Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa
File:                     d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa (raw, json)
Hash identifier:          RG+aGOJVv7LB/eHZ0s2nCw4aqV3DMVNwpQWgmoab9l4=
Subject key identifier:   72:D5:43:AE:29:67:E5:D1:32:87:09:BB:66:08:E3:96:15:54:04:2B
Certificate issuer:       /CN=3789343d-8560-48b0-9530-d2a1129fefe7
Certificate serial:       010D0C9F4328584AB4EB79EBB016D060C13A0000
Authority key identifier: 42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     401228
IP address blocks:        23.183.216.0/24 maxlen: 24
                          2602:f87c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:79:eb:b0:16:d0:60:c1:3a:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3789343d-8560-48b0-9530-d2a1129fefe7
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=8fc837de-2d0a-4802-b5dd-73d00d09876c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:7f:ff:43:36:fe:51:53:37:7e:f3:5e:a5:
                    8b:3e:5d:52:69:b9:cc:3e:47:55:0a:a3:73:fd:f4:
                    de:b5:75:26:64:a2:97:40:bc:67:66:75:6c:64:98:
                    44:b3:bc:64:43:52:97:92:1c:2f:14:87:d2:da:4b:
                    98:dc:92:5f:97:c4:fa:82:94:cf:b6:dc:aa:3c:2a:
                    a8:b8:ea:00:5c:a4:3d:13:94:98:07:c1:05:f2:df:
                    75:e8:82:75:c2:ea:8b:01:17:ad:91:17:a7:69:64:
                    4c:ed:ee:29:68:a4:f3:5f:9e:31:ee:eb:0f:6f:11:
                    3b:f7:b3:77:fd:8a:1c:ad:5f:c3:60:26:06:f4:63:
                    37:18:5c:08:3e:6c:35:ed:1f:da:1a:b8:c9:ae:de:
                    1a:0e:0b:97:94:d3:2d:2e:8c:94:e1:30:47:80:81:
                    51:52:0e:3c:0c:a8:4f:2a:bb:33:85:53:66:b5:61:
                    77:0e:e7:ab:98:a1:55:ff:a3:6e:59:f5:66:71:c7:
                    0f:4a:1c:2e:f5:d6:6d:e2:ae:af:e2:03:f9:b4:af:
                    f4:15:2a:46:6e:31:1d:24:72:52:1f:7c:e7:3d:99:
                    d8:05:59:cd:1f:c1:ae:9c:57:28:33:8e:ea:22:f1:
                    2b:43:ea:e7:32:4a:97:9a:76:8b:1f:f5:7f:6d:f8:
                    ba:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D5:43:AE:29:67:E5:D1:32:87:09:BB:66:08:E3:96:15:54:04:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl

            X509v3 Authority Key Identifier:
                keyid:42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.216.0/24
                IPv6:
                  2602:f87c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ac:ed:69:15:d9:ef:e5:98:8b:50:fa:33:c3:ec:65:87:79:
         c5:f9:56:a9:36:dc:ab:dd:71:d7:d9:cd:16:72:1c:d1:25:42:
         79:a6:c2:c6:df:4b:6b:ba:24:44:70:41:f7:44:a5:af:1d:b0:
         c3:27:c1:df:f0:68:2c:03:36:06:1d:52:50:4c:9c:f7:e7:b5:
         25:d8:36:7a:d4:c9:55:ba:9d:58:00:65:fa:28:22:51:1c:4d:
         b7:72:94:96:5e:d5:59:6e:b4:ac:f8:af:4c:5a:87:cc:84:ee:
         f0:0f:e9:d8:97:74:26:61:ac:c8:63:f9:b2:76:0a:a5:a6:a6:
         31:30:0a:39:c4:a0:a9:f2:b4:fa:06:ff:25:96:17:63:3e:ab:
         55:64:82:0d:3a:fa:c9:59:ba:05:89:64:04:37:3c:df:c2:12:
         d8:46:fa:5d:d3:6f:ff:4f:cc:c1:e5:1e:97:c3:a7:8c:c7:d3:
         e2:39:d1:1d:8e:7e:15:c6:b5:8b:05:b0:68:74:42:da:39:b5:
         98:0e:f3:e2:08:fe:74:af:0c:6f:3c:a9:0c:2f:60:1c:a9:dc:
         5c:41:06:8a:14:86:f2:0e:95:a5:e8:86:68:86:30:24:a2:d4:
         01:5d:c9:ef:cd:d5:3f:5d:c4:93:78:8a:c1:cf:c5:5a:a6:83:
         76:2c:d9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:11:48 2025 by rpki-client