Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b4271be-24be-4e3f-b6ab-bf0ddc950650/bc49e3ea-f128-389b-ab9b-3b78f0babf60.roa
File:                     bc49e3ea-f128-389b-ab9b-3b78f0babf60.roa (raw, json)
Hash identifier:          MDYn5AJt4uKeSNsS1MX2yGUmUvDfYLhaGesgwynL5qI=
Subject key identifier:   76:45:A2:CB:C6:EA:67:A6:83:88:5C:DA:E4:4C:17:5E:29:D5:FD:01
Certificate issuer:       /CN=6b4271be-24be-4e3f-b6ab-bf0ddc950650
Certificate serial:       010D0C9F4328584A09779CB84C5F3F1399544C80
Authority key identifier: E8:39:63:35:46:09:A9:DE:D3:0B:0D:49:D0:3A:ED:45:2E:52:C7:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b4271be-24be-4e3f-b6ab-bf0ddc950650.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b4271be-24be-4e3f-b6ab-bf0ddc950650/bc49e3ea-f128-389b-ab9b-3b78f0babf60.roa
Signing time:             Sat 31 May 2025 15:04:02 +0000
ROA not before:           Sat 31 May 2025 15:04:02 +0000
ROA not after:            Fri 29 Aug 2025 15:04:02 +0000
asID:                     214483
IP address blocks:        23.139.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b4271be-24be-4e3f-b6ab-bf0ddc950650/6b4271be-24be-4e3f-b6ab-bf0ddc950650.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b4271be-24be-4e3f-b6ab-bf0ddc950650/6b4271be-24be-4e3f-b6ab-bf0ddc950650.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b4271be-24be-4e3f-b6ab-bf0ddc950650.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:77:9c:b8:4c:5f:3f:13:99:54:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4271be-24be-4e3f-b6ab-bf0ddc950650
        Validity
            Not Before: May 31 15:04:02 2025 GMT
            Not After : Aug 29 15:04:02 2025 GMT
        Subject: CN=c4663471-9ac5-4ebe-ac26-f95155f6df00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:78:03:e7:7d:b0:5a:bd:f7:fc:04:75:64:bd:
                    e7:9f:1d:40:d7:17:c8:ce:5a:8c:2b:46:30:fa:a4:
                    ed:e0:7e:77:4e:cd:5a:b5:cd:09:09:df:f7:01:20:
                    bd:49:e6:b0:29:ad:b0:b8:20:0e:9e:28:64:f7:93:
                    69:8c:19:64:77:01:58:d2:67:1f:ae:87:a2:50:1b:
                    a0:43:b4:83:73:6a:7f:dc:92:23:b4:46:62:38:5f:
                    cb:54:f2:83:e9:3b:b0:e2:9d:1c:cd:54:ee:bf:21:
                    58:53:6f:a8:79:4a:40:20:4e:4f:02:9b:c3:4c:8f:
                    93:81:bf:87:98:04:b9:c6:e6:25:dc:6a:9b:67:0b:
                    ce:cc:fd:14:05:ce:33:3f:c5:62:ee:5d:32:b9:85:
                    f5:f6:2c:6a:62:5b:96:52:12:7e:53:2d:0b:1c:f4:
                    9a:6b:73:15:36:86:f8:d7:67:4c:3a:5c:a8:e0:db:
                    c4:d5:b4:63:a1:42:1e:b1:d4:42:ef:5d:cb:49:bf:
                    e1:41:84:81:71:be:d2:cc:28:34:60:d0:c2:0a:2f:
                    ed:e0:c5:da:77:c2:2c:30:88:eb:bb:70:d2:5b:86:
                    52:84:d8:83:c6:d9:f4:9f:16:11:42:02:61:01:a9:
                    70:b5:f6:6c:27:f5:b3:3d:b5:ba:cd:45:cd:4d:18:
                    e2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:45:A2:CB:C6:EA:67:A6:83:88:5C:DA:E4:4C:17:5E:29:D5:FD:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b4271be-24be-4e3f-b6ab-bf0ddc950650/bc49e3ea-f128-389b-ab9b-3b78f0babf60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b4271be-24be-4e3f-b6ab-bf0ddc950650/6b4271be-24be-4e3f-b6ab-bf0ddc950650.crl

            X509v3 Authority Key Identifier:
                keyid:E8:39:63:35:46:09:A9:DE:D3:0B:0D:49:D0:3A:ED:45:2E:52:C7:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b4271be-24be-4e3f-b6ab-bf0ddc950650.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:3d:46:1d:69:f6:30:46:43:69:6a:db:03:52:60:85:5a:a0:
         f2:9e:7a:bb:65:e9:92:02:6b:f2:77:8e:57:31:99:f8:73:d5:
         8a:f1:7a:ed:06:6c:6d:6e:11:cf:bc:94:b4:16:ee:60:ab:a8:
         cf:b8:50:9a:92:71:5f:91:e0:9c:46:37:7a:c9:32:8f:65:e8:
         a8:e5:c9:98:46:04:1f:f6:eb:f5:b8:3d:5a:b4:dc:53:59:76:
         bc:e4:37:3e:05:65:23:9b:77:19:4b:83:d2:89:83:24:c4:1e:
         18:ad:37:84:fe:d0:7f:50:bf:5f:1e:65:2d:7c:53:99:6d:70:
         eb:03:72:76:6c:fb:31:96:eb:c7:ec:a6:6a:8d:8b:92:7f:33:
         b0:87:73:c4:36:0c:6a:e1:ea:7e:cb:c5:10:c2:98:40:6a:d2:
         17:f3:05:c1:41:4e:bc:55:06:09:14:5f:08:72:92:e0:1d:d2:
         c8:93:20:90:fe:a7:97:01:17:a6:00:18:43:c2:1b:86:bf:f1:
         70:91:d4:aa:56:68:b8:27:46:54:4b:35:a5:ed:0d:4f:ac:39:
         03:18:c2:9e:6b:7a:97:b8:9f:47:45:d4:bf:29:98:df:3b:34:
         d1:bc:a1:08:89:08:ff:4c:6e:5a:dd:bb:5b:14:bd:b9:50:3d:
         78:26:96:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:44:13 2025 by rpki-client