Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/4b08360c-1313-3bbb-a1c8-d6e7251e2ed2.roa
File:                     4b08360c-1313-3bbb-a1c8-d6e7251e2ed2.roa (raw, json)
Hash identifier:          hGk+UE8VSgoZXoNckr0tGeow8hV2EWCuGR+T+QjcjUE=
Subject key identifier:   58:0E:4A:66:27:3F:86:F0:9D:04:78:74:02:1D:D1:53:13:A4:3F:BE
Certificate issuer:       /CN=b511cf32-0933-4308-8981-9c296fc06987
Certificate serial:       010D0C9F4328584A374AD31DC9F2333924300180
Authority key identifier: B7:63:09:26:C1:4A:FB:97:17:CC:67:FB:FB:6B:C0:FE:A5:E1:52:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/4b08360c-1313-3bbb-a1c8-d6e7251e2ed2.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     32995
IP address blocks:        23.137.160.0/24 maxlen: 24
                          2620:4d:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/b511cf32-0933-4308-8981-9c296fc06987.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/b511cf32-0933-4308-8981-9c296fc06987.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d3:1d:c9:f2:33:39:24:30:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b511cf32-0933-4308-8981-9c296fc06987
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=48b6920f-6ed2-437d-ac18-cdc7fe8a448b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:33:20:7d:59:e4:05:48:75:e8:19:8c:c6:ca:
                    89:58:b9:14:b9:6d:f7:9b:48:2c:18:e2:28:24:1f:
                    3b:91:fe:00:2d:d0:d7:58:93:03:65:ad:4c:ef:a7:
                    56:b4:65:9d:87:fd:2e:b0:49:53:c5:99:58:97:53:
                    50:21:9e:4c:77:2f:e1:3b:47:01:95:4a:c7:14:f9:
                    0b:e5:7e:f4:d0:1c:b0:69:66:c6:72:6c:a1:59:a7:
                    c4:3b:71:5b:ae:27:ca:8c:61:4d:40:ea:4e:62:e6:
                    30:c1:2e:14:ed:8f:a0:60:05:0f:50:cc:a8:2a:8c:
                    40:4a:23:e7:50:5d:a0:28:e7:a3:47:9a:33:67:ad:
                    5e:ee:fa:9a:a8:9b:18:54:75:fe:e5:8d:ef:66:8a:
                    a2:dd:d0:b1:8b:2c:1a:e3:5e:f5:67:23:05:c9:22:
                    7c:b1:f4:08:c3:15:29:0a:70:42:3f:b8:f5:ac:24:
                    ef:41:bb:94:ab:fd:87:ba:14:19:0e:81:7c:76:6a:
                    ef:72:ae:21:62:b0:9d:f2:c6:d0:e6:fd:7d:79:4a:
                    89:f9:ee:24:6b:d8:c0:ed:2f:1c:47:b0:c3:86:1d:
                    35:f9:a1:3b:1a:8d:9d:23:c8:71:0a:cb:09:e5:01:
                    f7:24:d3:fb:bf:b6:58:74:a2:fb:ca:32:71:77:37:
                    a1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0E:4A:66:27:3F:86:F0:9D:04:78:74:02:1D:D1:53:13:A4:3F:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/4b08360c-1313-3bbb-a1c8-d6e7251e2ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/b511cf32-0933-4308-8981-9c296fc06987.crl

            X509v3 Authority Key Identifier:
                keyid:B7:63:09:26:C1:4A:FB:97:17:CC:67:FB:FB:6B:C0:FE:A5:E1:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.160.0/24
                IPv6:
                  2620:4d:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e1:76:b1:56:ad:84:30:28:46:f9:18:ba:bb:f2:ad:90:1b:
         c1:08:b7:d6:32:f7:f0:fc:48:ff:06:a3:c6:fc:ee:79:87:6e:
         36:f7:21:12:2b:ea:af:64:dc:7a:67:43:6d:8d:84:15:4d:de:
         63:1e:0f:63:f8:34:31:df:d8:07:4d:45:a3:2c:a7:df:b8:46:
         58:99:1b:f3:62:da:3a:15:72:97:a4:f8:c1:7a:c7:1d:3d:8d:
         53:7d:b1:0a:88:fe:44:24:24:8a:f4:73:fb:38:f2:24:a8:b2:
         34:4b:b6:c3:27:dc:c4:c0:76:cf:42:40:59:63:d4:90:b6:77:
         e9:02:93:fc:b6:9f:12:49:85:54:d5:c9:a4:e1:10:72:bd:6e:
         0b:d4:f8:10:22:8b:39:16:8f:2d:34:65:0d:4e:e8:d9:83:69:
         e1:12:bf:80:68:77:a6:62:e1:a2:7b:6c:53:de:d6:4e:dd:42:
         91:c9:d5:0f:17:a7:ac:41:0a:a1:ed:20:56:34:5c:ad:43:68:
         46:6e:65:f5:03:ff:e4:27:15:04:83:16:5a:f6:3c:ac:62:91:
         d4:47:f7:18:43:33:f1:5e:78:73:ee:2a:37:b2:da:04:05:fe:
         68:75:8e:9a:ca:1c:c5:7f:70:b8:78:70:dc:d5:1c:43:74:d7:
         6f:c8:ea:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:40:35 2025 by rpki-client