Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f/63f719e5-11fc-347e-9286-d83a9c982f5b.roa
File:                     63f719e5-11fc-347e-9286-d83a9c982f5b.roa (raw, json)
Hash identifier:          7KTAQhSeHO94TIIUQi5oCMECQpbz5X+7ItqTnr+U7ZU=
Subject key identifier:   C3:D2:77:B0:8C:12:29:87:21:3C:7D:94:43:15:FB:5F:A2:FA:62:CA
Certificate issuer:       /CN=a2b44413-47b6-4396-9c34-fb085c0a498f
Certificate serial:       010D0C9F4328584A3E45AD044E02DA096C695980
Authority key identifier: 7D:25:36:04:6B:85:8C:4C:CB:D4:27:44:5D:3F:A6:5A:48:F0:6D:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f/63f719e5-11fc-347e-9286-d83a9c982f5b.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     204535
IP address blocks:        23.178.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f/a2b44413-47b6-4396-9c34-fb085c0a498f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f/a2b44413-47b6-4396-9c34-fb085c0a498f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:ad:04:4e:02:da:09:6c:69:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b44413-47b6-4396-9c34-fb085c0a498f
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=091378a3-2926-4894-8379-b1f049600aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d6:1c:10:c5:ff:64:b9:e5:95:3f:20:73:44:
                    fb:96:2c:eb:c4:d5:52:1f:4b:ba:82:dd:de:80:80:
                    99:64:1d:16:c8:86:6d:e4:db:20:19:a6:62:c8:4f:
                    69:ea:41:23:b6:57:41:00:42:d6:75:f7:70:d9:5a:
                    5a:d6:9b:9a:b7:f7:9d:1e:06:54:73:fb:8f:62:56:
                    c6:fe:7c:2c:f2:d7:03:ef:d6:88:ec:42:3f:cb:ef:
                    fb:7f:82:bc:3a:3a:cb:36:da:44:55:b4:b3:8b:27:
                    ff:76:69:2f:83:f7:89:c6:7b:a2:1b:94:f0:22:68:
                    04:c6:92:ee:7c:05:9b:5a:c2:a8:33:f3:b6:b7:9d:
                    12:67:48:8d:91:b7:3b:63:b9:2f:b0:ae:f2:33:db:
                    e5:13:c8:fc:3c:b2:75:6c:59:ed:ac:40:94:d5:42:
                    a1:54:a2:f9:2d:93:58:dd:dd:de:42:97:2a:c1:c4:
                    9f:b2:59:6b:5b:2e:49:47:40:74:81:f7:58:51:47:
                    f0:f9:02:12:5d:3b:bb:68:fd:85:b7:95:52:d9:79:
                    b0:5c:2a:1d:0e:4f:7a:2d:57:68:46:c1:fb:e5:ca:
                    17:81:21:34:d5:f8:21:f9:0d:d6:9e:74:4f:74:14:
                    f6:7e:54:33:75:fa:d6:9c:98:6e:38:93:dc:a3:1a:
                    c4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D2:77:B0:8C:12:29:87:21:3C:7D:94:43:15:FB:5F:A2:FA:62:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f/63f719e5-11fc-347e-9286-d83a9c982f5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f/a2b44413-47b6-4396-9c34-fb085c0a498f.crl

            X509v3 Authority Key Identifier:
                keyid:7D:25:36:04:6B:85:8C:4C:CB:D4:27:44:5D:3F:A6:5A:48:F0:6D:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:bc:d3:89:03:7e:54:41:0a:10:a2:d0:67:88:26:9e:8f:c1:
         db:00:2b:2c:c3:8c:c8:a5:b1:1c:d0:d2:1f:67:f1:cc:93:7c:
         0f:23:1f:14:2a:43:82:34:c7:57:08:63:a3:f7:5d:fc:3b:9f:
         6d:18:42:ba:15:01:84:9e:6b:25:30:de:d9:ab:45:e6:00:91:
         eb:91:6a:a8:09:94:f4:1e:1a:ed:fe:d6:35:22:54:83:80:b5:
         73:75:62:4e:78:71:ec:31:38:e5:84:3c:64:73:6d:41:8f:66:
         8b:51:7c:c6:c3:10:73:69:92:42:98:d0:ad:82:4d:ed:60:b7:
         84:40:24:fe:a2:d2:7d:15:65:d7:0b:89:e6:3b:cd:cb:4b:32:
         a4:e0:0d:14:17:93:61:d4:c8:d4:57:60:ae:53:9b:3f:ea:bc:
         19:e6:a6:7d:a1:25:d6:47:ee:65:c6:76:49:2c:21:9f:60:f4:
         c7:a1:ca:9e:07:0c:b1:56:45:e1:c4:a3:1c:d3:76:23:93:3a:
         49:22:f3:8b:d4:ba:e0:43:6e:60:2c:82:42:2e:a4:82:e7:6d:
         b5:d2:41:43:6a:6f:9e:ab:05:bc:c8:8b:54:df:05:2c:94:70:
         60:95:48:07:c9:83:03:92:ff:2f:72:34:87:14:8f:c0:16:1e:
         a5:59:99:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:34:56 2025 by rpki-client