Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/d44ea506-3bb6-396c-9617-92bba4db10b9.roa
File:                     d44ea506-3bb6-396c-9617-92bba4db10b9.roa (raw, json)
Hash identifier:          EOrmntoXqu1Tc2ulPggUnPumCfCQz4t4/Mg/aeNSZuc=
Subject key identifier:   A1:B6:06:B3:F0:7C:FA:6C:A6:9B:F6:D9:53:E2:AA:4A:47:51:21:92
Certificate issuer:       /CN=46d43cee-39e6-4150-ae7b-94a20c139206
Certificate serial:       010D0C9F4328584A07D52C3DA7CE54C6011C6B00
Authority key identifier: 28:87:3B:F3:C9:20:CA:EE:07:F8:54:B5:01:37:9B:C6:84:08:F9:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/d44ea506-3bb6-396c-9617-92bba4db10b9.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     394367
IP address blocks:        23.176.0.0/24 maxlen: 24
                          205.207.142.0/24 maxlen: 24
                          207.167.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:2c:3d:a7:ce:54:c6:01:1c:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d43cee-39e6-4150-ae7b-94a20c139206
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=7423c40e-081f-4903-9ed9-7693e3224a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:18:84:7a:46:a7:1e:9d:67:e7:f6:69:6c:
                    5b:32:1a:1b:5e:30:28:ad:4a:2f:5e:85:2c:18:2a:
                    a7:74:8d:a6:f2:d5:ef:4b:2a:28:35:fe:9e:52:2f:
                    87:d6:b8:92:37:4f:6e:a6:36:6b:91:94:c5:91:ec:
                    7a:fe:f2:10:f3:a4:b1:0e:33:cf:eb:cf:74:8b:7c:
                    f8:ae:fc:a4:1e:c4:56:82:6c:4b:15:44:96:ff:ad:
                    c0:c4:08:b5:5a:c3:fc:61:54:34:f2:16:9e:44:a8:
                    b3:10:dc:52:1b:7e:f3:ef:ea:86:4d:a1:9d:61:16:
                    d1:d1:cf:21:f1:b6:4a:ab:83:84:b9:b1:9b:b5:05:
                    96:00:db:e5:93:52:df:81:cf:83:0f:34:da:bb:25:
                    ed:d2:06:ce:78:6a:3c:e6:d7:c3:74:7a:7e:04:83:
                    3c:e3:8b:33:9d:1e:f6:7d:5e:6a:e9:fc:2d:0b:26:
                    ce:31:c9:15:57:9e:93:40:7c:f6:87:fb:81:53:c9:
                    66:30:79:55:d4:1d:ed:d6:32:ee:7c:2d:36:e1:61:
                    bb:34:ee:35:c4:f9:e7:85:b6:0c:8d:4c:b8:10:04:
                    f4:6f:26:25:26:e5:d6:6b:89:90:3f:7f:08:4b:0f:
                    1c:e0:4e:96:b4:74:af:36:27:96:22:04:4e:ed:6b:
                    f2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:06:B3:F0:7C:FA:6C:A6:9B:F6:D9:53:E2:AA:4A:47:51:21:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/d44ea506-3bb6-396c-9617-92bba4db10b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.crl

            X509v3 Authority Key Identifier:
                keyid:28:87:3B:F3:C9:20:CA:EE:07:F8:54:B5:01:37:9B:C6:84:08:F9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.0.0/24
                  205.207.142.0/24
                  207.167.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:79:36:22:39:2d:e9:ed:ed:da:e2:1d:ad:75:e3:05:b5:cd:
         b8:60:4e:b6:f0:cf:17:da:a9:2c:a8:91:5b:10:3c:15:1f:3d:
         7e:b3:f2:f3:7f:42:fa:8b:1f:6d:94:8f:d7:a7:33:64:cb:a4:
         d2:33:2a:1e:47:11:38:f1:54:2b:20:28:87:1a:6a:33:77:be:
         45:74:ca:eb:40:88:fa:9f:13:d7:99:f2:e4:c3:10:3c:76:17:
         ae:8d:32:4d:8b:45:b5:35:5e:da:b9:b8:11:e8:87:84:70:c5:
         22:78:18:8a:c0:f2:c9:b9:02:65:03:76:ce:6b:e9:47:b6:3a:
         d9:25:0c:c9:7d:d6:2c:0f:8d:c6:27:37:78:97:00:04:aa:08:
         f6:9e:db:2d:e4:b9:f7:3f:c2:06:d7:5e:e8:d5:0d:63:94:63:
         37:83:21:9b:49:ab:a2:3d:18:5b:88:d6:86:c3:2a:0b:95:7a:
         98:c3:29:dd:69:d4:f0:46:5b:d8:72:a4:0a:77:e3:47:ff:3f:
         fc:16:a5:08:3b:3f:82:06:52:0f:19:15:02:a1:da:6b:bf:a7:
         d2:58:be:a2:de:10:5c:e9:ae:94:1f:91:00:12:83:66:6d:7b:
         1d:fe:70:0a:a8:9a:90:93:5b:6f:80:e3:b5:71:81:1c:25:1f:
         83:e6:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:48:56 2025 by rpki-client