Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa
File:                     8e5abe26-35c1-3b16-9b96-323c165f8420.roa (raw, json)
Hash identifier:          XWo2UmozjXIzwWq6sDQylatYXxe0eklb/m5rVnl4h3I=
Subject key identifier:   30:95:36:3C:8E:8E:11:DF:B5:34:83:74:A1:2D:FF:08:3D:D3:BF:82
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584A8410F751A243DD3DB4CDA100
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     11870
IP address blocks:        167.23.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f7:51:a2:43:dd:3d:b4:cd:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=cc678da4-fbc6-4871-9495-2bfaccae1f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:4c:82:8e:0a:c0:ed:41:fa:cb:25:d0:85:
                    b3:43:fa:ab:fd:32:93:7d:2e:42:ad:d4:68:01:56:
                    9c:45:c0:f1:2a:2e:15:c2:f2:f4:90:fa:6c:a5:3c:
                    49:f6:72:36:26:1a:d6:03:f5:91:2a:ab:5f:ca:fe:
                    c0:46:1f:83:48:f7:2d:a0:2b:55:b1:cc:0c:85:96:
                    b3:b1:ed:b2:45:89:b9:1c:b2:4d:c0:dd:63:d0:17:
                    00:62:2f:c9:6d:d6:48:c1:ed:5b:c8:9e:13:3b:2d:
                    c8:2e:31:b4:f3:28:54:8f:d2:cf:e2:3d:b6:81:87:
                    0a:48:44:fa:4a:f8:61:b7:2a:dc:9a:37:ae:b6:fe:
                    2d:81:e5:50:4d:db:3e:fc:80:bf:d1:ce:3d:81:2c:
                    40:e8:fd:77:47:32:4b:e9:90:a9:dd:51:fe:0c:f4:
                    92:ca:e9:21:c5:61:91:ab:e3:78:72:e6:16:3b:b5:
                    5a:58:0c:cf:d9:ce:71:d4:49:fc:3d:8c:b9:12:cd:
                    d2:4f:d6:49:52:19:d1:39:e0:41:6a:0a:16:0b:74:
                    51:16:6f:91:57:3e:bb:77:12:02:9f:2b:a2:d9:c9:
                    9c:26:17:2e:df:33:eb:be:7d:61:c7:ef:3e:a1:9d:
                    13:88:5c:47:db:f3:93:c3:c5:de:37:43:ef:81:4b:
                    85:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:95:36:3C:8E:8E:11:DF:B5:34:83:74:A1:2D:FF:08:3D:D3:BF:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:62:66:d0:9a:79:a4:92:96:af:94:b3:66:f0:11:2e:23:cb:
         41:d7:96:5b:e8:12:64:c6:a4:d4:02:93:d7:a2:95:7b:6c:cf:
         6e:d3:03:33:b0:6f:d5:f2:be:cd:6b:35:b3:e3:dc:b4:32:5c:
         a0:93:95:c7:d3:de:31:bf:5a:dc:51:3d:46:2b:79:af:92:6a:
         90:9b:6f:67:e5:67:92:c3:e0:8f:38:c1:a2:47:4c:60:28:25:
         5e:86:73:0d:3d:d7:c9:c7:d1:44:1d:54:a2:90:ba:f4:7a:9b:
         12:ea:34:24:38:f0:7e:bc:58:f1:28:cd:2c:91:d8:a5:7e:35:
         f3:07:1f:83:22:8e:c7:95:71:60:d3:80:85:69:0d:b1:85:96:
         96:d2:33:91:b1:3f:50:bc:a7:85:65:24:29:a6:07:18:ab:7f:
         92:66:7a:a9:d2:7f:bf:ee:f6:41:10:ad:a1:de:08:3d:53:24:
         6d:94:1a:a9:47:87:27:fe:6d:29:a8:c5:66:8f:e9:89:88:6c:
         fd:24:d9:41:b5:64:23:66:b7:d2:51:bb:09:48:ac:cf:f2:60:
         84:ef:d9:86:64:f9:58:44:aa:9d:2b:56:ca:f6:3a:47:a6:90:
         e5:d4:a6:fc:0e:4b:14:97:30:33:6d:4c:ef:39:7a:3b:a1:81:
         b2:8b:71:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:13:28 2025 by rpki-client