Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/c553e00d-4392-39ae-9ae5-0cc1f65b8244.roa
File:                     c553e00d-4392-39ae-9ae5-0cc1f65b8244.roa (raw, json)
Hash identifier:          6VgO25eIKolyjOHOX8BPLxd+G9lSvL6VHWTj+azfOdM=
Subject key identifier:   5D:10:8D:A1:A1:2C:BA:84:E1:4B:A8:E0:05:C6:CA:18:22:AD:91:3D
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F4328584A6AF0949DDB432032BFEE9F00
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/c553e00d-4392-39ae-9ae5-0cc1f65b8244.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     29802
IP address blocks:        23.179.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:94:9d:db:43:20:32:bf:ee:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=b3fd3fdb-8189-47c3-be73-8771fef19703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:b1:53:00:72:ab:ec:c2:0f:23:0a:9e:a0:
                    79:33:05:67:90:58:08:3a:89:15:eb:1d:81:f2:f0:
                    db:4e:05:dc:48:c1:06:d0:9c:aa:c3:09:75:68:31:
                    43:11:d8:52:58:45:f0:16:86:01:09:77:16:f0:68:
                    85:5d:68:f0:28:b2:11:e2:8f:d0:01:f1:70:e4:4a:
                    0c:f8:b4:43:1e:95:2c:e5:fa:bb:6f:c6:6d:7c:a1:
                    7e:90:33:db:78:fe:e5:51:d3:cb:8c:85:26:e0:03:
                    c1:c7:51:30:b9:32:9e:74:8d:71:e0:44:94:5f:44:
                    08:0c:7e:68:ac:33:f9:82:da:82:55:2d:8f:17:4b:
                    78:9f:41:fa:55:24:2e:3f:59:17:38:39:08:dc:b2:
                    69:19:83:91:cf:7d:33:59:c1:c1:48:1c:fb:d0:16:
                    36:df:93:18:0e:13:ef:6c:dd:5e:fc:09:7f:fa:98:
                    a5:10:7c:e5:f3:3c:b6:bf:50:6d:33:33:e5:c4:9b:
                    7c:74:9e:c6:48:2a:35:3d:7c:65:64:f3:4e:5c:3c:
                    dc:50:cd:78:13:30:b7:f9:33:6f:aa:55:9a:44:32:
                    1e:78:54:98:86:1e:75:6b:ad:8e:d6:a8:b4:9d:a4:
                    2e:d6:d8:df:33:60:d4:32:24:f4:7d:54:e1:29:34:
                    c4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:10:8D:A1:A1:2C:BA:84:E1:4B:A8:E0:05:C6:CA:18:22:AD:91:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/c553e00d-4392-39ae-9ae5-0cc1f65b8244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:f4:ce:14:5d:a6:55:35:42:e2:3c:4d:ba:6f:23:4c:09:72:
         cf:0e:84:cb:17:76:ff:1c:25:20:8f:75:41:72:6b:2a:c5:f3:
         3b:50:ae:48:55:05:92:0e:37:67:a0:22:45:70:39:30:df:b8:
         ba:20:d6:d2:3c:4d:45:02:5b:84:a8:b2:10:ca:3c:89:1c:c9:
         50:be:a5:0a:46:ad:42:40:7c:46:ad:e0:2c:0b:6a:7b:7e:7e:
         19:07:b7:18:4d:78:0e:a4:da:b2:47:99:e8:8b:7c:f9:c6:35:
         43:7b:8b:66:ed:da:74:c6:96:a6:8a:03:4e:2a:c4:2b:d7:fe:
         c2:a8:ea:fd:7c:08:2d:12:38:31:37:96:46:13:9a:e4:51:9e:
         9b:3b:09:b4:bb:b5:28:81:af:12:ae:d8:80:90:df:e0:bb:23:
         f3:6a:27:9b:d4:ff:f4:80:fa:a4:a8:58:4e:44:6a:57:90:de:
         09:21:48:7b:de:69:ff:a6:ae:d9:99:d5:06:52:74:2a:d0:0a:
         b6:8c:d2:2f:61:7b:53:d6:8c:8d:e6:b8:72:0c:85:52:17:67:
         a9:55:19:6f:b9:53:de:74:b6:f8:3d:90:fe:cc:fe:fa:72:cb:
         e5:dd:9f:e0:73:f7:48:6f:3e:26:1d:66:8a:5f:03:16:3b:39:
         95:86:a5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 00:49:43 2025 by rpki-client