Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/1c3009d6-b3d8-3ec6-a5f5-b9acd7b32dcb.roa
File:                     1c3009d6-b3d8-3ec6-a5f5-b9acd7b32dcb.roa (raw, json)
Hash identifier:          Zcbv7UeBPeRvPtPgSN0KyNDKQVqccJsYHsh1KGfYvtw=
Subject key identifier:   68:4E:37:D7:B3:32:2C:03:97:96:98:08:81:85:77:55:95:A8:57:FE
Certificate issuer:       /CN=b59002d2-8fd4-446f-987c-e63485cf1a5a
Certificate serial:       010D0C9F4328584A74B5E2E81B62A4F20BBA54E8
Authority key identifier: FF:E2:C6:56:96:3E:3C:7B:DA:13:F2:F1:01:66:AC:54:1B:F2:0A:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/1c3009d6-b3d8-3ec6-a5f5-b9acd7b32dcb.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     401630
IP address blocks:        23.133.100.0/24 maxlen: 24
                          2602:f724::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:e2:e8:1b:62:a4:f2:0b:ba:54:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b59002d2-8fd4-446f-987c-e63485cf1a5a
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=7c0f16b2-2f00-4ba8-bd2f-041755cae95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3d:f8:c6:af:97:71:70:10:93:1f:ce:af:f0:
                    6c:e1:2c:73:ce:43:03:7b:fb:62:b3:17:d8:85:78:
                    45:20:30:c0:cf:e7:40:60:a2:97:d8:1d:5b:5b:e9:
                    3a:83:00:23:c2:bd:c2:42:e0:9d:81:6e:eb:50:a4:
                    e1:a7:0d:df:e6:81:b5:79:9f:06:f5:85:f9:bd:4f:
                    e2:d9:d1:d2:73:3f:7d:4f:78:17:b8:bc:83:26:90:
                    62:49:93:c4:63:13:47:5b:7a:61:19:88:3e:cd:23:
                    54:2d:66:69:96:75:70:3d:f4:04:16:80:fa:96:87:
                    a3:02:b5:76:9c:ba:fc:f2:1b:d8:8a:79:cc:fa:73:
                    14:06:6a:b6:dc:62:fc:61:50:59:f5:d5:8c:9b:e2:
                    0d:f8:ba:68:56:79:de:69:9d:64:39:74:73:c8:8d:
                    f8:21:9f:14:5d:06:d7:11:92:dc:5b:37:cb:36:a3:
                    33:60:c1:40:a6:0f:a6:57:61:2a:1e:b2:f1:02:c4:
                    ce:d0:85:49:33:57:41:9b:81:8c:f2:9f:e4:da:ba:
                    93:95:8a:f8:95:26:1a:7d:c7:ce:cb:e2:94:71:2e:
                    9a:4c:a6:a5:46:1f:a5:97:6c:67:f2:e6:96:7e:4f:
                    f9:e1:30:b1:14:85:0a:09:34:de:b6:97:2b:79:b1:
                    f9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4E:37:D7:B3:32:2C:03:97:96:98:08:81:85:77:55:95:A8:57:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/1c3009d6-b3d8-3ec6-a5f5-b9acd7b32dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.crl

            X509v3 Authority Key Identifier:
                keyid:FF:E2:C6:56:96:3E:3C:7B:DA:13:F2:F1:01:66:AC:54:1B:F2:0A:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.100.0/24
                IPv6:
                  2602:f724::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:aa:80:54:d5:14:68:24:18:d9:32:b1:d4:bd:34:23:f6:12:
         04:d7:ff:71:63:c3:84:0c:56:a3:4d:52:a9:69:60:d6:b7:a7:
         05:77:d5:e0:54:2b:ca:92:4d:78:91:52:f0:fa:28:89:ff:a4:
         fa:49:a5:4b:b8:8d:0a:69:d4:19:2f:cb:2a:d2:a2:08:42:6e:
         6d:1c:fd:d9:e8:27:fc:20:87:e3:e1:7d:d4:cd:a7:91:dd:59:
         9f:9e:4a:b7:63:45:fe:97:c9:ff:c4:56:fe:7d:76:ee:02:22:
         50:38:6d:56:1a:02:55:c9:2c:9f:73:66:92:99:7e:2e:2d:52:
         8f:bd:47:7e:aa:61:0b:14:92:5a:dc:80:f9:80:4f:92:70:cf:
         10:7b:b0:8a:3a:89:87:f3:4e:87:03:17:9c:13:de:8c:ce:03:
         88:68:9a:c9:d4:20:c6:ec:58:de:31:07:e5:e5:c6:93:6a:a3:
         33:d9:f8:84:1e:4a:37:db:ff:4a:2a:30:af:34:29:16:21:2e:
         ce:09:59:4a:89:60:c1:18:71:41:ba:b6:7d:c7:c9:6a:dc:48:
         c5:bc:60:25:a1:1f:44:bd:9c:3f:2b:02:b1:a4:1f:b7:68:a5:
         b0:a9:2b:0e:2b:28:03:8d:e2:7b:76:ec:1f:a4:1d:d7:0e:26:
         8b:18:5d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:47:42 2025 by rpki-client