Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06b5da51-84a0-4750-bb07-c98aff0510db/c4d24cc7-de0b-33b6-b92c-783d5f9b4201.roa
File:                     c4d24cc7-de0b-33b6-b92c-783d5f9b4201.roa (raw, json)
Hash identifier:          J+eaccJIKcHPdsE/zzAlqMULlgi7BTB48P+WVF7vF0o=
Subject key identifier:   5F:5E:F7:20:C1:81:07:5E:4C:73:E9:D3:8A:FC:02:35:33:A1:47:E9
Certificate issuer:       /CN=06b5da51-84a0-4750-bb07-c98aff0510db
Certificate serial:       010D0C9F4328584A4022E84031944C0E3B191900
Authority key identifier: 5F:EF:8B:20:E4:A6:31:28:01:4E:1F:84:BD:0D:D0:79:36:D4:9E:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06b5da51-84a0-4750-bb07-c98aff0510db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06b5da51-84a0-4750-bb07-c98aff0510db/c4d24cc7-de0b-33b6-b92c-783d5f9b4201.roa
Signing time:             Fri 20 Jun 2025 05:02:50 +0000
ROA not before:           Fri 20 Jun 2025 05:02:50 +0000
ROA not after:            Thu 18 Sep 2025 05:02:50 +0000
asID:                     401541
IP address blocks:        23.167.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06b5da51-84a0-4750-bb07-c98aff0510db/06b5da51-84a0-4750-bb07-c98aff0510db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06b5da51-84a0-4750-bb07-c98aff0510db/06b5da51-84a0-4750-bb07-c98aff0510db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06b5da51-84a0-4750-bb07-c98aff0510db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:40:22:e8:40:31:94:4c:0e:3b:19:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b5da51-84a0-4750-bb07-c98aff0510db
        Validity
            Not Before: Jun 20 05:02:50 2025 GMT
            Not After : Sep 18 05:02:50 2025 GMT
        Subject: CN=516ad3c1-2eae-4216-8922-6d542e6e9e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:95:0e:58:2b:d2:eb:96:2c:e0:b1:8d:ca:
                    e9:f4:ca:26:ea:68:45:e7:84:dd:58:3c:84:f9:5d:
                    02:a5:5d:17:df:f7:01:a3:a1:57:20:6c:e7:a2:7e:
                    ed:d2:c4:b4:9c:c4:94:dc:72:7e:79:24:db:ba:4b:
                    6c:8d:52:9d:00:5d:be:8a:54:f6:2d:2d:88:02:a2:
                    5c:62:bd:67:b9:a3:35:ce:90:e9:89:c1:92:22:c8:
                    78:08:40:31:14:e5:e5:f5:2d:c9:7b:d7:3c:e2:a3:
                    be:e9:ac:89:61:3f:49:4d:9d:76:7a:8a:ca:9d:61:
                    60:90:4c:b3:49:46:22:56:3e:bd:eb:9a:2e:19:26:
                    55:ea:d3:1d:6d:f5:cb:cb:cd:2b:e2:1b:14:fd:fd:
                    02:11:0e:10:4f:95:ab:03:0d:e2:85:80:4e:46:ac:
                    54:6c:2b:04:e6:c0:93:a4:db:61:f7:b1:12:2c:c8:
                    be:55:de:ad:31:f3:ae:64:08:d7:f9:94:60:cb:30:
                    c8:d5:c6:c6:db:15:3f:f5:59:64:53:23:3e:45:06:
                    4c:c1:11:0d:fd:c5:a8:31:78:72:3c:ca:8c:62:b5:
                    bd:58:44:cd:e0:3e:a9:24:8d:fe:db:bd:2c:4f:71:
                    48:6f:ab:2d:e0:ce:c3:32:ac:a5:63:7c:1c:71:40:
                    ea:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5E:F7:20:C1:81:07:5E:4C:73:E9:D3:8A:FC:02:35:33:A1:47:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06b5da51-84a0-4750-bb07-c98aff0510db/c4d24cc7-de0b-33b6-b92c-783d5f9b4201.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06b5da51-84a0-4750-bb07-c98aff0510db/06b5da51-84a0-4750-bb07-c98aff0510db.crl

            X509v3 Authority Key Identifier:
                keyid:5F:EF:8B:20:E4:A6:31:28:01:4E:1F:84:BD:0D:D0:79:36:D4:9E:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06b5da51-84a0-4750-bb07-c98aff0510db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:28:29:a1:27:eb:99:dc:da:7a:fc:7f:c9:83:e8:bf:a0:a0:
         24:bc:a3:80:95:f7:7e:39:8d:f8:55:f0:8b:c5:a0:9f:b9:c9:
         cd:44:59:85:33:2c:dd:5b:e8:38:aa:d9:c9:b6:29:42:60:50:
         b6:68:5f:6c:55:f1:22:7a:85:4f:f9:d1:c3:48:e6:24:f2:d2:
         f5:23:cb:af:83:47:3e:5e:e4:e1:10:4f:73:36:9c:bd:c7:3e:
         99:4b:65:fe:4b:be:a8:be:96:b9:26:91:e0:e4:fe:41:28:22:
         7a:8a:e8:76:b6:4f:58:44:67:01:38:e1:4b:7d:0c:06:39:91:
         5e:9d:3f:34:3c:52:35:7d:ee:53:b3:a0:81:e3:38:62:cc:13:
         20:9a:53:7b:d2:ef:b0:3d:af:66:b0:f6:eb:63:16:72:2a:ac:
         6e:33:4a:7b:35:15:7e:e1:44:84:2c:7c:c9:52:19:fe:d5:62:
         16:25:16:8f:bc:1b:1b:58:eb:c5:53:74:33:04:03:fc:b9:7e:
         45:3a:07:89:b8:5a:a5:60:25:ed:0f:9f:25:81:26:45:2b:b6:
         f2:ad:e5:63:80:cf:10:3d:e4:b7:f2:9a:20:ca:7b:d3:db:2a:
         cd:c1:27:b9:9d:5c:4c:d3:8b:7f:10:df:7e:50:b2:9d:77:c9:
         50:09:86:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:16:00 2025 by rpki-client