Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/52b924c0-a239-324e-9a22-250465491f74.roa
File:                     52b924c0-a239-324e-9a22-250465491f74.roa (raw, json)
Hash identifier:          3/SRNgDzpqIaSle6mMdVb9cqhAioOt2gOnSWVSC5r/E=
Subject key identifier:   B3:33:41:D7:FC:8C:EA:6A:FF:B7:09:72:8F:C6:DA:71:7C:F3:99:84
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584A8410F63841671B071FA17080
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/52b924c0-a239-324e-9a22-250465491f74.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     11870
IP address blocks:        167.23.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f6:38:41:67:1b:07:1f:a1:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=716b8a38-626e-4358-90b1-04f38433f072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bf:56:07:3a:c7:63:28:3c:b9:de:ef:8f:27:
                    b1:4c:51:27:2f:83:aa:4a:b3:e6:4c:45:75:e5:15:
                    78:e9:1e:52:1f:cc:3d:00:3e:c2:d9:5b:b2:e6:f0:
                    aa:d4:e9:d8:e4:62:36:50:97:c5:d3:96:eb:53:90:
                    cf:91:07:2c:7a:6e:24:fd:12:e6:2c:44:fa:50:c0:
                    bf:7e:10:df:e0:ad:a0:c6:f3:e4:6f:03:45:01:2d:
                    81:f7:71:6c:f8:60:0c:9f:8e:e5:a5:77:83:8c:b0:
                    c0:d8:82:4b:59:94:a8:88:c4:b9:a9:a0:fc:64:4f:
                    21:69:e2:f5:78:48:8f:75:da:1a:2e:65:c1:51:13:
                    b7:03:ae:72:da:42:b2:94:d9:1d:51:b3:c3:92:44:
                    11:17:fa:a7:4e:da:7f:e2:84:9c:05:f0:66:9d:2e:
                    60:3b:64:dc:fe:57:95:99:e1:02:ef:06:1a:29:c5:
                    e2:46:f0:ca:2a:45:d3:e7:0c:f9:92:ae:29:51:9e:
                    a7:6b:6e:92:e8:44:c7:46:cf:01:05:5f:7a:9a:60:
                    88:a2:e0:d2:6f:71:0c:3f:20:20:20:4b:ed:58:f8:
                    2b:e0:fb:b9:8e:a4:e9:03:03:17:4d:23:b9:1f:1f:
                    c1:82:67:bc:76:d8:82:42:1c:fe:7f:e7:e3:28:8b:
                    65:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:33:41:D7:FC:8C:EA:6A:FF:B7:09:72:8F:C6:DA:71:7C:F3:99:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/52b924c0-a239-324e-9a22-250465491f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:0c:d0:5d:ec:78:ee:2d:6d:42:b7:b4:ee:3b:9a:89:b3:1c:
         2c:7d:1a:55:de:00:54:3a:75:ea:3f:53:20:d9:fd:1b:3e:33:
         4e:fd:11:48:74:4e:d6:74:61:6e:38:31:c9:e2:ce:83:0a:9e:
         cd:3c:5f:28:49:09:e2:4a:3d:6c:78:cd:2a:da:77:99:7c:86:
         fd:0f:5a:2f:dc:04:6d:25:61:78:88:a9:f4:9e:1a:04:8d:ab:
         64:16:92:ea:62:26:22:5f:f6:9c:2b:15:18:32:a5:b5:09:44:
         0e:39:f8:bc:f8:d5:62:91:14:81:68:90:57:46:96:f3:bf:3c:
         10:43:f7:c4:27:0a:60:05:50:59:4e:6b:3f:c2:c6:a4:08:8b:
         d7:90:c6:d9:b3:ef:5a:1a:4c:19:df:7b:6e:0d:4d:f2:2c:00:
         01:ab:bf:e1:56:b7:2b:5a:0d:84:0d:72:5b:46:81:2c:49:13:
         3b:a0:b7:dc:86:d8:1e:c9:4f:a5:6d:82:fe:59:c7:fb:50:ea:
         5d:1c:0e:b6:e5:ec:10:24:c1:98:34:76:60:cf:6a:7c:a9:bc:
         72:e3:ef:54:6a:cb:32:2e:21:b7:4c:67:12:b0:63:47:66:fc:
         95:69:dc:4d:36:38:dd:ea:1b:69:f1:1c:6a:d9:30:87:d8:6b:
         67:70:b0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:53:42 2025 by rpki-client