Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/22611c85-6a84-3f75-9c87-fbc41f2f6c50.roa
File:                     22611c85-6a84-3f75-9c87-fbc41f2f6c50.roa (raw, json)
Hash identifier:          fsryU65hTSxqMqtrbNuIzOQ9V+rEIwdPAX8TXwT3fos=
Subject key identifier:   B1:09:88:14:E8:81:88:52:7B:0C:69:A7:A2:5C:40:81:35:88:C3:93
Certificate issuer:       /CN=6f079fb3-68a3-45da-bc4a-cc678b0a6f45
Certificate serial:       010D0C9F4328584ACF7100489855A0BE5D379A00
Authority key identifier: 97:18:75:88:30:BB:DC:F0:A5:52:C3:9A:7D:72:7B:90:6A:E7:C0:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/22611c85-6a84-3f75-9c87-fbc41f2f6c50.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     6936
IP address blocks:        23.130.164.0/24 maxlen: 24
                          2607:e5c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:00:48:98:55:a0:be:5d:37:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f079fb3-68a3-45da-bc4a-cc678b0a6f45
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=a69a4ee4-a26a-49a0-a3b8-38695e2bd83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:98:24:b2:09:31:40:44:2f:a5:85:d0:54:11:
                    1b:97:29:25:f6:2e:ab:0b:76:17:9a:01:5d:3d:56:
                    2f:d2:5d:b4:0e:8b:fd:f5:73:5e:23:fe:39:99:0b:
                    34:04:cb:35:fa:df:77:56:2d:05:dd:14:70:0b:ae:
                    65:46:31:a0:a8:dd:cc:29:40:50:cf:6d:28:e8:a7:
                    ad:a4:f7:49:3a:d3:a8:35:d7:00:47:13:f5:3e:a5:
                    5c:47:13:9e:3b:44:09:a4:64:b1:0b:ea:8d:12:e6:
                    35:66:6b:51:dd:4d:a0:61:af:4b:37:c3:05:8c:47:
                    f9:ed:84:3d:c8:b5:ca:87:66:db:73:3b:dc:f7:a3:
                    b7:31:a4:fd:bb:69:c9:77:59:ec:5f:ac:fd:e3:03:
                    75:05:27:8f:02:7f:23:3d:3e:b1:ca:0b:13:c4:a5:
                    aa:54:f4:e4:64:11:44:7c:32:f7:bd:65:d2:77:b0:
                    8e:87:4d:31:16:bb:0b:3b:34:5b:ab:2c:11:57:9c:
                    0f:2b:ab:75:2e:b4:b2:07:17:69:df:99:57:64:33:
                    62:92:e9:0e:b7:df:96:f1:d3:09:8d:c5:94:e1:84:
                    94:5c:07:15:a3:9c:15:bf:5b:78:ab:13:07:b2:25:
                    23:81:4d:05:f9:35:85:59:dc:0f:8f:fa:c7:87:89:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:09:88:14:E8:81:88:52:7B:0C:69:A7:A2:5C:40:81:35:88:C3:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/22611c85-6a84-3f75-9c87-fbc41f2f6c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.crl

            X509v3 Authority Key Identifier:
                keyid:97:18:75:88:30:BB:DC:F0:A5:52:C3:9A:7D:72:7B:90:6A:E7:C0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f079fb3-68a3-45da-bc4a-cc678b0a6f45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.164.0/24
                IPv6:
                  2607:e5c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:02:31:e3:2a:de:b9:14:14:9c:fa:8f:a0:dc:43:8f:83:df:
         dd:fc:d1:34:8e:cb:ac:f9:c8:f8:f0:91:89:42:a3:30:a5:ca:
         40:e5:05:0c:40:21:a4:1b:3d:f1:ec:8e:1d:7b:19:79:bd:19:
         e2:35:e6:ef:ef:45:10:a0:6b:d9:d6:0b:04:09:7f:7d:b3:86:
         98:a7:f8:6f:5b:54:22:18:f5:39:58:ec:84:59:cd:9e:76:4e:
         51:fe:38:b2:25:5f:84:51:8b:2a:87:31:ab:f6:d6:64:b2:77:
         be:a7:79:db:dc:82:a5:4d:58:08:a3:29:9d:91:a7:b7:11:b4:
         11:61:25:d1:13:7c:ca:f5:d8:b9:ea:23:06:01:45:c9:eb:c7:
         8b:f1:9e:72:f4:70:83:26:48:47:fd:9d:2b:fa:1c:51:2d:c3:
         ec:0e:8d:0c:33:be:7a:4f:ae:2f:b9:e7:a6:76:42:ff:4d:20:
         e1:b8:44:79:8e:a1:29:4d:83:d9:8a:bd:5b:41:89:a9:be:f3:
         65:81:2d:c2:69:bc:2c:77:b4:ea:1d:44:fd:bd:56:c8:6f:48:
         dd:a9:1d:64:7e:c5:0a:f0:b2:a5:a2:89:2d:ce:3a:2a:40:0c:
         97:c3:9d:7b:c1:30:cb:1d:f2:bb:3e:ea:1e:b6:98:dc:79:cf:
         63:4d:79:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:51:29 2025 by rpki-client