Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/efeaedfc-6459-38b5-803d-b8ad998474fd.roa
File:                     efeaedfc-6459-38b5-803d-b8ad998474fd.roa (raw, json)
Hash identifier:          xhdqaSE3IvK1Bl5nDMvl7JScM7yeM5YGq2Cf4h/9reM=
Subject key identifier:   2E:DE:9C:37:3B:CA:AF:0B:11:D9:CF:B2:0D:BE:34:15:F3:24:9B:8D
Certificate issuer:       /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
Certificate serial:       010D0C9F4328584AD23BB33D41AE2EC68DEA6540
Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/efeaedfc-6459-38b5-803d-b8ad998474fd.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     6977
IP address blocks:        23.188.17.0/24 maxlen: 24
                          23.188.18.0/24 maxlen: 24
                          23.188.19.0/24 maxlen: 24
                          23.188.20.0/24 maxlen: 24
                          23.188.21.0/24 maxlen: 24
                          23.188.22.0/24 maxlen: 24
                          23.188.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:b3:3d:41:ae:2e:c6:8d:ea:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=f54729d0-3170-4fa3-82d3-f611633445da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:06:16:96:39:03:28:33:e4:2b:a1:a5:fe:ad:
                    a7:fe:87:c1:92:7c:7f:db:ca:59:cd:48:80:12:87:
                    66:01:28:e4:d8:d2:40:0c:a9:6d:25:a3:f8:5a:d4:
                    d7:96:b7:63:a8:06:16:35:66:6b:1a:77:55:bc:8d:
                    bc:5c:18:a8:a0:0f:71:54:e2:d6:31:0a:dd:0e:2c:
                    c2:10:58:89:1a:33:fb:92:b3:cd:9d:f1:4c:fc:83:
                    a3:d5:b3:b0:ff:c1:eb:a6:aa:21:72:12:1e:30:ce:
                    cd:b2:f0:a1:94:e3:cd:40:5f:11:12:0d:bc:13:6f:
                    07:ab:91:5a:f9:f1:66:0f:f4:07:c1:5e:7f:aa:b2:
                    86:6b:79:0f:09:5e:23:57:83:f4:f2:6b:3c:05:82:
                    b0:3e:b4:09:38:db:4f:be:ff:e4:a6:43:d4:27:6c:
                    29:74:7d:8b:3b:48:1e:58:71:1c:77:d4:21:bf:41:
                    a6:c1:d2:1e:2f:46:4c:08:db:33:dc:02:6c:ce:8d:
                    80:c0:c4:1f:84:ca:6c:db:af:ad:ec:01:33:82:c9:
                    2b:7b:81:75:dc:63:f0:70:bc:79:fa:9f:15:cb:47:
                    1a:18:92:a6:78:4c:65:c5:e9:99:f5:fc:c7:37:14:
                    88:94:9e:1f:de:e2:4f:29:12:b0:7b:4a:c7:f4:a7:
                    22:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DE:9C:37:3B:CA:AF:0B:11:D9:CF:B2:0D:BE:34:15:F3:24:9B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/efeaedfc-6459-38b5-803d-b8ad998474fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl

            X509v3 Authority Key Identifier:
                keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.17.0-23.188.23.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:73:cb:51:82:34:f2:cd:53:e0:22:10:a9:39:76:2d:4e:26:
         d5:97:95:b1:3e:45:8c:06:fc:1f:c0:95:89:79:57:bc:e4:fe:
         28:92:ad:e1:6a:e5:54:41:6e:da:f0:9a:eb:72:8b:3f:3a:44:
         73:af:f7:54:1d:9f:b4:dd:60:e8:fe:88:64:12:cf:53:bd:45:
         f8:30:a1:92:79:7d:ec:d4:5b:17:e5:97:5a:4b:54:b4:25:42:
         3c:fc:51:12:61:aa:3e:7d:a3:19:2b:31:39:5e:86:9b:29:19:
         f9:35:c0:b4:71:24:2e:af:fe:0b:60:04:74:c6:ff:fd:d2:35:
         01:a9:4d:4d:01:c9:a1:f7:bc:31:3e:f6:fa:22:0b:f0:a9:01:
         bf:69:fd:34:21:c0:11:3d:c2:f5:18:0f:18:19:36:e8:d8:49:
         79:ef:98:b3:c7:ae:13:48:ce:5c:d7:a4:51:e6:bf:7e:50:2b:
         19:d3:6e:11:0a:ae:f7:b9:e2:c8:e4:01:2c:e8:82:72:01:12:
         3a:b0:6e:84:a3:e7:59:75:48:15:a9:cd:ef:d4:04:37:cb:07:
         38:a9:a0:45:00:5b:a8:31:1d:02:8f:e0:1a:8e:12:9a:d9:5d:
         99:fd:45:19:ac:f9:04:61:75:55:ac:39:2d:c3:64:21:ac:3f:
         19:f3:6b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:31:45 2025 by rpki-client