d:c4:7d:a8:62:e9:e5:db:37:06:db:93:a1:7f:
                    d7:30:f2:7a:40:29:69:57:61:55:1d:a4:be:0a:45:
                    95:76:15:3c:b5:50:58:76:4b:a8:58:0c:c5:44:2e:
                    59:3a:f5:9a:38:1d:cf:bf:ce:41:07:e8:e0:02:fd:
                    a1:25:9e:14:46:1a:08:68:a0:1c:9c:93:7f:59:91:
                    05:b5:44:26:0f:e5:47:2a:24:4f:db:de:68:65:ba:
                    fd:80:c0:b1:87:46:4a:34:0b:2a:55:44:0f:f7:cd:
                    95:4f:87:34:73:17:c5:f6:ed:05:a0:3e:4c:e3:45:
                    34:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F8:0D:13:4C:52:6B:DE:F3:6A:FD:48:B4:E2:3B:51:08:5A:6A:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/7e1641a4-72fe-380a-9297-44554b7a28cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.crl

            X509v3 Authority Key Identifier:
                keyid:B5:0A:FA:9B:E7:4D:70:4E:3D:01:B6:25:E3:AA:46:7D:89:1E:99:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e0d8660-09bf-4666-9cd9-2a53bd12fdfd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a0:4c:0f:2b:0c:d4:11:09:31:e5:d8:cb:21:bf:ef:de:ea:
         ec:97:1d:01:ff:5f:ea:d9:47:91:c5:da:f7:a0:38:4a:13:f1:
         1d:64:40:36:c2:36:f0:41:94:b7:02:a2:53:81:6a:ec:8a:66:
         6f:00:e2:ca:72:77:4e:c5:b8:04:cc:36:f3:bf:33:f8:60:50:
         99:9f:bd:82:b1:b9:0f:ca:1f:c2:b6:f6:91:2c:26:b6:3e:b2:
         bc:10:f5:9e:a9:f7:03:66:e9:be:cb:3a:cf:ea:07:23:a7:fa:
         58:d6:87:0d:7f:33:04:52:1d:6d:9a:2b:90:df:27:90:a3:7b:
         02:84:4f:1a:0c:29:64:34:35:f5:07:5b:78:53:f8:d0:db:f6:
         47:30:d7:5c:71:d3:aa:72:64:87:32:8c:cc:15:d3:a6:d2:2c:
         5f:ce:75:6d:b8:6d:66:f9:e9:8b:e3:1e:c4:c2:dc:30:e2:9e:
         4f:90:4b:5e:2a:68:5a:da:d7:6e:77:35:78:de:5c:5f:c8:41:
         23:07:fa:3c:4a:13:8c:1a:23:01:2c:80:24:aa:d2:37:33:02:
         6d:eb:fd:4f:e7:9f:e3:74:3e:87:44:1b:b5:5c:7c:54:24:c9:
         bf:5c:f8:df:2f:b2:0f:1c:e6:cb:da:d3:fd:c0:4e:b6:5e:b0:
         77:fe:ca:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:41:06 2025 by rpki-client