Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/29b86d3c-46e2-35a7-96eb-60fa4bdbbeb9.roa
File:                     29b86d3c-46e2-35a7-96eb-60fa4bdbbeb9.roa (raw, json)
Hash identifier:          M1W4H8Pkz03pG+aKG1dh1FMITCLJkqJpOnYT/UGyY58=
Subject key identifier:   59:6A:F5:10:A2:44:D3:65:D7:95:F6:47:02:A5:47:93:25:55:C7:D6
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584A51D065DBC8E996834A28C0C0
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/29b86d3c-46e2-35a7-96eb-60fa4bdbbeb9.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     29802
IP address blocks:        23.163.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:65:db:c8:e9:96:83:4a:28:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=2becc9b3-d3d1-4825-bce5-86edabb10089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:65:a3:aa:3e:4e:82:67:10:1e:16:0c:e2:
                    cf:58:40:88:a7:19:c0:90:7b:3b:5e:62:b6:cf:ec:
                    40:e6:05:29:68:4f:06:c2:09:2a:1a:4a:31:b9:0a:
                    6c:78:df:12:16:51:03:50:02:79:b8:49:c2:ef:0a:
                    67:b0:db:a1:c6:65:9c:c5:23:5d:54:0b:3c:38:8e:
                    1b:93:94:a1:09:72:e6:de:4b:aa:97:f7:e5:5e:11:
                    cb:9d:99:da:87:47:21:ce:ed:48:7a:d4:d1:8c:1d:
                    91:bd:d3:fe:86:2c:41:d7:47:6a:9d:1d:44:d6:32:
                    81:c9:5f:7b:58:4b:7b:be:5b:31:0f:32:7f:0c:f1:
                    5e:74:b1:9b:fa:3a:ae:74:76:5a:ec:38:ac:16:e0:
                    5b:94:8b:24:4d:86:70:b6:5d:03:bc:05:6d:b2:7d:
                    01:97:53:9d:b9:ca:7c:65:f6:61:5a:80:f8:3a:b2:
                    3f:2e:e8:94:7d:bc:9d:49:cc:11:d0:36:c1:79:e7:
                    01:18:69:29:a0:56:11:ae:5f:f9:6f:fe:79:42:57:
                    21:f7:d9:40:84:0d:53:5f:7a:3d:ff:aa:82:b1:38:
                    87:3e:97:11:c4:5f:aa:ee:e1:d0:51:ed:e3:de:3c:
                    b9:7c:32:c3:03:48:ab:38:e7:de:bf:74:48:ee:25:
                    d1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6A:F5:10:A2:44:D3:65:D7:95:F6:47:02:A5:47:93:25:55:C7:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/29b86d3c-46e2-35a7-96eb-60fa4bdbbeb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:bc:74:c2:3c:28:7a:78:e8:e6:62:e5:29:cc:dd:53:89:13:
         9b:c9:89:84:96:74:23:e4:10:a3:33:17:db:9d:d0:4a:1c:87:
         7e:fe:b4:d2:e1:f2:c9:6a:5b:46:b1:51:ab:1f:98:f6:11:b7:
         94:b8:0b:5b:62:e0:b6:1d:28:53:c7:11:7f:d0:0c:2a:6d:fb:
         dd:72:73:7a:44:01:03:37:10:94:b4:f2:d2:21:64:b3:db:b8:
         cf:7b:bd:b1:fc:db:7f:13:c3:d5:3f:1e:99:c0:91:de:2c:c6:
         36:39:0b:f5:24:36:5f:ec:79:83:3d:5d:a9:e6:5f:35:51:71:
         3a:2e:2b:69:fe:b2:9d:12:62:cc:18:d6:63:34:35:96:d1:89:
         94:92:5d:af:36:09:18:b2:f8:bd:9b:b2:f8:73:7c:44:18:66:
         7f:ee:ec:6d:03:53:67:26:02:e9:02:06:e5:cc:32:00:02:60:
         fc:a4:3f:5b:70:92:eb:bd:fd:4d:4a:e3:24:7a:87:d9:d3:ca:
         b3:23:8e:38:99:e8:2e:19:2f:8c:64:9d:03:3d:01:d0:c2:9f:
         0e:f9:7b:d9:7a:d5:ee:34:d6:38:a4:97:77:80:85:74:f3:a4:
         e0:2d:c6:22:f2:aa:96:af:b1:15:ae:63:6e:db:2c:98:b4:58:
         8f:43:65:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:28:17 2025 by rpki-client