Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/cc6b3ec3-7bd9-327e-a70c-522cd6ca9a5a.roa
File:                     cc6b3ec3-7bd9-327e-a70c-522cd6ca9a5a.roa (raw, json)
Hash identifier:          y4wyrp9W7G/S1yzsnQ8Poa9asL2TcjMUQOEDzobFMYw=
Subject key identifier:   21:C6:A0:3C:41:0C:86:EC:3C:C0:3C:E7:A6:11:40:C5:9E:9F:08:63
Certificate issuer:       /CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
Certificate serial:       010D0C9F4328584ACE0B90A8ABAAB85203A8A900
Authority key identifier: A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/cc6b3ec3-7bd9-327e-a70c-522cd6ca9a5a.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     399091
IP address blocks:        23.170.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:90:a8:ab:aa:b8:52:03:a8:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=698e80e5-04db-4316-8fc2-0bde25f67214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f4:70:5f:72:44:1f:b9:84:67:3d:23:95:bf:
                    cc:75:c1:0c:53:47:f8:14:32:8e:6a:74:d7:f3:9d:
                    fa:0b:18:98:18:55:17:00:de:fb:50:94:a3:8e:80:
                    0c:4d:dd:5d:4f:63:9e:21:53:8e:8a:e1:a5:98:7e:
                    19:da:b7:45:94:f9:91:d8:f8:d5:cf:f0:cf:92:56:
                    11:f8:b4:38:ef:00:6f:47:0d:bd:48:74:94:3e:4f:
                    a3:12:14:9d:38:31:6e:76:cd:e4:e3:df:7a:e7:1c:
                    a4:8d:e4:40:b3:a1:c3:27:97:0d:1b:64:e7:44:78:
                    32:bf:5a:30:c2:6f:72:f4:70:5e:0c:f5:14:ea:f7:
                    a7:b7:d6:c6:d6:55:a8:7a:4b:7f:6d:4b:35:f7:4f:
                    34:da:ed:14:b2:63:a6:41:0a:a0:b9:15:2c:87:14:
                    75:c9:5c:76:c2:94:60:3e:ea:b4:58:55:81:76:20:
                    d1:de:a8:cc:d1:e7:b5:f8:14:17:68:4d:cd:c4:7f:
                    3d:67:c8:78:1d:db:6c:93:51:40:f3:a6:53:85:9e:
                    e7:ae:47:8f:99:ae:cc:78:90:8e:7b:c3:ee:48:a1:
                    d7:90:1e:3d:49:a8:e5:c3:4f:63:7b:78:23:7d:db:
                    b1:a0:4d:55:d7:cd:b5:9c:34:7c:84:50:d7:91:6e:
                    d7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C6:A0:3C:41:0C:86:EC:3C:C0:3C:E7:A6:11:40:C5:9E:9F:08:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/cc6b3ec3-7bd9-327e-a70c-522cd6ca9a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl

            X509v3 Authority Key Identifier:
                keyid:A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:94:4c:51:f7:c3:89:12:1a:0c:37:7c:96:1d:8e:47:7f:cc:
         0f:39:d4:6c:ac:bc:f5:f4:05:2d:22:1b:4e:01:4a:8a:d1:3a:
         69:a5:d8:dc:77:1c:89:1f:64:f3:b9:a4:76:f7:c1:42:0c:7e:
         14:78:a5:24:a0:7d:b7:58:0b:a0:da:1e:6a:1e:f8:65:93:c3:
         09:29:d3:c4:91:af:fd:f2:d5:ea:4c:b2:27:08:53:fb:95:80:
         f4:43:1d:47:ab:d6:ba:54:96:6b:ee:1e:44:88:3b:15:20:86:
         de:c2:58:9a:ab:6c:1c:9e:6b:97:16:d6:06:37:64:82:b1:e2:
         1d:bb:74:aa:5c:02:b5:1a:25:d1:30:10:53:61:10:4c:80:14:
         e8:66:77:06:28:3e:10:93:b2:e1:a1:b1:98:8f:e8:c9:78:06:
         19:68:a2:0d:44:71:02:4a:71:49:42:66:ec:e2:c9:67:a7:88:
         f4:19:25:72:db:17:66:7e:c9:b7:f3:1c:4f:79:f9:7f:c3:81:
         fd:be:7f:bd:19:28:51:0c:53:28:3e:e2:d2:ae:75:82:52:d8:
         3f:9e:21:52:29:48:21:65:ee:a7:fc:fa:0a:f9:f0:7f:6b:66:
         c9:75:59:c9:eb:a5:3c:5f:a2:32:de:27:a6:8e:7f:1e:3e:f7:
         1d:a4:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:51:58 2025 by rpki-client