Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/06356a9a-a928-3159-af92-998e04f7da3a.roa
File:                     06356a9a-a928-3159-af92-998e04f7da3a.roa (raw, json)
Hash identifier:          3I4wEdEdhelZDJv0NGlfIPpVMmzQvwK+/u58rOfL4+w=
Subject key identifier:   EF:CB:1E:38:D2:F8:D3:E2:51:57:B6:70:FB:0E:22:07:66:E5:6E:DC
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F4328584A5765D0344B68397E32A600F0
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/06356a9a-a928-3159-af92-998e04f7da3a.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     19651
IP address blocks:        23.168.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:d0:34:4b:68:39:7e:32:a6:00:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=fbfd13a9-8d68-4b6c-b926-bf8ac85d90a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:a1:50:cf:c5:b5:1d:e5:55:3e:8b:fb:ce:
                    45:8a:c4:82:34:5f:f7:b9:88:59:68:ab:71:3f:82:
                    4b:50:72:56:51:87:75:2f:14:0a:cd:f5:ae:74:d3:
                    d2:be:bd:8f:89:bf:0c:84:8c:38:0d:a3:ea:62:58:
                    50:73:b0:0b:68:d7:90:ca:5b:3d:5a:ea:3f:b0:57:
                    b1:21:c7:37:45:22:65:b4:bf:b0:ac:9b:33:8a:3f:
                    b8:e1:96:1a:f6:96:05:3a:ce:ff:df:1a:81:95:1b:
                    5b:c2:e4:61:03:6d:79:a4:60:2b:aa:73:27:2b:5d:
                    22:f8:5e:99:da:d5:90:61:7a:16:8a:77:9f:5d:cd:
                    59:2e:da:c0:02:d1:e5:30:be:ef:a9:ae:ed:03:c6:
                    87:68:2a:2a:66:25:22:91:6d:0e:c6:c3:40:cc:c0:
                    8b:23:29:77:75:7e:87:49:25:ab:71:41:26:30:5b:
                    24:17:0d:a3:a2:b4:e7:3c:3d:59:94:1d:1a:7f:ff:
                    ab:87:a6:f4:fa:2a:4a:7b:be:66:53:bb:1d:a0:a8:
                    95:a5:57:bf:51:ae:58:5f:44:3e:1e:c3:28:96:a5:
                    2e:de:79:1f:7c:5d:2a:eb:59:34:b5:8e:2c:34:a5:
                    1d:39:cf:36:8e:37:f4:3d:76:d5:50:ae:66:94:ab:
                    1f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CB:1E:38:D2:F8:D3:E2:51:57:B6:70:FB:0E:22:07:66:E5:6E:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/06356a9a-a928-3159-af92-998e04f7da3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:5b:98:b7:aa:73:dd:68:2f:da:e4:8f:ae:6a:8c:08:ec:5e:
         4a:73:b1:e9:e6:97:91:f8:fa:fb:fc:95:00:52:3f:3d:4f:b1:
         5f:6f:c5:fb:04:51:7f:6f:30:25:7f:41:bf:a7:62:5a:bb:52:
         d8:e6:b1:f9:50:60:1a:f1:15:f5:06:b0:a3:81:db:5e:46:16:
         8b:9e:bf:40:c2:9c:2f:f6:c1:f5:b3:7e:f1:5f:17:09:f7:d8:
         3e:2b:7a:22:f8:1a:4c:0a:be:74:15:89:07:e7:8f:6c:8f:56:
         b5:41:49:c4:d6:11:3d:5a:06:83:64:b7:c2:b1:67:a4:5f:9c:
         ca:cb:89:ee:6f:40:9d:87:65:b4:d1:1d:fe:2f:46:82:14:c7:
         93:54:07:58:42:d6:a9:1a:c8:aa:7e:13:8a:b7:b8:db:aa:5d:
         8d:4e:fb:bb:ab:32:7d:04:fb:10:90:8b:a9:6f:49:07:30:9c:
         0d:87:ad:ca:e8:65:06:16:01:58:b4:e9:2e:f2:c7:ab:bd:f3:
         2e:cc:93:b2:3e:40:23:57:e9:65:54:e6:af:9e:f1:df:28:5a:
         ba:50:b6:13:e1:7c:60:9c:21:5e:60:fd:10:a1:1e:85:dc:0b:
         7d:ba:29:89:60:8f:26:bf:f2:36:87:54:17:5b:39:a7:e4:36:
         7e:5d:9d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:33:09 2025 by rpki-client