Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/dff59291-b5c9-3e59-b7d5-550a9ded0ade.roa
File:                     dff59291-b5c9-3e59-b7d5-550a9ded0ade.roa (raw, json)
Hash identifier:          zI7km6LKyfD1nlRrXNP592IN/i9pdn5kTVe40rpqyHI=
Subject key identifier:   41:C2:9D:7E:CC:07:57:2F:8A:9F:6C:A2:2E:32:DF:A3:10:06:88:8A
Certificate issuer:       /CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8
Certificate serial:       010D0C9F4328584A348020E16EC8CA32A8ABBE00
Authority key identifier: 0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/dff59291-b5c9-3e59-b7d5-550a9ded0ade.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     16276
IP address blocks:        23.151.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:20:e1:6e:c8:ca:32:a8:ab:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=cf2c9d80-0f55-43bf-acd6-674e2e4e69de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a5:bf:65:94:ad:5c:2d:a1:c4:fe:38:6e:ce:
                    77:b4:82:0b:ea:71:36:b3:2a:1c:01:51:8e:13:f8:
                    33:f3:d3:8f:58:19:65:92:82:d6:03:6c:cc:dc:73:
                    40:68:49:f2:d1:4c:8c:6a:c8:e9:87:13:5a:d7:0f:
                    35:0d:f8:e4:93:16:e9:4a:d7:69:7f:98:44:47:6f:
                    19:6a:ac:2c:f6:95:ae:96:16:ec:31:32:bf:57:65:
                    61:a7:53:32:59:64:11:66:d3:d4:04:b6:f3:91:e3:
                    dd:ba:89:3c:61:4c:a1:ac:ff:b8:24:c3:1f:84:b7:
                    55:b1:1d:ad:9d:8a:fe:ac:21:42:d1:19:c5:64:2c:
                    3d:5b:9a:59:60:0a:ec:4d:b0:f8:b3:f3:6f:ba:9e:
                    b8:2b:87:ad:de:e6:e8:c1:47:be:94:94:8c:a0:dc:
                    d7:6b:9e:4c:7a:f0:76:dc:fd:29:93:6e:28:29:2c:
                    40:e9:00:28:a7:90:bd:3c:9c:b8:e9:2a:05:06:1c:
                    6c:53:21:38:22:67:3e:87:a2:db:55:19:72:e6:cc:
                    bd:9a:50:49:2f:00:de:3a:7c:a4:63:f0:d1:6b:f7:
                    ac:9b:03:d5:d9:c9:37:be:b2:ca:74:c3:65:59:92:
                    64:49:c6:34:c5:08:57:31:67:05:09:6d:b8:f6:48:
                    8b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C2:9D:7E:CC:07:57:2F:8A:9F:6C:A2:2E:32:DF:A3:10:06:88:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/dff59291-b5c9-3e59-b7d5-550a9ded0ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl

            X509v3 Authority Key Identifier:
                keyid:0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:b2:cc:94:22:24:14:1a:43:89:89:fb:9e:60:81:66:01:a4:
         f9:ba:08:12:fa:97:0c:25:da:70:61:63:77:98:db:ef:39:a5:
         d9:84:23:09:d8:b1:1e:96:2e:51:7d:ef:f3:7d:d9:e0:7c:de:
         1b:c6:df:34:63:16:6c:6b:45:17:75:25:aa:00:85:90:11:4b:
         0c:ba:d5:4a:75:46:c8:ae:d7:c9:a8:62:ca:44:ca:f0:6b:79:
         e5:da:a6:67:9e:3b:a7:0f:f0:9f:07:00:ea:98:82:5f:ad:e6:
         01:bb:fe:9b:21:a6:24:82:42:67:8e:d1:44:81:91:3c:cc:12:
         ec:65:c9:35:81:2c:c2:6c:40:a3:64:df:bd:53:64:f5:a3:c2:
         9e:48:d4:70:2f:7c:02:f0:55:66:d6:48:e9:50:0a:dd:fa:50:
         36:e6:72:32:be:d7:00:ee:2e:3c:96:ef:0b:81:b0:ea:10:35:
         b9:b3:fb:a6:c2:81:11:72:ad:90:8b:4c:90:90:bc:78:3a:a8:
         0e:c9:bb:c1:bc:33:2e:db:93:a7:9f:dd:bd:18:b8:04:51:fd:
         ff:7c:26:89:3b:b2:59:10:20:bc:33:1f:e8:8b:3e:18:94:9e:
         f5:bc:31:18:27:61:84:eb:ff:4e:59:1d:ce:41:34:e1:57:25:
         0e:14:24:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:03:35 2025 by rpki-client