Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/c1c835cc-2456-303f-bdb1-b33a1c8480ce.roa
File:                     c1c835cc-2456-303f-bdb1-b33a1c8480ce.roa (raw, json)
Hash identifier:          T/DThLnsiSva3qV9gLJXWXiOG2yp0yOUn/4+fdHZvbs=
Subject key identifier:   C2:AB:FA:99:35:26:08:9C:30:B6:41:B0:06:F9:25:63:4C:DC:77:6F
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F4328584A10354CC725B7EF68C6B6FAD4
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/c1c835cc-2456-303f-bdb1-b33a1c8480ce.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     396982
IP address blocks:        23.174.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:4c:c7:25:b7:ef:68:c6:b6:fa:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=8a2b3bfb-d86d-4671-aa46-dba2f6d9b3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:11:d0:c0:b1:6a:24:73:6f:e6:bf:1c:3d:2e:
                    52:c4:74:f8:be:64:bd:9f:9c:2a:65:85:5e:c9:e9:
                    31:db:37:a5:16:e7:e9:f5:4d:95:d1:2e:b5:0e:97:
                    dc:52:fc:35:02:50:03:a7:15:bc:fa:b1:15:b2:f7:
                    6c:09:80:d8:db:2d:cf:59:24:b1:8e:61:92:d8:cd:
                    5c:51:c5:d2:5c:67:dd:63:15:67:39:6e:40:a2:53:
                    10:cd:cd:24:c7:f5:6c:fe:4b:64:41:a0:08:51:fa:
                    ca:39:99:8f:0b:48:3e:ea:80:27:52:d6:2e:b9:c6:
                    9d:93:1d:20:f3:75:0a:f7:7a:a9:f1:db:17:3c:9e:
                    2a:a1:b0:5f:59:d1:0c:a3:c4:d7:e8:2a:1c:1c:07:
                    32:67:3b:e7:44:53:b0:19:ab:01:9c:7f:6f:6e:39:
                    83:db:8e:16:a6:1c:92:7e:e7:66:0c:c0:90:74:80:
                    35:a5:2d:55:5f:90:47:7f:6f:49:94:ff:07:87:34:
                    84:50:53:83:b4:97:2c:18:de:74:bc:a9:8a:7a:fe:
                    58:d8:9e:d6:cf:bf:63:27:f3:15:02:2d:1b:f5:c8:
                    34:af:ce:66:ee:05:2d:b4:5e:f2:02:7a:82:06:a0:
                    a9:86:22:8e:3f:99:75:32:10:db:8e:0e:6b:f1:c3:
                    b6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AB:FA:99:35:26:08:9C:30:B6:41:B0:06:F9:25:63:4C:DC:77:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/c1c835cc-2456-303f-bdb1-b33a1c8480ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:2b:6a:53:07:d3:33:9f:04:84:64:48:24:f2:f5:1c:ad:0f:
         32:1c:f3:88:a1:52:97:ca:12:51:d2:21:fa:78:53:9d:25:28:
         26:7b:22:10:43:60:f4:23:25:ef:ce:0d:e0:20:48:0d:93:7e:
         e9:d1:2a:c4:be:b4:8b:0f:64:f5:03:b7:df:9e:53:83:42:6b:
         e4:d1:91:1f:4c:a5:16:dd:ca:64:f9:68:a6:ac:a7:fc:f1:80:
         82:95:81:54:d3:f2:23:8b:c0:44:2d:38:e7:2c:63:74:73:e5:
         b2:75:ea:a1:97:bc:2c:e0:b6:be:22:ee:05:a8:3d:da:4f:e2:
         5c:a2:ab:19:42:ed:af:90:c9:a8:f5:f1:4b:41:d2:ef:61:64:
         54:fb:5d:6f:93:dd:b2:d7:ca:47:c7:89:a0:b1:06:e2:8a:43:
         4a:c7:fe:0e:1b:25:f5:ad:8c:35:81:6a:0e:2c:64:6c:de:ee:
         2b:1e:31:b0:47:8c:ed:5c:bc:32:c5:82:a0:e5:22:f2:a0:3e:
         76:af:f9:90:8c:d5:58:72:89:02:c1:28:4b:f7:79:ba:d9:88:
         2a:33:ec:95:d3:7e:30:2d:f1:a7:46:c0:ae:66:fd:f1:a1:b0:
         f2:8e:7a:5a:6b:5b:1e:3a:cc:7f:eb:1f:29:03:a1:87:04:f6:
         be:7a:39:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:41:07 2025 by rpki-client