Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa
File:                     4b394ad3-feab-3d68-855a-82c3eb623e83.roa (raw, json)
Hash identifier:          KpJX4nK863vDiD3BfZ0C2WC9NZGvyVPCARfU1jou5eQ=
Subject key identifier:   E8:63:ED:43:AC:E0:8D:00:81:0F:15:09:5F:97:2A:4A:1E:46:4B:50
Certificate issuer:       /CN=dd3e6032-a6af-4662-8b07-848eeecc3995
Certificate serial:       010D0C9F4328584A77808E4CF81F06254D14D5C0
Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     46824
IP address blocks:        23.172.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:8e:4c:f8:1f:06:25:4d:14:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=419be7a4-20b1-461c-94ec-458c3d730dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ff:62:03:2d:72:92:16:c7:55:ec:63:cf:f3:
                    ad:95:b0:5f:54:1c:df:cb:1d:57:1c:0a:98:c7:ee:
                    5d:46:72:65:0c:41:e2:8a:98:6f:cf:70:42:f6:b2:
                    67:cc:24:e1:6b:47:1e:00:b6:48:3e:f8:59:23:02:
                    84:38:2f:c9:51:c8:b8:db:e7:b2:7c:46:37:8f:59:
                    7b:3b:9f:10:27:04:ea:85:b8:35:9a:26:49:00:6c:
                    f5:9e:04:21:24:b7:b5:f6:46:f9:fc:c3:14:12:7c:
                    e5:da:be:f5:bc:d1:3f:77:28:7f:ee:c1:91:f5:cb:
                    f9:c7:63:1f:86:ca:74:7e:88:56:36:8e:e7:12:8d:
                    65:73:b6:0b:22:8c:2e:7b:ef:81:f1:da:33:72:41:
                    d0:c4:99:2d:4d:01:c3:4f:ee:dc:56:30:d9:87:69:
                    32:4b:ae:2a:fe:37:82:a2:ce:83:68:38:59:e2:d8:
                    90:ab:f0:b8:25:22:54:57:b4:28:20:4b:36:a0:c4:
                    72:d1:a0:4c:c1:58:d0:cc:fb:15:bc:47:c5:0d:29:
                    c8:6d:79:1c:6c:de:e8:b4:db:df:c5:b5:68:79:d2:
                    1a:b7:b2:3d:0d:cb:d2:04:8e:d1:4f:40:62:ed:e1:
                    65:11:62:d6:70:39:72:51:a6:a3:b4:79:a3:b6:ae:
                    5e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:63:ED:43:AC:E0:8D:00:81:0F:15:09:5F:97:2A:4A:1E:46:4B:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl

            X509v3 Authority Key Identifier:
                keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:45:3a:47:70:e0:6b:ca:0d:a4:56:f8:ce:3a:f3:32:c4:1a:
         5c:93:64:4b:e4:fd:47:49:2f:90:25:9b:69:dc:2f:cf:c3:30:
         e2:8c:32:c9:8c:37:d5:6b:a1:77:ea:ae:41:63:32:72:5c:ae:
         38:db:95:ce:84:20:f9:68:10:dc:94:6d:f8:f4:2e:8d:9d:88:
         dd:4f:7a:b8:dd:02:d8:29:44:22:02:4b:c0:e1:76:e8:fb:46:
         77:c2:fa:4a:03:5f:36:2b:91:3d:bd:ae:78:d9:b9:7d:00:4f:
         be:53:ac:c3:45:72:f1:cb:bf:bc:7a:aa:58:a8:15:7e:8b:fb:
         7b:25:58:4a:f5:76:33:c4:f9:de:94:4b:31:60:0d:ec:7e:ee:
         4b:2a:bb:fe:bf:d6:40:8c:19:19:cf:95:51:a1:e9:aa:a8:8c:
         0c:dd:ad:12:8f:77:33:d0:29:26:22:b3:c6:ef:a0:0f:fe:e5:
         71:33:63:9e:52:ff:dd:62:45:78:01:66:74:70:f1:36:f9:f6:
         66:e5:8f:89:82:50:38:34:79:f8:1c:e3:9a:07:a4:e1:76:4f:
         7a:63:48:11:df:71:e9:46:26:76:e9:c1:18:9c:ae:f5:d5:f3:
         89:24:18:4b:77:ee:2b:57:2f:c1:6e:3f:ad:41:eb:0f:38:52:
         d0:f5:c9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:24:04 2025 by rpki-client