Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa
File:                     9438e3b6-c8b0-3562-828e-38e2e3227244.roa (raw, json)
Hash identifier:          KK5LbNJyY9ayNnmgrPUQbDYUKHCJAlfKxjR6ctwHz9Q=
Subject key identifier:   BC:9A:04:E4:F6:B3:6B:CD:FA:1B:4F:21:D3:52:B8:17:10:68:BD:1D
Certificate issuer:       /CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
Certificate serial:       010D0C9F43285849F87A8DF0688078E2B0E02B00
Authority key identifier: CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     398698
IP address blocks:        23.165.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:8d:f0:68:80:78:e2:b0:e0:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=0e66c219-b312-4a5a-85f2-f7a88421d600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:f1:8f:b4:ec:16:c2:e0:93:e1:e0:d3:f6:
                    ea:a0:fb:e4:ec:f3:2e:37:48:be:3a:6e:e3:00:6d:
                    f5:9d:73:98:5f:3d:c2:a2:bf:c8:09:0c:eb:e3:ef:
                    96:a8:c1:88:0c:ad:2d:cc:1b:fe:2e:77:b3:8d:a5:
                    c1:5b:1c:a6:75:a0:38:af:06:15:d7:25:18:b1:39:
                    22:3d:a6:8d:a1:51:1f:36:29:9b:db:88:f1:ce:68:
                    9a:5e:d0:88:2c:33:0e:83:07:f6:2c:00:3d:b7:be:
                    c9:55:4a:15:fa:b5:e5:44:6c:6d:f7:70:b3:5c:67:
                    ba:47:51:f1:84:43:4d:32:fd:ce:49:3c:62:94:df:
                    dd:3b:45:ef:df:36:34:1f:fb:1e:24:c0:4d:bc:5f:
                    86:40:a5:5f:66:c4:b7:aa:d1:4f:4b:f2:82:6e:90:
                    42:00:19:18:f0:4a:9b:ef:80:02:ff:d2:14:7c:c2:
                    b2:ca:ec:d6:e4:ac:95:9f:f6:e3:fa:01:23:c9:3c:
                    4f:2c:06:0e:97:ce:76:f9:36:24:5c:6b:b9:5d:1d:
                    5f:5d:a5:d5:53:38:cb:f1:71:c0:f2:39:6a:c3:19:
                    2a:e8:61:a8:cb:74:44:e3:d2:b8:63:c1:2a:13:c3:
                    b8:17:73:cf:a1:a0:63:16:d6:44:fe:a9:3d:3b:c4:
                    6f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9A:04:E4:F6:B3:6B:CD:FA:1B:4F:21:D3:52:B8:17:10:68:BD:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:9c:b8:1a:0a:f3:06:5d:ec:c5:4a:72:a5:a7:01:42:e0:80:
         df:16:6b:a6:4c:e8:64:a9:bf:7b:2c:16:9a:f8:29:4e:bf:b7:
         06:42:68:8b:15:60:00:16:a9:bc:61:f1:e7:93:53:a6:43:43:
         9f:22:e3:d0:e0:f8:72:9e:26:cb:82:20:06:74:ce:11:c5:c2:
         03:a8:0b:0e:86:45:19:cd:bc:76:06:6f:12:b0:99:f7:16:a0:
         d8:af:30:3d:a6:59:7e:81:73:06:03:df:a8:36:99:e4:22:a5:
         1f:c8:a6:ef:77:37:4e:14:90:c6:1c:e1:8b:16:8c:f7:b3:cc:
         29:ad:31:5f:83:11:82:79:32:ee:c7:1a:31:55:33:a6:76:41:
         e6:ce:f8:b6:ad:7d:71:5f:74:13:b4:43:57:64:f1:a0:b9:ae:
         12:1c:c8:26:a9:3a:cb:28:6b:b3:7c:f0:da:bb:c0:e2:c0:c3:
         94:22:1a:69:36:80:a9:db:8b:9b:a7:ed:8f:77:ce:90:9a:83:
         82:26:a7:35:db:fd:ee:4f:2a:b7:6b:fc:51:80:f2:79:8c:79:
         fe:b4:98:c2:25:89:16:5e:7b:64:53:9b:75:4b:16:ec:e5:b3:
         87:12:ae:07:2a:af:a2:0a:49:e1:96:24:7b:e1:9d:25:bb:f1:
         0a:9a:fb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:02:02 2025 by rpki-client