Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5bdb8fd3-9599-4944-a7fb-c11b42f7cb54/18685571-b564-3e4a-be51-5f71488b398a.roa
File:                     18685571-b564-3e4a-be51-5f71488b398a.roa (raw, json)
Hash identifier:          N4vXZPhwBzDg4dt81h9YoaSsTU+JmAr11A4rCgQ+yAk=
Subject key identifier:   2F:38:28:B7:2F:8B:F9:A3:D9:7D:2D:23:BC:F7:29:F1:CF:32:EF:D0
Certificate issuer:       /CN=5bdb8fd3-9599-4944-a7fb-c11b42f7cb54
Certificate serial:       010D0C9F4328584A4AD59246E0903181B6B345A0
Authority key identifier: D1:DC:D2:6B:D4:A9:8F:7D:3B:00:6A:F2:A1:8A:51:CE:D7:CB:FB:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5bdb8fd3-9599-4944-a7fb-c11b42f7cb54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5bdb8fd3-9599-4944-a7fb-c11b42f7cb54/18685571-b564-3e4a-be51-5f71488b398a.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     401552
IP address blocks:        23.132.4.0/24 maxlen: 24
                          2602:f750::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5bdb8fd3-9599-4944-a7fb-c11b42f7cb54/5bdb8fd3-9599-4944-a7fb-c11b42f7cb54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5bdb8fd3-9599-4944-a7fb-c11b42f7cb54/5bdb8fd3-9599-4944-a7fb-c11b42f7cb54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5bdb8fd3-9599-4944-a7fb-c11b42f7cb54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:92:46:e0:90:31:81:b6:b3:45:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bdb8fd3-9599-4944-a7fb-c11b42f7cb54
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=999e21b6-ec8e-4734-ba59-b8d10136317c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e8:b6:ab:1a:db:0c:92:72:12:01:41:0c:2f:
                    25:c1:50:9a:50:1e:b4:e9:b8:78:3c:7e:d4:3d:1a:
                    0e:b6:92:e8:41:b8:8a:b6:58:24:22:12:04:d1:04:
                    4c:0e:68:04:bf:9c:ec:79:9a:ab:06:52:e5:25:ae:
                    db:85:57:38:f5:36:fe:a6:25:d2:21:fe:ec:80:be:
                    b7:fb:e3:17:b8:f6:d5:d8:99:f9:fc:73:b1:6f:c1:
                    19:94:7d:6c:94:87:bb:56:ff:ec:0f:d1:cd:ee:7e:
                    2b:92:cb:d6:84:38:d2:0a:14:e3:3d:fc:c1:79:2c:
                    6a:95:c5:06:8c:2a:fc:ff:fb:db:59:ae:a9:55:db:
                    ec:3f:25:6f:94:27:16:49:6d:80:a1:76:ff:95:f9:
                    c1:f4:a9:42:35:5f:17:33:4b:b2:7d:06:fc:a1:0a:
                    f1:33:f0:4a:2c:0c:21:44:7c:6b:98:51:60:a4:be:
                    29:af:cd:24:1f:d4:5d:0e:32:44:96:50:6f:05:15:
                    e8:e3:38:d9:61:b8:e2:73:5a:22:90:05:82:1b:f6:
                    f5:c7:19:d1:f9:cb:04:ad:e6:fc:d9:95:20:ed:d6:
                    dd:21:84:b7:e4:c6:b9:6f:16:20:11:85:59:69:42:
                    7a:d4:05:52:58:ea:58:f9:a5:7c:e8:b5:4c:02:2f:
                    c6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:38:28:B7:2F:8B:F9:A3:D9:7D:2D:23:BC:F7:29:F1:CF:32:EF:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5bdb8fd3-9599-4944-a7fb-c11b42f7cb54/18685571-b564-3e4a-be51-5f71488b398a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5bdb8fd3-9599-4944-a7fb-c11b42f7cb54/5bdb8fd3-9599-4944-a7fb-c11b42f7cb54.crl

            X509v3 Authority Key Identifier:
                keyid:D1:DC:D2:6B:D4:A9:8F:7D:3B:00:6A:F2:A1:8A:51:CE:D7:CB:FB:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5bdb8fd3-9599-4944-a7fb-c11b42f7cb54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.4.0/24
                IPv6:
                  2602:f750::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:60:0b:9c:85:37:4f:ba:0c:42:14:e9:8f:08:1d:8c:87:a4:
         74:d0:0c:fb:46:a4:c6:74:8c:f1:ad:67:2a:a9:ec:4e:8b:61:
         2a:8c:5c:68:dc:f6:13:46:3d:f1:23:e4:49:74:65:53:e3:f5:
         ed:38:b0:48:12:95:d6:a3:a7:1d:f9:fb:dd:1e:45:f2:48:dd:
         40:25:e2:15:02:c6:01:45:2f:f7:7a:0b:c1:6b:a8:cc:7b:fd:
         b9:07:af:c7:86:de:23:b3:90:67:88:78:81:32:c9:3f:a1:f3:
         c4:8e:96:b5:40:81:79:96:bb:db:f3:05:fb:b3:ce:04:13:bf:
         c2:f6:3c:31:48:ae:b8:d2:8f:fd:9d:50:74:98:ca:bd:f1:c7:
         e4:41:30:20:50:c1:38:56:76:e6:a7:ae:f7:33:e6:6a:04:f8:
         09:b5:57:b9:d9:a5:8e:3e:cf:44:50:cc:b4:75:ae:19:19:b6:
         ba:e6:9d:9c:33:2e:a9:7d:e7:0d:50:71:35:2a:89:a2:36:23:
         47:41:29:13:58:00:c3:00:d3:12:f7:b8:ff:8c:42:47:53:1d:
         89:dc:7b:1a:f4:78:43:c5:44:81:7f:7f:8c:f9:9c:0b:b5:09:
         a7:e9:1c:25:15:23:85:d0:58:d2:af:5e:16:09:85:2d:10:2a:
         be:df:df:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:01:57 2025 by rpki-client