Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/b662fd99-1a23-3aaa-9da3-01d3658ac226.roa
File:                     b662fd99-1a23-3aaa-9da3-01d3658ac226.roa (raw, json)
Hash identifier:          RBYlsdRjJFBfwf3IyKgvluzk+FAiGYdH5/UAu8eEp3U=
Subject key identifier:   DC:E6:D5:1E:BA:6F:5A:72:46:B1:C9:BE:5F:B3:38:4E:60:B7:E2:B8
Certificate issuer:       /CN=e0d5040c-5662-40a2-8f67-208db4fb8fd0
Certificate serial:       010D0C9F4328584A3E45AAE1E70FA8DCA0DC2200
Authority key identifier: CF:71:CB:79:56:FF:01:E1:12:CD:7A:F1:B0:1C:97:9F:93:A6:25:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/b662fd99-1a23-3aaa-9da3-01d3658ac226.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     53301
IP address blocks:        23.167.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/e0d5040c-5662-40a2-8f67-208db4fb8fd0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/e0d5040c-5662-40a2-8f67-208db4fb8fd0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:aa:e1:e7:0f:a8:dc:a0:dc:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d5040c-5662-40a2-8f67-208db4fb8fd0
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=883ee541-f9ce-4c31-b377-197bc294068b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:75:89:da:fa:24:a5:c3:e4:2e:e1:6e:34:
                    40:0c:a5:91:1f:61:50:45:93:61:d4:bb:77:82:83:
                    c5:85:9f:fe:48:dd:1c:34:b2:17:d1:30:63:a8:e5:
                    e4:e2:16:95:97:71:67:72:fb:8e:e8:22:ae:84:94:
                    4f:a0:ad:b0:00:e9:3d:bf:63:85:09:15:f7:9b:ce:
                    a9:c1:e3:07:6f:a9:27:8f:6f:ba:12:b4:04:16:3e:
                    eb:9c:ab:da:0a:18:eb:37:83:e3:17:23:40:04:51:
                    c3:78:6e:94:69:6d:9d:00:f7:b4:68:b2:0a:ba:86:
                    7c:2c:9d:d6:9f:6a:1b:26:31:05:c1:08:e7:ba:35:
                    eb:40:3a:f5:32:89:12:f2:66:57:17:7d:6f:b9:2e:
                    43:99:ad:05:bb:c8:db:35:71:d1:73:63:18:aa:64:
                    29:97:f7:d5:ab:61:f4:fd:a8:63:58:4f:11:17:8a:
                    7d:54:ae:f1:ff:6e:3d:63:2b:05:22:a0:54:d2:4b:
                    86:40:7b:25:72:66:02:13:6d:16:70:68:57:93:b7:
                    cf:97:63:34:83:9d:44:91:ea:ee:fe:2e:0f:34:b5:
                    4e:57:39:59:2b:4b:04:43:b6:1b:83:ed:46:cd:53:
                    6d:97:3b:48:89:1e:42:e4:a6:d0:69:a8:cf:55:08:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E6:D5:1E:BA:6F:5A:72:46:B1:C9:BE:5F:B3:38:4E:60:B7:E2:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/b662fd99-1a23-3aaa-9da3-01d3658ac226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/e0d5040c-5662-40a2-8f67-208db4fb8fd0.crl

            X509v3 Authority Key Identifier:
                keyid:CF:71:CB:79:56:FF:01:E1:12:CD:7A:F1:B0:1C:97:9F:93:A6:25:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:50:0b:6b:89:d2:5e:c9:c7:2a:a1:f4:98:5e:cb:5b:b1:9a:
         d9:c8:ec:04:be:97:bf:91:f5:8c:b1:92:22:6f:3c:98:7d:dc:
         81:8d:e9:1e:05:8f:16:67:56:e2:41:d5:2d:b5:f8:24:68:b0:
         ef:03:d3:bb:1f:57:a3:f8:eb:9e:be:de:31:d1:5e:e1:c7:eb:
         52:bc:d9:25:90:d8:5c:2d:54:c9:bb:ab:03:95:cc:0f:71:de:
         3f:33:12:42:b7:30:51:9c:63:53:d1:27:8c:b1:38:41:80:4e:
         df:ca:4f:44:7d:50:79:1f:d6:07:ab:5e:b5:46:b5:f1:fb:dc:
         d4:99:0a:ca:07:62:6c:8f:a4:b0:87:49:f1:f9:62:ff:f8:f1:
         f0:59:c2:8f:25:f5:92:19:09:54:d7:78:dc:ce:59:ba:93:3b:
         f9:b5:ba:a1:51:30:1b:18:08:13:f5:da:37:ad:e1:e8:8c:28:
         b8:66:08:e0:09:c6:28:4b:8e:a4:f3:f0:51:9a:3c:27:d0:73:
         ad:d3:d6:71:2f:b4:39:2a:28:a9:2b:75:e7:5a:5d:b5:49:4b:
         ca:e3:87:a7:d6:06:1b:92:e0:a9:75:d4:80:06:fb:18:42:1f:
         57:df:e9:41:e5:41:ef:d4:17:4b:9a:28:15:b7:b0:2a:c3:e1:
         e4:7f:16:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:06:13 2025 by rpki-client