Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06c40e04-37a6-314f-92b2-f9883ffd0811.roa
File:                     06c40e04-37a6-314f-92b2-f9883ffd0811.roa (raw, json)
Hash identifier:          EoIcT7B2qlaO1UOlRAaFc93CoxK+vGYaHT4hxQal4oY=
Subject key identifier:   66:43:1A:77:05:EB:4B:7E:37:90:E7:1B:9B:3F:27:BF:4F:A8:34:33
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A8412231F3055C84DFC1557C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06c40e04-37a6-314f-92b2-f9883ffd0811.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        23.251.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:23:1f:30:55:c8:4d:fc:15:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ee88bfea-44e7-427f-9e52-2509e35fb443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:70:7d:ee:bb:7c:29:53:bd:e0:ab:66:44:
                    47:0d:6e:97:bf:83:1a:e9:34:a0:0d:9f:c5:0f:36:
                    d2:b9:13:84:62:6a:5d:15:bd:99:b8:06:e3:b3:c0:
                    0a:55:3b:eb:fd:b5:61:65:9f:4a:10:49:5b:f6:cd:
                    16:58:76:76:fd:7c:97:31:aa:17:7f:5d:f5:c7:7b:
                    e6:ef:e6:52:43:b1:a5:6c:61:11:08:a7:2a:87:31:
                    4a:da:b9:25:d9:3f:55:a4:8b:20:9e:8b:19:ce:cf:
                    81:05:49:40:9e:b4:57:55:ef:60:1a:ab:78:de:0a:
                    8d:3c:cd:06:2f:ae:4c:e5:25:df:28:49:ca:7a:5c:
                    4c:4d:99:50:9a:af:ec:6d:0f:cd:88:3f:55:8b:f2:
                    31:22:46:5f:24:ce:1f:3b:e8:fa:e7:08:0e:4b:80:
                    a5:ff:25:15:6c:c5:f3:ac:ed:68:0e:db:03:ff:c5:
                    e0:a6:07:a6:78:7f:31:4d:38:59:e3:00:54:31:79:
                    35:69:51:a6:6a:69:02:1a:e0:55:79:23:a0:63:7c:
                    b5:07:9c:74:b2:7c:3a:d0:16:08:56:6e:e8:0c:3c:
                    cf:c1:af:40:59:7d:27:f6:5a:71:e2:08:c3:bc:fa:
                    2a:b1:07:14:9e:c8:d7:1c:49:b2:6c:e7:d3:d6:27:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:43:1A:77:05:EB:4B:7E:37:90:E7:1B:9B:3F:27:BF:4F:A8:34:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06c40e04-37a6-314f-92b2-f9883ffd0811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ae:dc:0c:5c:ca:8b:70:ae:f8:3e:9b:a9:10:c9:89:c9:4b:
         93:3d:6a:ca:e8:62:5e:37:24:f7:9f:96:c2:6f:38:29:e9:e3:
         6c:3d:62:a7:28:06:7e:3b:ec:01:6c:93:cb:c3:b8:50:78:34:
         6a:16:f7:58:64:45:62:e9:72:14:ac:b7:e9:12:30:90:67:2e:
         dd:ba:5e:dd:57:84:95:d3:f7:96:47:6a:1c:89:bf:64:f7:80:
         12:72:20:50:d1:18:2c:8b:8a:0c:3d:e4:f7:85:79:3e:b1:7b:
         71:cc:e0:84:79:10:05:ee:d1:74:ab:e2:d4:35:ba:79:5d:70:
         8e:ec:31:5a:ed:b4:70:37:af:8b:f0:3c:3f:e3:13:20:60:af:
         34:0e:2c:6f:8a:2a:53:d2:3e:e0:d1:6d:be:3e:4c:1f:72:d8:
         94:50:60:4f:8a:c6:a3:1b:fb:6f:8d:64:7c:d0:ef:a0:f2:31:
         36:5f:e7:93:3a:68:57:4f:33:d3:90:d4:21:cb:b9:75:e6:92:
         b2:f2:97:f3:fd:1e:66:16:bf:55:bc:49:92:bf:f4:a5:b7:ad:
         1c:e3:af:bb:3b:71:ee:92:ea:d7:77:19:10:e6:91:2b:24:5c:
         04:f7:04:54:da:dc:38:64:2b:d9:b8:3d:ad:46:72:e9:32:26:
         26:12:de:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:17:21 2025 by rpki-client