Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/eb191cb0-b137-3f4e-bdb3-d43c7dd76a30.roa
File:                     eb191cb0-b137-3f4e-bdb3-d43c7dd76a30.roa (raw, json)
Hash identifier:          WBBnBqK+fiKRluyBlanrgGArr66Oa6u9EtlBpBfgLOs=
Subject key identifier:   28:DF:5B:D1:EF:3D:1E:DB:3E:DB:2C:9A:DB:36:3B:30:AC:D3:34:2D
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584A8410F6476E8E280FB655B3C0
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/eb191cb0-b137-3f4e-bdb3-d43c7dd76a30.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     11870
IP address blocks:        167.23.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f6:47:6e:8e:28:0f:b6:55:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=8391c2ca-dd31-4df0-a3b6-58b8907bb120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:00:e8:17:98:0e:c4:6e:b5:f3:72:30:40:
                    f6:18:52:bd:33:5d:30:8b:e8:4e:f0:62:ce:0c:bc:
                    f4:65:78:ed:10:ce:ee:e8:6b:36:3b:e8:1d:b6:74:
                    66:f3:1c:ac:75:99:a3:c2:41:c6:2b:34:67:07:18:
                    18:ff:53:f0:ce:49:d4:68:ef:24:37:84:ba:ae:3e:
                    28:70:10:45:4f:07:32:7c:84:db:96:bd:d6:9b:cd:
                    f5:4a:c7:2f:3e:93:b1:bd:20:e9:c0:5b:02:c0:08:
                    00:a0:6f:12:1b:c4:ea:e0:38:b9:50:1d:da:57:35:
                    a5:71:36:b0:14:73:11:aa:72:8a:73:01:6e:f7:e3:
                    89:30:21:bc:38:bf:4d:0d:52:2f:4b:45:fc:cb:9c:
                    24:ed:85:fe:5d:a9:d4:e9:1d:9d:b1:d7:d8:cd:52:
                    3d:fe:33:ba:28:00:91:b2:26:58:c8:57:0a:04:76:
                    71:a9:70:7d:29:10:dc:f7:73:99:fe:00:70:f0:ba:
                    d2:1f:ac:e7:cc:d1:e0:13:89:a1:07:27:7f:54:90:
                    d6:34:6d:27:2d:4c:6d:21:91:10:23:2d:0a:3e:16:
                    ef:9b:b3:2d:76:51:3c:95:11:ac:f6:0f:b2:44:57:
                    e4:f1:95:5c:dc:3d:ee:21:4b:42:66:b6:c2:07:f5:
                    ef:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DF:5B:D1:EF:3D:1E:DB:3E:DB:2C:9A:DB:36:3B:30:AC:D3:34:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/eb191cb0-b137-3f4e-bdb3-d43c7dd76a30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:76:a7:9d:8d:61:a8:32:55:3a:cf:de:7f:32:14:e1:02:91:
         e0:58:87:01:20:b3:d0:90:91:f3:1b:74:20:bd:1b:6c:cc:87:
         1a:9f:41:d1:65:66:50:21:79:4a:90:03:13:3d:fb:16:61:70:
         18:19:86:59:63:ac:a1:36:ac:ea:b5:8f:48:3e:af:f2:4a:b2:
         c6:fb:68:11:db:d6:8b:d4:6f:54:ec:c7:18:64:b8:58:39:5f:
         f2:6c:3c:2b:d5:54:e9:8b:88:ac:79:00:ee:78:56:62:8e:0a:
         03:55:37:98:b5:da:d3:18:f7:05:3b:98:d4:f7:c8:73:44:d7:
         46:49:17:07:0f:54:07:8a:bc:c7:ca:a8:5a:6d:d7:4c:b1:c3:
         b4:90:c1:c6:8d:ce:0a:ef:bb:e6:7e:18:cb:27:f8:f1:4d:8d:
         00:22:c1:00:1a:62:b6:c6:39:cd:c7:2b:ff:c8:c6:b5:27:68:
         03:d1:63:a9:3a:91:06:0b:20:a1:87:ed:71:f0:e6:2a:0a:0b:
         b8:a1:00:98:44:57:02:06:03:e5:36:a4:2b:25:98:65:be:40:
         b8:fb:31:ce:67:c0:be:e3:76:97:81:6d:38:68:c4:b2:5c:8b:
         77:0e:79:3e:8c:8e:43:8a:a3:64:77:38:eb:cf:a3:5f:ab:e1:
         0a:e4:a1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:10:00 2025 by rpki-client