Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/ddc565b0-5f73-3856-83ae-eb5a5e40ec78.roa
File:                     ddc565b0-5f73-3856-83ae-eb5a5e40ec78.roa (raw, json)
Hash identifier:          fOT6cVCfdcazejqDm6iXKKOuZR/vKEAmSFzdIZbW7z0=
Subject key identifier:   57:96:ED:8A:D8:32:72:45:04:47:24:2E:83:AB:D9:5C:AA:9E:04:37
Certificate issuer:       /CN=76dfbdf8-6f9c-4702-8da7-c6d5598c1126
Certificate serial:       010D0C9F4328584A480AEA5B12DD6436250C2BB8
Authority key identifier: 4E:7B:A2:59:20:66:94:5A:86:EA:37:F8:59:4A:86:3F:58:1A:D6:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/ddc565b0-5f73-3856-83ae-eb5a5e40ec78.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     401598
IP address blocks:        23.132.52.0/24 maxlen: 24
                          2602:f73c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:ea:5b:12:dd:64:36:25:0c:2b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76dfbdf8-6f9c-4702-8da7-c6d5598c1126
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=aa8f5fa8-857e-4129-8aa2-5b043335e03a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:8e:06:45:19:1b:0d:fb:20:b6:2d:91:0e:
                    cc:34:cf:1f:49:41:11:3e:67:2a:fd:6f:02:bb:87:
                    6e:59:42:c2:bd:c1:a5:cf:5e:b9:8c:36:1a:b2:54:
                    70:41:92:11:40:2d:bb:8b:02:43:46:87:f6:5f:9c:
                    fe:9f:6a:b6:76:f3:45:34:7b:13:9e:f2:ff:e5:36:
                    96:95:87:5c:00:c9:45:d2:88:31:a8:a4:fd:6d:53:
                    6e:51:9a:64:66:4e:96:52:5f:ee:d8:9a:85:6b:00:
                    0f:68:48:4f:8a:81:4c:56:52:4c:07:44:87:51:18:
                    ae:6d:60:05:8b:c9:19:c7:9a:9b:67:31:a0:6b:c5:
                    da:60:1f:91:a4:f0:61:1d:8e:f5:72:90:af:63:f6:
                    4d:50:35:9a:a2:05:09:bf:10:69:8b:ee:f4:da:76:
                    a3:66:47:4f:62:a0:3b:4a:b2:9c:c3:95:47:66:a5:
                    5d:53:b4:ef:f4:83:ea:83:4e:6e:ab:d4:31:da:12:
                    9d:86:e3:bf:88:f7:06:dd:2d:91:4e:c8:4c:22:04:
                    f5:c5:76:4f:7c:2d:af:e4:81:81:a5:e4:38:3b:2c:
                    6e:0f:0a:01:ae:f8:0e:77:fe:f4:8c:02:1e:2f:cd:
                    3e:7d:e6:39:10:6d:81:ff:d3:7c:46:d1:42:4a:5b:
                    45:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:96:ED:8A:D8:32:72:45:04:47:24:2E:83:AB:D9:5C:AA:9E:04:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/ddc565b0-5f73-3856-83ae-eb5a5e40ec78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.crl

            X509v3 Authority Key Identifier:
                keyid:4E:7B:A2:59:20:66:94:5A:86:EA:37:F8:59:4A:86:3F:58:1A:D6:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.52.0/24
                IPv6:
                  2602:f73c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:53:6d:4d:b6:fe:e6:31:37:d1:94:be:8d:22:be:0a:d7:f4:
         b2:6d:e8:18:68:f3:ea:00:41:a3:fe:df:bf:9c:03:63:63:45:
         ac:ea:e2:04:66:28:da:e3:46:a8:c2:9c:36:d1:e9:d0:b6:89:
         ae:1e:6d:03:ad:82:64:95:e2:9f:21:8f:97:7d:8c:f9:fa:11:
         cf:db:5d:29:81:44:b7:46:e1:c9:18:28:4e:f0:a0:8f:cb:71:
         43:25:41:a9:e1:1c:e1:ad:00:5b:ed:91:82:79:31:a0:f0:bd:
         5d:fa:6e:79:e5:45:72:3b:5d:ba:9f:6a:b1:2b:5a:17:f2:50:
         1e:41:62:69:57:f2:da:ad:c3:65:56:09:ee:89:a9:58:6a:8e:
         1d:35:0d:d1:f8:ed:35:21:6e:c9:25:fe:64:23:bc:c2:9b:45:
         0d:63:b6:3c:19:c6:6f:38:25:ff:e6:0e:ee:f3:85:d9:e1:1e:
         78:f2:d1:00:18:3b:b3:65:50:28:24:5f:7a:03:c7:27:9d:da:
         16:f7:8f:6f:6a:95:60:9b:a0:e5:7f:eb:59:ec:3d:26:0f:fc:
         d3:f1:4d:58:70:a2:ed:ed:61:8a:99:d4:68:f7:9d:d2:38:22:
         e8:cf:c3:0a:bd:93:31:73:9d:59:e5:61:09:da:76:22:ae:84:
         f7:bb:a9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:40:30 2025 by rpki-client