Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/4c039b9f-7d95-385d-a4d5-7d3621295d94.roa
File:                     4c039b9f-7d95-385d-a4d5-7d3621295d94.roa (raw, json)
Hash identifier:          qQQs6cDx/yMjMqNTkKgoKsFC1dIEtLH2A0cgS3p9pCg=
Subject key identifier:   99:63:38:12:A4:98:CC:74:6B:EE:0F:44:DA:36:93:FA:DB:F9:9B:21
Certificate issuer:       /CN=6b21b55f-a9bb-4b07-bdd5-c38a703bf65c
Certificate serial:       010D0C9F4328584A698B13850DE0E56FFF2B7F00
Authority key identifier: 13:17:23:01:F3:49:65:C7:37:41:7A:B0:87:6E:9C:91:02:A8:66:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/4c039b9f-7d95-385d-a4d5-7d3621295d94.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     33741
IP address blocks:        23.184.184.0/24 maxlen: 24
                          2602:819:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:13:85:0d:e0:e5:6f:ff:2b:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b21b55f-a9bb-4b07-bdd5-c38a703bf65c
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=b59b31fe-63d5-4440-a975-bbd6e7db3f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a2:7c:52:45:8f:e7:fe:8b:27:94:74:99:91:
                    b9:96:3e:88:1e:70:73:d2:ce:07:ff:c9:ef:2a:d6:
                    68:f0:4a:54:ba:31:8b:6a:10:e3:9d:fe:c0:24:66:
                    29:26:a3:cd:c0:a4:eb:94:a0:1a:33:ec:3d:3e:fd:
                    f1:0e:d3:94:c3:3b:22:28:f3:49:4a:2e:3b:03:e7:
                    cd:84:b4:72:86:b8:67:9f:33:2b:6b:fd:8b:00:38:
                    c1:e5:43:49:89:52:24:c4:41:f1:b9:2d:48:a1:b8:
                    4d:c0:03:10:a1:42:2e:3d:08:25:86:ad:99:c7:7e:
                    4e:0f:e0:10:46:c9:4a:36:f6:cd:08:75:63:2a:9c:
                    8a:cd:f1:fc:eb:cf:cf:9b:fe:70:0c:46:2e:9f:f7:
                    82:25:3a:65:93:cc:9a:05:91:06:51:75:e3:16:c8:
                    44:d4:8c:91:bb:4b:c8:fa:ec:c9:21:e6:28:23:a5:
                    46:97:d4:db:5c:2f:99:46:b5:47:bc:1f:d1:0c:a8:
                    b2:e4:d0:0a:b1:7e:19:52:26:ff:9b:8c:55:7f:d0:
                    02:58:8f:cc:c9:73:13:52:08:db:29:bc:c5:33:cf:
                    78:85:eb:74:e0:2c:8e:fc:96:26:fa:07:db:f2:cd:
                    df:22:c7:11:a7:d1:2f:b4:2b:1d:3e:d2:b3:a8:bf:
                    5c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:63:38:12:A4:98:CC:74:6B:EE:0F:44:DA:36:93:FA:DB:F9:9B:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/4c039b9f-7d95-385d-a4d5-7d3621295d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.crl

            X509v3 Authority Key Identifier:
                keyid:13:17:23:01:F3:49:65:C7:37:41:7A:B0:87:6E:9C:91:02:A8:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.184.0/24
                IPv6:
                  2602:819:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:57:1f:eb:f6:e3:8d:e0:69:60:4d:ec:17:de:98:54:f2:76:
         f9:11:29:8e:be:f9:ee:29:32:db:38:73:22:45:e0:b7:73:f0:
         c1:b1:58:d0:75:14:70:da:22:2a:9c:36:39:cc:57:f8:c1:d9:
         c4:e8:ae:45:f4:b5:92:db:f6:f3:7d:e0:3f:30:ae:80:e7:cc:
         8f:a0:71:f6:72:2c:f7:12:ae:47:ab:28:f4:93:86:0a:e1:53:
         ec:94:92:4b:5b:ee:77:08:0f:c6:25:5f:e8:02:3a:3a:27:58:
         8d:73:9c:ed:33:02:91:9a:19:ae:5b:08:d3:26:9a:dc:85:e0:
         29:6d:89:90:0e:2a:c5:4c:e6:a6:51:94:51:fb:f2:da:25:77:
         a2:fb:ac:86:98:07:c5:3e:51:bc:fd:87:2e:ca:ee:50:bb:a2:
         3c:7f:85:1a:e6:4d:6e:d9:57:b7:5f:72:d2:01:52:f4:91:82:
         d8:ee:cb:bf:0c:8f:f0:3d:6f:70:37:07:2a:92:c7:7e:ce:c6:
         c5:ce:00:d2:71:27:32:ca:98:2d:07:e7:37:44:ea:58:39:28:
         4d:a2:76:3c:5c:f1:db:70:f6:a9:6a:e5:d4:82:ce:bd:72:0b:
         49:db:3c:31:ec:32:39:ce:de:6e:9a:00:c2:9f:60:03:6e:18:
         6b:1b:0b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 19:52:11 2025 by rpki-client